search for: dirsrv

Hello, I am trying to deploy an additional read-only replica (aka. 'consumer') in a single-master dirsrv environment. The master, and the other pre-existing consumer servers, are all 'fedora-ds' running on Fedora 7. I'm trying to add a consumer running on Centos 5.5. Ultimately, I intend to replace the Fedora ds servers with Centos dirsrv servers. I'm trying to deploy the Centos di...

I'm running fedora directory server on some boxes in a multi-master arrangement. The problem is that when dirsrv is lauched from init (on boot) the maximum number of allowed file descriptors (ulimit -n) is only 4096. That means that the slapd process can only accept ~4k connections, and it needs to accept ~10k or so. The value for nofile for all users in /etc/security/limits.conf (and limits.d/*) is 65536,...

...ices and warning about a missing dependancy (presumably FreeIPA) debug: //freeipa::bundled/Single_exec[ipa_server_install]: Executing '/usr/sbin/ipa-server-install -r ovirt.priv -p 'supersecretpw' -P 'supersecretpw' -a 'supersecretpw' --hostname management.ovirt.priv -u dirsrv -U' debug: Executing '/usr/sbin/ipa-server-install -r ovirt.priv -p 'supersecretpw' -P 'supersecretpw' -a 'supersecretpw' --hostname management.ovirt.priv -u dirsrv -U' err: //freeipa::bundled/Single_exec[ipa_server_install]/returns: change from notrun to 0 faile...

...ing CentOS 5.4 and I've installed the CentOS Directory Server by running yum -y install centos-ds* without any errors. But as soon as I attempt to run the setup I get the following: [root at jpdsys3 ~]# /usr/sbin/setup-ds-admin.pl Can't locate Setup.pm in @INC (@INC contains: /usr/lib64/dirsrv/perl /usr/lib64/perl5/site_perl/5.8.8/x86_64-linux-thread-multi /usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl /usr/lib64/perl5/vendor_perl/5.8.8/x86_64-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl /usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi /usr...

...fully created, configured, and started. >>Exiting . . . >>Log file is '/tmp/setupOYDg5L.log' >> >> <<screen dump>> ===================================================================== 3. Import samba.schema into FDS 3.1 Copy file 61samba.ldif to /etc/dirsrv/schema and /etc/dirsrv/slapd-centserver/schema 3.2 service dirsrv restart ===================================================================== 4. Modify file migrate_common.ph /usr/share/openldap/migration/migrate_common.ph 4.1 Search for the following OrganizationalUnit : $NAMINGCONTEXT{...

...at need to be put in place to actually make it useful for my domain? Is there a document somewhere for those of us that want to bridge from openLDAP to the RH based product? I have read many hundreds of pages, have purchased O'reilly's LDAP System Administration but cannot seem to get my dirsrv based LDAP to function. I do understand that ds uses LDIF files to store and set things up, but seem unable to grasp the arcane entries that need to exist so I can access it with a basic LDAP client to load my users etc. Also I guess there are certain schemas that need to be used to allow basic...

...d -D --option=server role check:inhibit=yes --foreground 1294 root 20 0 0 0 0 S 0.3 0.0 0:31.24 [flush-253:4] 1987 root 20 0 0 0 0 S 0.3 0.0 6:12.93 [kondemand/0] 2089 ldap 20 0 569m 125m 13m S 0.3 0.9 11:49.78 /usr/sbin/ns-slapd -D /etc/dirsrv/slapd-sulixerver -i /var/run/dirsrv/slapd-sulixerver.pid -w /var/run/dirsrv/slapd-sulixerver.startpid 3764 mysql 20 0 221m 77m 6240 S 0.3 0.5 90:00.06 /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --log-error=/var/log/mysqld.log --pid-file=/var/run/mysqld...

...t does not exist!') ------------------------------------------ i can see that there is a prob with the CN=Users, but what's the idea. i thought the provisioning did all the schema's and setup the ldap backend in the 389-console, there is no samba thing what so ever. but if i start the dirsrv samba4 is also started.. anny clue here.. Thx C.

...into is that none of the RADIUS attributes I require are in the schema. My question is how do I update the schema with the needed freeradius attributes? is it as easy as taking the openldap.schema file that freeradius provides and renaming it to something like 99radius.ldif putting it in the /etc/dirsrv/"servername"/schema/ dir and restarting the service? Sorry if this question has been asked before I have been trolling the internet and haven't found a concrete answer. Thanks, Chris

...init_ldap_from_sam(972) init_ldap_from_sam: Setting entry for user: 10000001S [2010/06/28 12:26:38, 0] passdb/pdb_ldap.c:ldapsam_modify_entry(1651) ldapsam_modify_entry: LDAP Password could not be changed for user 10000001S: Constraint violation Failed to update password ==> /var/log/dirsrv/slapd-pruebas/audit <== time: 20100628122637 dn: uid=10000001s,XXXXXXXXXXXXX changetype: modify delete: sambaLMPassword sambaLMPassword: 0182BD0BD4444BF836077A718CCDF409 - add: sambaLMPassword sambaLMPassword: 39EAD569B79C7EA2C2265B23734E0DAC - delete: sambaNTPassword sambaNTPassword: 259745CB12...

...hibit=yes > --foreground > 1294 root 20 0 0 0 0 S 0.3 0.0 0:31.24 > [flush-253:4] > 1987 root 20 0 0 0 0 S 0.3 0.0 6:12.93 > [kondemand/0] > 2089 ldap 20 0 569m 125m 13m S 0.3 0.9 11:49.78 > /usr/sbin/ns-slapd -D /etc/dirsrv/slapd-sulixerver -i > /var/run/dirsrv/slapd-sulixerver.pid -w > /var/run/dirsrv/slapd-sulixerver.startpid > 3764 mysql 20 0 221m 77m 6240 S 0.3 0.5 90:00.06 > /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql > --user=mysql --log-error=/var/log/mysqld.log &...

I have implemented LDAP on CentOS successfully using Redhat's Directory Server and the great how-to on the CentOS wiki. Being new to LDAP, I have a question and maybe one of you guys can point me in the right direction: I have LDAP implemented on the network for logins to the workstation pcs. I also have an apache website that I now use LDAP for authentication. What I want, however, is

...hibit=yes > --foreground > 1294 root 20 0 0 0 0 S 0.3 0.0 0:31.24 > [flush-253:4] > 1987 root 20 0 0 0 0 S 0.3 0.0 6:12.93 > [kondemand/0] > 2089 ldap 20 0 569m 125m 13m S 0.3 0.9 11:49.78 > /usr/sbin/ns-slapd -D /etc/dirsrv/slapd-sulixerver -i > /var/run/dirsrv/slapd-sulixerver.pid -w > /var/run/dirsrv/slapd-sulixerver.startpid > 3764 mysql 20 0 221m 77m 6240 S 0.3 0.5 90:00.06 > /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql > --user=mysql --log-error=/var/log/mysqld.log &...

...ound >> 1294 root 20 0 0 0 0 S 0.3 0.0 0:31.24 >> [flush-253:4] >> 1987 root 20 0 0 0 0 S 0.3 0.0 6:12.93 >> [kondemand/0] >> 2089 ldap 20 0 569m 125m 13m S 0.3 0.9 11:49.78 >> /usr/sbin/ns-slapd -D /etc/dirsrv/slapd-sulixerver -i >> /var/run/dirsrv/slapd-sulixerver.pid -w >> /var/run/dirsrv/slapd-sulixerver.startpid >> 3764 mysql 20 0 221m 77m 6240 S 0.3 0.5 90:00.06 >> /usr/libexec/mysqld --basedir=/usr --datadir=/var/lib/mysql >> --user=mysql --log-error=/var/...

...t;: @@ -61,7 +61,7 @@ class freeipa::bundled{ single_exec {"ipa_server_install": command => "/usr/sbin/ipa-server-install -r $realm_name -p '$freeipa_password' -P '$freeipa_password' -a '$freeipa_password' --hostname $ipa_host -u dirsrv -U", - require => [Exec[set_kdc_defaults],Single_exec[dnsmasq_restart]] + require => [Single_exec[set_kdc_defaults],Single_exec[dnsmasq_restart]] } exec {"get_krb5_tkt": diff --git a/installer/modules/ovirt/manifests/postgres.pp...

...ase.pp.bz2 -i accountsd.pp.bz2 ada.pp.bz2 cachefilesd.pp.bz2 cpufreqselector.pp.bz2 chrome.pp.bz2 awstats.pp.bz2 abrt.pp.bz2 aiccu.pp.bz2 amanda.pp.bz2 afs.pp.bz2 apache.pp.bz2 arpwatch.pp.bz2 audioentropy.pp.bz2 asterisk.pp.bz2 automount.pp.bz2 avahi.pp.bz2 boinc.pp.bz2 bind.pp.bz2 bugzilla.pp.bz2 dirsrv.pp.bz2 dirsrv-admin.pp.bz2 dnsmasq.pp.bz2 bluetooth.pp.bz2 canna.pp.bz2 ccs.pp.bz2 calamaris.pp.bz2 cdrecord.pp.bz2 certwatch.pp.bz2 certmaster.pp.bz2 certmonger.pp.bz2 cipe.pp.bz2 chronyd.pp.bz2 cobbler.pp.bz2 comsat.pp.bz2 consolekit.pp.bz2 cups.pp.bz2 cvs.pp.bz2 cyphesis.pp.bz2 cyrus.pp.bz2 daem...

...andkey ldap/${INSTANCE}.${fully-qualified-domain}" Then, export that key to a keytab file. If you've deployed other services which also authenticate users using Kerberos on the same system, it's recommended that you give each one its own keytab file. kadmin -q "ktadd -k /etc/dirsrv/slapd-${INSTANCE}/${INSTANCE}.keytab ldap/${INSTANCE}.${fully-qualified-domain}" ------------ My kerberos integration has beend done. net join, net testjoin, kinit does work. My problem at the moment is the kadmin command for add and export the upn. I get always the following errors. -...

...the dependencies). While going through the ipa-server-install script, while starting, ns-slapd seg faults. i did some digging and when i turned on debugging for ns-slapd, here is what i found out: [04/Sep/2008:09:32:16 -0700] - dse_read_one_file processing entry "cn=config" in file /etc/dirsrv/slapd-MYDOMAIN-COM/dse.ldif (primary file) Segmentation fault This is all going on inside a centos host node running openvz and a centos 5.2 container. Does anybody have some exp. with ipa? i'm a bit lost here. I'm installing it in the first place to have a unified directory for the user...

I am running CentOS DS server (version 8.1.0) in a mixed master setup. I am looking for the best way to extend the schema without breaking replication? I was successfully able to extend the schema on my two servers manually but replication broke after a restart of dirsrv. [03/Dec/2012:11:04:17 -0400] NSMMReplicationPlugin - agmt="cn=web-ldap02" (web-ldap02:389): Unable to acquire replica: there is no replicated area "dc=eastlink,dc=ca" on the consumer server. Replication is aborting. [03/Dec/2012:11:04:17 -0400] NSMMReplicationPlugin - agmt=&...

...bash root$ su some_local_user - some_local_user$ getent passwd [...] ldap:x:55:55:LDAP User:/var/lib/ldap:/bin/false some_local_user$ It just hangs for a while after printing the local user 'ldap' on the screen and then exits without displaying the ldap-user 'ns'. Instead /var/log/dirsrv/slapd-ldap/access the following lines appear: [20/Jul/2010:21:48:38 +0200] conn=14 fd=65 slot=65 SSL connection from 192.168.1.2 to 192.168.1.2. [20/Jul/2010:21:48:38 +0200] conn=14 op=-1 fd=65 closed - Encountered end of file. The only entries in my /etc/ldap.conf are those: tls_cacertfile /etc/...