389-users May 2011

389-users@lists.fedoraproject.org

36 participants
41 discussions

Re: [389-users] 389 directory capacity query
by Steven Li 18 May '11

18 May '11

Resent -----Original Message----- From: Steven Li Sent: 5/18/2011 [星期三] 13:50 To: Steven Li; 389-users(a)lists.fedoraproject.org; 389-devel(a)lists.fedoraproject.org Cc: Ivan Wang Subject: RE: 389 directory capacity query Resent -----Original Message----- From: Steven Li Sent: 5/18/2011 [星期三] 13:35 To: 389-users(a)lists.fedoraproject.org; 389-devel(a)lists.fedoraproject.org Cc: Ivan Wang Subject: 389 directory capacity query Hi All Now I'm begin to apply the 389 Directory server v2.6 into our env. But I want to have a check, do we have a test about the capacity of directory server ? such as what the maximun entries can be supported, what's the best deployment for large user store. As I need it to support max 200 millions users. do you think is it possible to store so many entries in the server, and if it's possible, how should I retrieve it ? Thanks.

1 0

unable to read schema
by Stephen Lorenz 16 May '11

16 May '11

Hi, We are trying to set up our 389 DS instance and everything seems to work except that LDAP browsers cannot seem to access the schema. For example, in the LDAPSort LDAP Admin Tool we receive the error message: "Unable to read schema!!" Unable to read schema, please login/bind with an account which has access to schema - You can also rebind with any entry using the right-click menu and selecting rebind. However, we are not trying to access the directory anonymously; we receive this error even when binding as Directory Manager. We also cannot browser the schema using a standard ldapsearch command. Any ideas of how to enable schema reading? Thanks, Stephen

2 1

upgrading to multimaster
by Karoly Czovek 12 May '11

12 May '11

Hi, what is the simpliest way to upgrade a master-slave replica with 4 slaves to a 4way multi-master replica, with no, or with the less service downtime? -- Karoly CZOVEK Global Systems Administrator MoveOne IT Department Eastern Europe - Balkans - CIS& Central Asia - Middle East& Africa - Asia Pacific phone: +36 1 266 0181 - ext.6710 mobile: +36 70 708 9953 skype: mo_karoly.czovek email: karoly.czovek(a)moveoneinc.com web: http://www.moveoneinc.com

1 0

Upgrade to 1.2.8.2
by Reinhard Nappert 11 May '11

11 May '11

Hi, is there somewhere a flag not to switch the entry format? I don't have an issue with a fresh install (just add nsslapd-subtree-rename-switch: off to template-dse.ldif). But I run into issues, when I upgrade existing Fedora DS 1.1.2 to 389 DS 1.2.8.2. I run setup-ds.pl -u ..... Thanks, -Reinhard

2 2

MMR issue, when deleting the replica setup.
by Reinhard Nappert 10 May '11

10 May '11

Hi, I noticed an issue with 389 DS 1.2.7.5, which I have not seen before. Here is what I do: 1. I create a two multi-master setup. 2. I don't perform any changes on the directory. 3. I delete the replica setup on both systems -- everything is fine. 4. I create a two multi-master setup. 5. Perform changes on both systems 6. Modifications get replicated. 7 I delete the replica setup. No I get the following error logs: [09/May/2011:15:43:18 -0400] - import userRoot: Import complete. Processed 446 entries in 4 seconds. (111.50 entries/sec) [09/May/2011:15:43:18 -0400] NSMMReplicationPlugin - multimaster_be_state_change: replica o=base is coming online; enabling replication ... [09/May/2011:15:45:21 -0400] NSMMReplicationPlugin - agmt_delete: begin [09/May/2011:15:45:22 -0400] NSMMReplicationPlugin - replica_config_delete: Warning: The changelog for replica o=BASE is no longer valid since the replica config is being deleted. Removing the changelog. [09/May/2011:15:45:22 -0400] NSMMReplicationPlugin - changelog program - _cl5Add Thread: invalid changelog state - 2 <== This is good! [09/May/2011:15:45:27 -0400] - libdb: <path to>/changelogdb/7773fd02-7a7411e0-ac71f4b1-0fb2d026_4dc840d3000000020000.db4: unable to flush: No such file or directory [09/May/2011:15:45:27 -0400] - libdb: txn_checkpoint: failed to flush the buffer cache No such file or directory [09/May/2011:15:45:27 -0400] - Serious Error---Failed to checkpoint database, err=2 (No such file or directory) Of course, the changelog directory was gone. It looks to me that the server keeps this still somehow in memory. I enabled the audit-logging: This is what I see there: time: 20110509154521 dn: cn=changelog5,cn=config changetype: delete modifiersname: <credentials> time: 20110509154522 dn: cn=agreement1,cn=replica,cn=o\3dbase,cn=mapping tree,cn=config changetype: delete modifiersname: <credentials> time: 20110509154522 dn: cn=replica,cn=o\3dbase,cn=mapping tree,cn=config changetype: delete modifiersname: <credentials> time: 20110509154522 dn: cn=o\3dbase,cn=mapping tree,cn=config changetype: modify replace: nsslapd-state nsslapd-state: backend - replace: nsslapd-referral - replace: modifiersname modifiersname: <credentials>- replace: modifytimestamp - replace: nsslapd-referral - replace: modifiersname modifiersname: <credentials> - replace: modifytimestamp modifytimestamp: 20110509194522Z - time: 20110509154605 dn: cn=uniqueid generator,cn=config changetype: modify replace: nsState nsState:: AM+94nR64AH0sQ+y0CZxbAEAAAAAAAAA - replace: modifiersname modifiersname: cn=server,cn=plugins,cn=config - replace: modifytimestamp modifytimestamp: 20110509194605Z - Has somebody has seen this before. Thanks, -Reinhard

2 3

creating certs
by solarflow99 09 May '11

09 May '11

Hi, i'm trying to setup replication, and was wondering how we can create self signed certs? The docs only say to send it to a CA, but not how to do it yourself. I don't see where the private key is for me to do it from the command line. Thanks,

2 2

db2bak creates ldif file not database backup
by David Baird 09 May '11

09 May '11

Hi All, I wonder if anyone else has seen this? On our recently implemented 389 server (1.2.8.1) /usr/lib64/dirsrv/slapd-xxx/db2bak produces an ldif as output rather than a backup of the databases. I've switched to using db2bak.pl, but is this something that anyone has encountered before? [root@server ~]/var/lib64/dirsrv/slapd-xxx/db2bak Back up directory: /var/lib/dirsrv/slapd-xxx/bak/xxx-2011_05_10_09_46_43 [10/May/2011:09:46:43 +1200] 389-Directory/1.2.8.1 - debug level: backend (524288) [root@server ~]# ls -al /var/lib/dirsrv/slapd-xxx/bak total 152 drwxrwx--- 2 ldap ldap 4096 May 10 09:46 . drwxrwx--- 6 ldap ldap 4096 Apr 21 08:30 .. -rw------- 1 ldap ldap 67292 May 10 09:46 xxx-2011_05_10_094641.ldif Additionally, if you provide a backup directory to the db2bak command (db2bak /var/lib/dirsrv/slapd-xxx/bak/daily) it produces no output. [root@server ~]# /usr/lib64/dirsrv/slapd-xxx/db2bak /var/lib/dirsrv/slapd-xxx/bak/daily Back up directory: /var/lib/dirsrv/slapd-xxx/bak/daily [10/May/2011:10:06:52 +1200] 389-Directory/1.2.8.1 - debug level: backend (524288) [root@server ~]# ls /var/lib/dirsrv/slapd-xxx/bak xxx-2011_05_10_094641.ldif Should I file a bug report? David. ------------------------------------------------------------------------------ David Baird BSc. Programmer/Analyst Faculty of Computing & Mathematical Sciences email: dbaird(a)scms.waikato.ac.nz University of Waikato Phone: +64 7 838 4549 Private Bag 3105 Fax: +64 7 838 4155 Hamilton, New Zealand ------------------------------------------------------------------------------

2 1

389 upgrade error
by Sandra Blain Escalona 06 May '11

06 May '11

I've upgrading the new version 389 and when I run the script setup-ds-admin.pl -u I get this error: [root@pluton yum.repos.d]# setup-ds-admin.pl -u ============================================================================== The update option will allow you to re-register your servers with the configuration directory server and update the information about your servers that the console and admin server uses. You will need your configuration directory server admin ID and password to continue. Continue? [yes]: ============================================================================== Please specify the information about your configuration directory server. The following information is required: - host (fully qualified), port (non-secure or secure), suffix, protocol (ldap or ldaps) - this information should be provided in the form of an LDAP url e.g. for non-secure ldap://host.example.com:389/o=NetscapeRoot or for secure ldaps://host.example.com:636/o=NetscapeRoot - admin ID and password - admin domain - a CA certificate file may be required if you choose to use ldaps and security has not yet been configured - the file must be in PEM/ASCII format - specify the absolute path and filename Configuration directory server URL [ldap://pluton.virtual.etecsa.cu:389/o=NetscapeRoot]: Configuration directory server admin ID [uid=admin389, ou=Administrators, ou=TopologyManagement, o=NetscapeRoot]: Configuration directory server admin password: Configuration directory server admin domain [virtual.etecsa.cu]: The server 'ldap://pluton.virtual.etecsa.cu:389/o=NetscapeRoot' is not reachable. Error: unknown error Please try again, in case you mis-typed something. and it repeat again. I tried to start dirsrv service but its fails, but dirsrv-admin service is running somebody can help me??? thanks Sandra --- This message was processed by Kaspersky Mail Gateway 5.6.28/RELEASE running at host imx2.etecsa.cu Visit our web-site: <http://www.kaspersky.com>, <http://www.viruslist.com>

3 4

Problem syncing DS with AD W2k3
by Carsten Grzemba 06 May '11

06 May '11

Hi, I have a problem with syncing users with AD W2k3. The Setup works fine with W2k8. If I start a replica initialization send_dirsync_search got no results from W2k3 AD. No errors seen in the log. [06/May/2011:10:59:20 +0200] NSMMReplicationPlugin - Beginning total update of replica "agmt="cn=MDVH" (srv-dc-vlan:636)". [06/May/2011:10:59:20 +0200] - => windows_private_null_dirsync_control [06/May/2011:10:59:20 +0200] - <= windows_private_null_dirsync_control [06/May/2011:10:59:20 +0200] - => windows_private_get_windows_subtree [06/May/2011:10:59:20 +0200] - <= windows_private_get_windows_subtree [06/May/2011:10:59:20 +0200] - => windows_private_get_directory_replarea [06/May/2011:10:59:20 +0200] - <= windows_private_get_directory_replarea [06/May/2011:10:59:20 +0200] - => windows_private_get_api_cookie [06/May/2011:10:59:20 +0200] - <= windows_private_get_api_cookie [06/May/2011:10:59:20 +0200] - => windows_dirsync_inc_run [06/May/2011:10:59:20 +0200] - => send_dirsync_search [06/May/2011:10:59:20 +0200] - => windows_conn_connected [06/May/2011:10:59:20 +0200] - <= windows_conn_connected [06/May/2011:10:59:20 +0200] - => windows_private_get_windows_subtree [06/May/2011:10:59:20 +0200] - <= windows_private_get_windows_subtree [06/May/2011:10:59:20 +0200] - => windows_private_dirsync_control [06/May/2011:10:59:20 +0200] - <= windows_private_dirsync_control [06/May/2011:10:59:20 +0200] - Calling dirsync search request plugin [06/May/2011:10:59:20 +0200] - => windows_private_get_api_cookie [06/May/2011:10:59:20 +0200] - <= windows_private_get_api_cookie [06/May/2011:10:59:20 +0200] - Sending dirsync search request [06/May/2011:10:59:20 +0200] - <= send_dirsync_search [06/May/2011:10:59:20 +0200] - => windows_conn_get_search_result [06/May/2011:10:59:20 +0200] - => windows_conn_connected [06/May/2011:10:59:20 +0200] - <= windows_conn_connected [06/May/2011:10:59:20 +0200] - => windows_private_dirsync_has_more [06/May/2011:10:59:20 +0200] - <= windows_private_dirsync_has_more [06/May/2011:10:59:20 +0200] - <= windows_conn_get_search_result [06/May/2011:10:59:21 +0200] - => windows_private_dirsync_has_more [06/May/2011:10:59:21 +0200] - <= windows_private_dirsync_has_more [06/May/2011:10:59:21 +0200] - <= windows_dirsync_inc_run [06/May/2011:10:59:21 +0200] - => windows_private_save_dirsync_cookie [06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 1.3.6.1.4.1.42.2.27.8.5.1)[06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS) [06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.12) [06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS) [06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.18) [06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS) [06/May/2011:10:59:21 +0200] - modify_update_last_modified_attr [06/May/2011:10:59:21 +0200] - Calling plugin 'Distributed Numeric Assignment internal preop plugin' #0 type 421 [06/May/2011:10:59:21 +0200] dna-plugin - --> dna_pre_op [06/May/2011:10:59:21 +0200] dna-plugin - --> dna_get_dn [06/May/2011:10:59:21 +0200] dna-plugin - <-- dna_get_dn [06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.12) [06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS) [06/May/2011:10:59:21 +0200] - => slapi_control_present (looking for 2.16.840.1.113730.3.4.18) [06/May/2011:10:59:21 +0200] - <= slapi_control_present 0 (NO CONTROLS) [06/May/2011:10:59:21 +0200] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=2 [06/May/2011:10:59:21 +0200] - <= slapi_reslimit_get_integer_limit() returning NO VALUE [06/May/2011:10:59:21 +0200] - => slapi_reslimit_get_integer_limit() conn=0x0, handle=1 [06/May/2011:10:59:21 +0200] - <= slapi_reslimit_get_integer_limit() returning NO VALUE [06/May/2011:10:59:21 +0200] - => compute_limits: sizelimit=-1, timelimit=-1 [06/May/2011:10:59:21 +0200] - Calling plugin 'ACL preoperation' #1 type 403 [06/May/2011:10:59:21 +0200] - Calling plugin 'deref' #3 type 403 [06/May/2011:10:59:21 +0200] deref-plugin - --> deref_pre_search [06/May/2011:10:59:21 +0200] deref-plugin - <-- deref_pre_op [06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication preoperation plugin' #6 type 403 [06/May/2011:10:59:21 +0200] - Calling plugin 'Multimaster replication preoperation plugin' #8 type 403 [06/May/2011:10:59:21 +0200] - => send_ldap_search_entry (cn=MDVH,cn=replica,cn=dc\3Dmdvh\2Cdc\3Ddom,cn=mapping tree,cn=config) [06/May/2011:10:59:21 +0200] - Calling plugin 'deref' #3 type 410 [06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication preoperation plugin' #6 type 410 [06/May/2011:10:59:21 +0200] - <= send_ldap_search_entry [06/May/2011:10:59:21 +0200] - => send_ldap_result 0:: [06/May/2011:10:59:21 +0200] - <= send_ldap_result [06/May/2011:10:59:21 +0200] - => entry_apply_mods [06/May/2011:10:59:21 +0200] - <= entry_apply_mods 0 [06/May/2011:10:59:21 +0200] dna-plugin - --> dna_is_config [06/May/2011:10:59:21 +0200] dna-plugin - <-- dna_is_config [06/May/2011:10:59:21 +0200] dna-plugin - <-- dna_pre_op [06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication internal preoperation plugin' #1 type 421 [06/May/2011:10:59:21 +0200] - Calling plugin 'Multimaster replication internal preoperation plugin' #2 type 421 [06/May/2011:10:59:21 +0200] - => entry_apply_mods [06/May/2011:10:59:21 +0200] - <= entry_apply_mods 0 [06/May/2011:10:59:21 +0200] - => send_ldap_result 0:: [06/May/2011:10:59:21 +0200] - <= send_ldap_result [06/May/2011:10:59:21 +0200] - ps_service_persistent_searches: entry "cn=MDVH,cn=replica,cn=dc\3Dmdvh\2Cdc\3Ddom,cn=mapping tree,cn=config" not enqueued on any persistent search lists [06/May/2011:10:59:21 +0200] - Calling plugin 'Retrocl internal postoperation plugin' #0 type 521 [06/May/2011:10:59:21 +0200] - not applying change if not logging [06/May/2011:10:59:21 +0200] - Calling plugin 'Class of Service internalpostoperation plugin' #1 type 521 [06/May/2011:10:59:21 +0200] - --> cos_post_op [06/May/2011:10:59:21 +0200] - --> cos_cache_change_notify [06/May/2011:10:59:21 +0200] - --> cos_cache_template_index_bsearch [06/May/2011:10:59:21 +0200] - --> cos_cache_getref [06/May/2011:10:59:21 +0200] - <-- cos_cache_getref [06/May/2011:10:59:21 +0200] - <-- cos_cache_template_index_bsearch [06/May/2011:10:59:21 +0200] - <-- cos_cache_change_notify [06/May/2011:10:59:21 +0200] - <-- cos_post_op [06/May/2011:10:59:21 +0200] - Calling plugin 'Legacy replication internal postoperation plugin' #2 type 521 [06/May/2011:10:59:21 +0200] - Calling plugin 'Linked Attributes internal postop plugin' #3 type 521 [06/May/2011:10:59:21 +0200] linkedattrs-plugin - --> linked_attrs_mod_post_op [06/May/2011:10:59:21 +0200] - Calling plugin 'Managed Entries internal postop plugin' #4 type 521 [06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_mod_post_op [06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_oktodo [06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_oktodo [06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_get_dn [06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_get_dn [06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_dn_is_config [06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_dn_is_config [06/May/2011:10:59:21 +0200] managed-entries-plugin - --> mep_isrepl [06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_isrepl [06/May/2011:10:59:21 +0200] managed-entries-plugin - <-- mep_mod_post_op [06/May/2011:10:59:21 +0200] - Calling plugin 'Multimaster replication internal postoperation plugin' #5 type 521 [06/May/2011:10:59:21 +0200] - Calling plugin 'Roles internalpostoperation plugin' #6 type 521 [06/May/2011:10:59:21 +0200] - <= windows_private_save_dirsync_cookie [06/May/2011:10:59:21 +0200] - => windows_release_replica [06/May/2011:10:59:21 +0200] - => windows_conn_start_linger [06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - agmt="cn=MDVH" (srv-dc-vlan:636): Beginning linger on the connection [06/May/2011:10:59:21 +0200] - => windows_conn_connected [06/May/2011:10:59:21 +0200] - <= windows_conn_connected [06/May/2011:10:59:21 +0200] - <= windows_conn_start_linger [06/May/2011:10:59:21 +0200] - <= windows_release_replica [06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - Finished total update of replica "agmt="cn=MDVH" (srv-dc-vlan09:636)". Sent 0 entries. [06/May/2011:10:59:21 +0200] - total update setting consumer RUV: [06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - consumer: {replicageneration} 4da43ace0000004c0000 [06/May/2011:10:59:21 +0200] NSMMReplicationPlugin - consumer: {replica 76 ldap://ux-ldap01.mdvh.dom:389} 4da45acc0000004c0000 4da45ad90000004c0000 00000000 ... Its a binary, build by myself: bash-3.00# /opt/389ds/sbin/ns-slapd -v 389 Project 389-Directory/1.2.9.a1 B2011.125.756 Any hints? Thanks Carsten

2 1

389 install error
by 馬小布 06 May '11

06 May '11

Hi , all : Today when I install the newest 389 directory server on the other machine which installed centos 5.3 i386 . Then it displayed the following error message: root@test ~: setup-ds-admin.pl .... .... Administration port [9830]: ============================================================================== The interactive phase is complete. The script will now set up your servers. Enter No or go Back if you want to change something. Are you ready to set up your servers? [yes]: Creating directory server . . . Your new DS instance 'slave' was successfully created. Creating the configuration directory server . . . dn: o=NetscapeRoot objectclass: top objectclass: organization o: NetscapeRoot aci: (targetattr="*")(version 3.0; acl "Enable Configuration Administrator Gro up modification"; allow (all) groupdn="ldap:///cn=Configuration Administrator s,ou=Groups,ou=TopologyManagement,o=NetscapeRoot";) aci: (targetattr="*")(targetfilter=(o=NetscapeRoot))(version 3.0; acl "Default anonymous access"; allow (read, search) userdn="ldap:///anyone";) aci: (targetattr="*")(version 3.0; acl "Enable Group Expansion"; allow (read, search, compare) groupdnattr="uniquemember";) Error adding entry 'o=NetscapeRoot'. Error: Can't contact LDAP server Failed to create the configuration directory server Exiting . . . Log file is '/tmp/setupkF9lno.log' Could someone can help me ? Thanks ...

3 3

entry-id conflict
by Angel Bosch Mora 06 May '11

06 May '11

hi, i'm setting up another node on my multimaster environment. on the new node i can see differencese on entry-id attribute. is this normal? i guess this is an internal attribute but i'm not sure if must be shared an unique across members of replication. regars, abosch

2 1

Bug in console?
by Diego Woitasen 05 May '11

05 May '11

Hi, I have 389 DS working with Window Sync against Windows 2003. It works fine, including the password replication. Anyway I found that (obviusly) the password replication from 389 to AD works only if the client changes the password using "Password Modify (RFC 3062) extended operation". This works with the Python module or the ldappasswd utility. The problem is the Admin Console. When you changes the user's password from the console, I see a MOD operation in the log file, and obviusly the password is not replicated to AD. Shall I file a bug report or Am I missing something? Regards, Diego -- Diego Woitasen

2 3

Referral errors ....
by Reinhard Nappert 05 May '11

05 May '11

Hi, I have the following setup: I have a 2 multimaster replication setup, where both masters also have a number of shadowing agreements to other consumers. The data gets replicated to all boxes and there are no issues. When I try to perform an update on the slaves, it works on all, but one. Meaning, the server sends back err=10, with the referral to one of the masters and the client automatically follows the referrals. Unfortunately, it does not works with one box: When there is an attempt to write to the db, the server returns an error-code 1, with the following message: javax.naming.NamingException: [LDAP: error code 1 - Mapping tree node for o=base is set to return a referral, but no referral is configured for it]; This can also be seen in the access file: [26/Apr/2011:05:35:45 -0300] conn=3418 op=13256 ADD dn="ou=test,o=base" [26/Apr/2011:05:35:45 -0300] conn=3418 op=13256 RESULT err=1 tag=105 nentries=0 etime=0 When I have a look at the configuration, it looks exactly like the others: dn: cn="o=Base",cn=mapping tree,cn=config objectClass: top objectClass: extensibleObject objectClass: nsMappingTree cn: "o=Base" nsslapd-state: referral on update nsslapd-backend: userRoot modifiersName: cn=server,cn=plugins,cn=config modifyTimestamp: 20100721202730Z nsslapd-referral: ldap://master-ld01:389/o=Base nsslapd-referral<ldap://master-ld01:389/o=Basensslapd-referral>: ldap://master-ld02:389/o=Base numSubordinates<ldap://master-ld02:389/o=BasenumSubordinates>: 1 dn: cn=replica,cn="o=Base",cn=mapping tree,cn=config nsDS5ReplicaBindDN: cn=replication,cn=config nsDS5ReplicaRoot: o=Base nsDS5Flags: 0 nsDS5ReplicaType: 2 nsds5ReplicaPurgeDelay: 43200 objectClass: top objectClass: nsDS5Replica cn: replica modifiersName: cn=Multimaster Replication Plugin,cn=plugins,cn=config modifyTimestamp: 20110421052744Z nsDS5ReplicaId: 65535 nsState:: //8AAAAAAADLv69NAAAAAAAAAAAAAAAALSoAAAAAAAAIAAAAAAAAAA== nsDS5ReplicaName: 59480b7e-94fb11df-9df8eeea-774385c0 nsDS5ReplicaReferral: ldap://master-ld01:389/o=Base nsDS5ReplicaReferral<ldap://master-ld01:389/o=BasensDS5ReplicaReferral>: ldap://master-ld02:389/o=Base I was wondering if someone has seen this kind of issue. Everything looks fine to me and I can not explain this behavior. Right now, I can not reproduce this issue. I only see it in this one setup. Thanks, -Reinhard

2 10

389 Crash problem
by 馬小布 05 May '11

05 May '11

Hi , all : I am a newbie to here , today I tried to install the 389 newest version by "yum install 389" command from epel repo on CentOS 5.5 64 bit machine. When I configured it and then open the 389 console , tried to click the "Server Group" in the main console , then the terminal had the following error message: ----------------------------------------------------------------------------------------------------------------------------------------------------------- java.lang.NoSuchMethodException: com.netscape.management.client.util.LDAPUtil.isValidDN(java.lang.String) at java.lang.Class.getMethod(Class.java:1622) at com.netscape.admin.dirserv.DSUtil.<clinit>(Unknown Source) at com.netscape.admin.dirserv.DSAdmin.initialize(Unknown Source) at com.netscape.management.client.topology.ServerNode.createServerInstance(Unknown Source) at com.netscape.management.client.topology.ServerNode.reload(Unknown Source) at com.netscape.management.client.topology.ServerNode.initialize(Unknown Source) at com.netscape.management.client.topology.ServerNode.<init>(Unknown Source) at com.netscape.management.client.topology.AdminGroupNode.reload(Unknown Source) at com.netscape.management.client.topology.ServerLocNode.getChildCount(Unknown Source) at com.netscape.management.client.ResourcePage.treeWillExpand(Unknown Source) at javax.swing.JTree.fireTreeWillExpand(JTree.java:2729) at javax.swing.JTree.setExpandedState(JTree.java:3427) at javax.swing.JTree.expandPath(JTree.java:2171) at javax.swing.plaf.basic.BasicTreeUI.toggleExpandState(BasicTreeUI.java:2241) at javax.swing.plaf.basic.BasicTreeUI.handleExpandControlClick(BasicTreeUI.java:2228) at javax.swing.plaf.basic.BasicTreeUI.checkForClickInExpandControl(BasicTreeUI.java:2186) at javax.swing.plaf.basic.BasicTreeUI$Handler.handleSelection(BasicTreeUI.java:3540) at javax.swing.plaf.basic.BasicTreeUI$Handler.mousePressed(BasicTreeUI.java:3488) at java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:279) at java.awt.Component.processMouseEvent(Component.java:6098) at javax.swing.JComponent.processMouseEvent(JComponent.java:3267) at java.awt.Component.processEvent(Component.java:5866) at java.awt.Container.processEvent(Container.java:2105) at java.awt.Component.dispatchEventImpl(Component.java:4462) at java.awt.Container.dispatchEventImpl(Container.java:2163) at java.awt.Component.dispatchEvent(Component.java:4288) at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4461) at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4122) at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4055) at java.awt.Container.dispatchEventImpl(Container.java:2149) at java.awt.Window.dispatchEventImpl(Window.java:2478) at java.awt.Component.dispatchEvent(Component.java:4288) at java.awt.EventQueue.dispatchEvent(EventQueue.java:604) at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:275) at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:200) at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:190) at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:185) at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:177) at java.awt.EventDispatchThread.run(EventDispatchThread.java:138) ------------------------------------------------------------------------------------------------------------ But the 389 ds could work well . Is it the 389 ds crash or bug ? Could someone can explain it ? Thanks in advance...

3 2

proper way of backup
by Karoly Czovek 04 May '11

04 May '11

'Morning, what is the proper way of backing up 389DS server data, from commndline, what can be restoren even a server reinstall? -- Karoly CZOVEK Global Systems Administrator MoveOne IT Department Eastern Europe - Balkans - CIS& Central Asia - Middle East& Africa - Asia Pacific phone: +36 1 266 0181 - ext.6710 mobile: +36 70 708 9953 skype: mo_karoly.czovek email: karoly.czovek(a)moveoneinc.com web: http://www.moveoneinc.com

4 3

The other end of forcing a password reset...
by David Barr 03 May '11

03 May '11

Good Morning! I get the trick of setting a password policy to force a password change on the next login, and I've implemented. What I think I'm missing is the piece that goes into the login process somewhere and actually checks the need for a reset and forces the execution of [ldap]passwd as the first thing the user does after login. Is that part documented somewhere? Google buries me under the LDAP server end of the process. Thanks! David -- David - Offbeat http://dafydd.livejournal.com dafydd - Online http://pgp.mit.edu/ Battalion 4 - Black Rock City Emergency Services Department Integrity*Commitment*Communication*Support ----5----1----5----2----5----3----5----4----5----5----5----6----5----7-- "Do your job and demand your compensation - but in that order. -- Cary Grant

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

389-users May 2011