Re: [389-users] access control

2010-10-25 Thread Morris, Patrick
http://directory.fedoraproject.org/wiki/Howto:AccessControl On 10/23/2010 6:38 PM, Mike Li wrote: I am using the latest 389 DS (1.1), on Linux. Searching the entries works but cannot do add/modify, ldap_add_s() and ldap_modify_s() APIs return: Insufficient access. How do I give the write

Re: [389-users] Getting started with 389 DS

2010-10-25 Thread harry . devine
I don't have anything in the error log file show up when I try to log in. I get the following when I try to log in using the -D 9 -f switches that you mentioned: CommManager New CommRecord (http://localhost:9830/admin-serv/authenticate ) http://localhost:9830/[1:0] open Ready

Re: [389-users] Getting started with 389 DS

2010-10-25 Thread Gerrard Geldenhuis
Hi Glad to hear you got your problem sorted, you might also consider using the FQDN of the servername rather than localhost. This will safe you some trouble when you enable SSL. Regards From: 389-users-boun...@lists.fedoraproject.org

Re: [389-users] Getting started with 389 DS

2010-10-25 Thread Rich Megginson
harry.dev...@faa.gov wrote: Just a follow up: I was able to log in. I turned off the software firewall and used cn=Directory Manager as the User ID and was able to log in. This machine is isolated so there's low risk in having the firewall off. When I get further along, I can turn it

Re: [389-users] Getting started with 389 DS

2010-10-25 Thread Gerrard Geldenhuis
Hi Harry, It basically means that the object class used to define the user in the directory from which you exported the user does not exist in 389 or is not available. It might also help to post an example of the ldif file here for people to have a look at. It will make debugging your problem

Re: [389-users] Getting started with 389 DS

2010-10-25 Thread harry . devine
OK, here's an example of what ldifde exported for me (I didn't put the entire entry for my user object since there are things such as phone number and address listed, but I can post the entire entry if requested; I would just mask that info out): dn: CN=Devine\,

Re: [389-users] Getting started with 389 DS

2010-10-25 Thread Richard Megginson
- harry devine harry.dev...@faa.gov wrote: Thanks. I'll keep that in mind. While I have your attention, can I ask another question since I'm progressing along? What I ultimately want to do is migrate from Microsoft Active Directory 2003 to 389 Directory Server. I was reading up on how to

Re: [389-users] Getting started with 389 DS

2010-10-25 Thread harry . devine
Right now, we have 4 Windows servers: 2 Domain controllers (1 of which is serving as the Terminal Server License server), 1 general purpose workstation for users to Remote Desktop into, and 1 server that runs Citrix Presentation server. We also have 2 linux servers that we connect to that we

Re: [389-users] access control

2010-10-25 Thread Anthony Messina
On Monday, October 25, 2010 03:14:59 am Morris, Patrick wrote: http://directory.fedoraproject.org/wiki/Howto:AccessControl On 10/23/2010 6:38 PM, Mike Li wrote: I am using the latest 389 DS (1.1), on Linux. Searching the entries works but cannot do add/modify, ldap_add_s() and

Re: [389-users] access control

2010-10-25 Thread Rich Megginson
Anthony Messina wrote: On Monday, October 25, 2010 03:14:59 am Morris, Patrick wrote: http://directory.fedoraproject.org/wiki/Howto:AccessControl On 10/23/2010 6:38 PM, Mike Li wrote: I am using the latest 389 DS (1.1), on Linux. Searching the entries works but cannot do

Re: [389-users] access control

2010-10-25 Thread Anthony Messina
On Monday, October 25, 2010 05:42:59 pm Rich Megginson wrote: I think you mean LDAPI. There is nothing explicit - however, you can set access based on hostname or IP address. I suppose, since an LDAPI connection has no hostname or IP address, you might be able to use that somehow.