Re: [Fedora-directory-users] problem starting slapd

2006-08-24 Thread Marco Bellacosa
Thanks Richard, Richard Megginson wrote: Marco Bellacosa wrote: Dear all, I got problems while restarting my fedora-ds. In particular, when I try to start the server via start-slapd I receive the following message: [23/Aug/2006:09:24:27 +0200] - SSL alert: CERT_VerifyCertificateNow:

Re: [Fedora-directory-users] account expiration

2006-08-24 Thread Mikael Kermorgant
2006/8/23, Jason Russler [EMAIL PROTECTED]: I use cron and a special user with a restrictive ACI to lock old accounts. Not pretty, but hey... I thought about this solution but how do you check the expiration date ? As I want to put a specific life length for each user, I have to store an

Re: [Fedora-directory-users] problem starting slapd

2006-08-24 Thread Richard Megginson
Marco Bellacosa wrote: Thanks Richard, Richard Megginson wrote: Marco Bellacosa wrote: Dear all, I got problems while restarting my fedora-ds. In particular, when I try to start the server via start-slapd I receive the following message: [23/Aug/2006:09:24:27 +0200] - SSL alert:

[Fedora-directory-users] Slapd stops periodically

2006-08-24 Thread Timothy
I'm having an issue where slapd just stops periodically and there's no info in the logs. My setup: fedora-ds-1.0.2-1.RHEL4 on RHAS4.4. The userRoot database is setup as a consumer for an iPlanet 5.1 (win2k). iPlanet is setup as single master and the replication agreement is set to always keep

[Fedora-directory-users] Replication of o=NetscapeRoot

2006-08-24 Thread Brian Moyles
I've got 2 machines in multimaster replication across a WAN link. I'm replicating our root suffix (userRoot) successfully. I'm storing o=NetscapeRoot on box01 right now, and want to replicate that to 02 (using 2-way multimaster) and have 02 use its local copy so I have console failover as

Re: [Fedora-directory-users] Slapd stops periodically

2006-08-24 Thread Jason Russler
This is a total stab: I'm able to crash my slapd process by setting pam_password exop in the ldap.conf file on RHEL4 clients with the server running RHEL4 on x86_64. Timothy wrote: I'm having an issue where slapd just stops periodically and there's no info in the logs. My setup:

Re: [Fedora-directory-users] Replication of o=NetscapeRoot

2006-08-24 Thread Nathan Kinder
Brian Moyles wrote: I've got 2 machines in multimaster replication across a WAN link. I'm replicating our root suffix (userRoot) successfully. I'm storing o=NetscapeRoot on box01 right now, and want to replicate that to 02 (using 2-way multimaster) and have 02 use its local copy so I have

Re: [Fedora-directory-users] Replication of o=Net scapeRoot

2006-08-24 Thread Brian Moyles
The cn=config suffix is not in o=Netscape Root. It is it's own suffix that is really uses the dse.ldif file as it's back-end database. You can use the same user that you already have for replicating o=Netscape Root. Oh, that makes sense! I'll give it a shot, thanks very much! Brian --

Re: [Fedora-directory-users] Slapd stops periodically

2006-08-24 Thread Richard Megginson
Jason Russler wrote: This is a total stab: I'm able to crash my slapd process by setting pam_password exop in the ldap.conf file on RHEL4 clients with the server running RHEL4 on x86_64. This could be related to https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179723 Timothy wrote: I'm

Re: [Fedora-directory-users] Slapd stops periodically

2006-08-24 Thread Richard Megginson
Timothy wrote: I'm having an issue where slapd just stops periodically and there's no info in the logs. My setup: fedora-ds-1.0.2-1.RHEL4 on RHAS4.4. The userRoot database is setup as a consumer for an iPlanet 5.1 (win2k). iPlanet is setup as single master and the replication agreement is

Re: [Fedora-directory-users] Memory leak in FDS?

2006-08-24 Thread Philip Kime
Are you using SSL? If so, try this - http://directory.fedora.redhat.com/download/nspr-4.6.2-nss-3.11.1-RHEL4- x86_64.tar.gz - and follow the directions in the previous emails in this thread. Yes, it's all SSL. Thanks, I'll try to replicate the leak on a test server and then try these