Fedora directory users - Jul 2005 - RE: Installation of Fedora Directory Ser vice on RHEL v3 or v4

Thank you,  I manage to download the binary RPM of RHEL 4 on my workstation.

Now, I setup the FD to sync with MS AD domain which we have here, but one
question I have do I need to have enterprise admin right to sync the FD to
the AD DC server to pull user infos and etc?

Right now when I want to search a user on the domain I am not able to do
that.  Can you someone please provide me what I mgiht need to do to search a
particular user on the same domain?

Thanks,



-----Original Message-----
From: Brian Jones [mailto:bkjones@gmail.com] 
Sent: Friday, July 08, 2005 3:37 PM
To: General discussion list for the Fedora Directory server project.
Subject: Re: [Fedora-directory-users] Installation of Fedora Directory Ser
vice on RHEL v3 or v4

Get the binary rpm. It installs just fine on RHEL 3 and 4 as per my testing.


On 7/8/05, Kevin Myer <kevin_myer@iu13.org> wrote:
> Quoting "Talwar, Puneet (NIH/NIAID)"
<PTALWAR@niaid.nih.gov>:
> 
> > I would like to know when I run the builddsrpm.sh RHEL4 command, I get
a
> > message saying that it cannot find RHEL4-ds.spec file.
> 
> Just curious - is there a reason you have not downloaded the binary RPM,
that
> doesn''t require you to compile it?
> 
> http://directory.fedora.redhat.com/wiki/Special:Download
> 
> Agree to the license, choose your platform, and download something that is
> already prepackaged..
> 
> Kevin
> 
> --
> Kevin M. Myer
> Senior Systems Administrator
> Lancaster-Lebanon Intermediate Unit 13  http://www.iu13.org
> 
> 
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users

Talwar, Puneet (NIH/NIAID) wrote:
>Thank you,  I manage to download the binary RPM of RHEL 4 on my workstation.
>
>Now, I setup the FD to sync with MS AD domain which we have here, but one
>question I have do I need to have enterprise admin right to sync the FD to
>the AD DC server to pull user infos and etc?
>  
>
Yes.  There are two different connections.  The main connection is from 
FDS to AD - FDS does an LDAP BIND to AD to issue a sync request.  When 
you configure the windows sync agreement on FDS (usually using the 
console), you have to specify the DN of the user on AD that has 
administrative rights over the AD subtree (e.g. 
cn=Administrator,cn=Users,dc=Domain,dc=TLD).  So you will have to do 
some work to create that user on AD, grant that user the appropriate 
rights over the AD subtree, and figure out what the DN of that user is.

The other connection is a "push" connection from AD to FDS for
password
changes.  The passsync AD plug-in intercepts password changes and 
forwards them to FDS.  When configuring the AD passsync service, you 
will need to specify the DN of an FDS user that has the right to search 
for and write the userPassword attribute in the subtree you are
sync''ing.
>Right now when I want to search a user on the domain I am not able to do
>that.
>
On AD or FDS?
>Can you someone please provide me what I mgiht need to do to search a
>particular user on the same domain?
>
>Thanks,
>
>
>
>-----Original Message-----
>From: Brian Jones [mailto:bkjones@gmail.com] 
>Sent: Friday, July 08, 2005 3:37 PM
>To: General discussion list for the Fedora Directory server project.
>Subject: Re: [Fedora-directory-users] Installation of Fedora Directory Ser
>vice on RHEL v3 or v4
>
>Get the binary rpm. It installs just fine on RHEL 3 and 4 as per my testing.
>
>
>On 7/8/05, Kevin Myer <kevin_myer@iu13.org> wrote:
>  
>
>>Quoting "Talwar, Puneet (NIH/NIAID)"
<PTALWAR@niaid.nih.gov>:
>>
>>    
>>
>>>I would like to know when I run the builddsrpm.sh RHEL4 command, I
get a
>>>message saying that it cannot find RHEL4-ds.spec file.
>>>      
>>>
>>Just curious - is there a reason you have not downloaded the binary RPM,
>>    
>>
>that
>  
>
>>doesn''t require you to compile it?
>>
>>http://directory.fedora.redhat.com/wiki/Special:Download
>>
>>Agree to the license, choose your platform, and download something that
is
>>already prepackaged..
>>
>>Kevin
>>
>>--
>>Kevin M. Myer
>>Senior Systems Administrator
>>Lancaster-Lebanon Intermediate Unit 13  http://www.iu13.org
>>
>>
>>--
>>Fedora-directory-users mailing list
>>Fedora-directory-users@redhat.com
>>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>    
>>
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users@redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users@redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
>

Rich Megginson wrote:
>>Yes.  There are two different connections.  The main connection is from
>>FDS to AD - FDS does an LDAP BIND to AD to issue a sync request.  When
>>you configure the windows sync agreement on FDS (usually using the
>>console), you have to specify the DN of the user on AD that has
>>administrative rights over the AD subtree (e.g.
>>cn=Administrator,cn=Users,dc=Domain,dc=TLD).  So you will have to do
>>some work to create that user on AD, grant that user the appropriate
>>rights over the AD subtree, and figure out what the DN of that user is.
>>    
>>
The domain''s ''Administrator'' user is an easy option
if you are allowed
to know its password.