Re: [389-users] testing Enforcing password policy

2010-01-08 Thread patrick . morris
Hi muzzol! On Tue, 05 Jan 2010, muzzol wrote: hi, which attributes are used to hold password policy information? i want to test it and i tried to change passwordexpirationtime to force expiration/warning but no success. It depends, but that particular attribute is stored directly in the

Re: [389-users] /etc/sudoers VS sudo-objects in directory server

2010-01-04 Thread patrick . morris
Hi Anne! On Thu, 31 Dec 2009, Anne Cross wrote: As I understood it, you could only use entries in /etc/group as opposed to using LDAP groups (which is what we're after.) Our goal was to not need to manage locally stored files - we might as well manage /etc/sudoers as /etc/group in that

Re: [389-users] /etc/sudoers VS sudo-objects in directory server

2009-12-30 Thread patrick . morris
On Tue, 29 Dec 2009, Kenneth Holter wrote: We're working on setting up Red Hat Directory Server (RHDS), and need to make a decision about wether sudo information should be defined as sudo-objects in the directory server, or if we should stick to /etc/sudoers. I've played around with

Re: [389-users] nscd: nss_ldap: could not search LDAP server - Server is unavailable

2009-12-30 Thread patrick . morris
Prashanth Sundaram wrote: I have two 389-ds servers with MMR via TLS and client hosts authenticating via TLS. I see this error message in all client machines in /var/log/messages. It seems nscd is failing at random intervals. Has anyone seen this before? Dec 29 10:35:35 dmc189 nscd:

Re: [389-users] /etc/sudoers VS sudo-objects in directory server

2009-12-30 Thread patrick . morris
On Tue, Dec 29, 2009 at 7:33 AM, Anne Cross across itasoftware com wrote: We're going to go with sudoers in ldap, not because I think it's better, but because it's somewhat more secure. I think the layout of how it's managed in ldap is much inferior (having to declare each group

Re: [389-users] What is addRSA.ldif?

2009-12-30 Thread patrick . morris
On Wed, 30 Dec 2009, Chun Tat David Chu wrote: HI All, I am following the instruction on how to enable SSL via http://www.directory.fedora.redhat.com/wiki/Howto:SSL One of the step mentioned to create addRSA.ldif. What exactly does this file do? and why it is necessary?\ The file

Re: [Fedora-directory-users] autofs + LDAP

2009-01-13 Thread Patrick Morris
On Tue, 13 Jan 2009, Brian Kosick wrote: I should clarify... My original looked like this: dn: cn=internal,ou=auto.software,dc=corp,dc=mxlogic,dc=com cn: internal objectClass: automount automountInformation: -soft,intr,nodev,tcp,ro itchy.corp.mxlogic.com:/var/qa Which worked but I

Re: [Fedora-directory-users] configuration prob with fedora-idm-console.bat

2008-04-10 Thread Patrick Morris
Hi Carol! On Thu, 10 Apr 2008, Carol Gibbons wrote: I've seen where other folks have had this problem with the Windows Admin Console setup and it's perplexing. Any reasons why I can't get this application to launch? It keeps coming up with set your java PATH error. See this part?: rem set

Re: [Fedora-directory-users] Email contacts

2008-01-31 Thread Patrick Morris
On Fri, 01 Feb 2008, Paul Fontenot wrote: Is there an easy to follow guide, howto, or tutorial for setting up email contact lists in FDS? If there is I would appreciate a link the the article. I doubt you're going to find a one-size-fits-all article on setting up LDAP mailing lists -- there

Re: [Fedora-directory-users] Email contacts

2008-01-31 Thread Patrick Morris
...and it just occurred to me that you may be asking for a basic contact list/address book, and not mailing lists. If a contact list is what you're looking for, log into the FDS admin utility, create some users, and you've got yourself a contact list. You'll just need to configure your client

Re: [Fedora-directory-users] getent?

2008-01-02 Thread Patrick Morris
Hi Paul! On Wed, 02 Jan 2008, Paul Fontenot wrote: ldapsearch appears to be fine: [EMAIL PROTECTED] bin]# ./ldapsearch -b dc=fontenotshome,dc=org objectclass=posixgroup version: 1 dn: cn=LinuxAdmins,ou=Groups, dc=fontenotshome,dc=org objectClass: top objectClass: groupofuniquenames

Re: [Fedora-directory-users] err=65 for ldap entry modify question

2007-12-12 Thread Patrick Morris
On Thu, 13 Dec 2007, Scott Ding wrote: Can anyone tell me what err=65 means for op=3 in the following log? [12/Dec/2007:11:47:43 -0800] conn=0 op=3 MOD dn=dn=Scott133133Y,dc=vdb,dc=sprintam,dc=autodesk,dc=com [12/Dec/2007:11:47:43 -0800] conn=0 op=3 RESULT err=65 tag=103 nentries=0

Re: [Fedora-directory-users] Windows Authentication

2007-11-19 Thread Patrick Morris
On Tue, 20 Nov 2007, Jared B. Griffith wrote: Has anyone gotten windows computers to successfully authenticate against Fedora Directory Server? If so is there a walk through online somewhere? Or is it just ridiculously easy to do? Or is it like having a windows computer join an active

Re: [Fedora-directory-users] ssh login fail

2007-09-10 Thread Patrick Morris
Hi Steven! On Mon, 10 Sep 2007, Steven Jones wrote: Is this the correct rpm to use on RHAS4-32bit-U5? fedora-ds-1.0.4-1.RHEL4.i386.opt.rpm Are there any dependencies on the server and clients not installed by default? I have everything installed that I can see documented but its

Re: [Fedora-directory-users] Fedora 7 and FDS 1.0.4-FC6

2007-08-28 Thread Patrick Morris
On Wed, 29 Aug 2007, Del wrote: Richard Megginson wrote: Del wrote: What user and group is the server running as? Does it have to make an nss_ldap call to get these user IDs? If so, then this is likely the problem. It's definitely nss_ldap related, though. If I remove the ldap

Re: [Fedora-directory-users] Groups

2007-08-08 Thread Patrick Morris
On Wed, 08 Aug 2007, Ted X Toth wrote: Ok so how do I add a posixgroup entry in LDAP? Create on object with an objectClass of posixGroup. -- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users

Re: [Fedora-directory-users] How Do I?

2007-06-25 Thread Patrick Morris
http://directory.fedoraproject.org/wiki/FAQ On Mon, 25 Jun 2007, Gene Poole wrote: I've just completed a clean install of Fedora 7. How/What should I use to get FDS installed on this new system? Thanks, Gene Poole [EMAIL PROTECTED] -- Fedora-directory-users mailing list

Re: [Fedora-directory-users] Load Testing question

2007-06-06 Thread Patrick Morris
On Wed, 06 Jun 2007, Anderson, Cary wrote: I am still playing around with load/stress testing my FDS install. I am using slamd to run the tests, and I am running the basic load, and the basic search tests against my test boxes, The slamd client and the FDS server are on identical

Re: [Fedora-directory-users] Load Testing question

2007-06-06 Thread Patrick Morris
On Wed, 06 Jun 2007, Anderson, Cary wrote: Thanks for the feedback, I have turned on more extensive logging on the FDS server, Hopefully that will turn something up, but based on the settings in my sysctl.conf, limits.conf, and ulimit, I should be able to handle more than 2500 connections,

Re: [Fedora-directory-users] What groups FDS the user belongs?

2007-05-07 Thread Patrick Morris
On Mon, 2007-05-07 at 20:52 +0400, Сафонов Алексей wrote: Colleagues! How it is possible to learn to what groups FDS the user belongs, using property only the user? I have not found such property. Only it is possible to look in property of concrete group. But I need to create

Re: [Fedora-directory-users] What groups FDS the user belongs?

2007-05-07 Thread Patrick Morris
On Tue, 2007-05-08 at 00:42 +0400, Сафонов Алексей wrote: Thanks, Patrick That depends how your groups are set up. Do they contain UIDs or DNs? Groups contain DN, entering users. For example, there is group GIS in it two users enter: uid=ProbnyIv, ou=GIS, dc=mup-example, dc=vrn, dc=ru

Re: Re: [Fedora-directory-users] What groups FDS the user belongs?

2007-05-07 Thread Patrick Morris
On Tue, 2007-05-08 at 01:50 +0400, Сафонов Алексей wrote: If your directory does not implement this, and instead requires querying the group, support for that is not yet written (and may never be as it is somewhat silly). According to those docs, the way your groups are set up is not

Re: [Fedora-directory-users] Problem running console on Windows

2007-04-04 Thread Patrick Morris
On Wed, 04 Apr 2007, Glenn wrote: I'm trying to get the Fedora DS 1.0.4 console working on a Windows computer, using the instructions in the Howto. When I try to start the console, I get this error message: Exception in thread main java.lang.NoClassDefFoundError:

Re: [Fedora-directory-users] FDS and phpLDAPadmin

2007-01-25 Thread Patrick Morris
On Thu, 25 Jan 2007, Heath Henderson wrote: I am new to LDAP and more specifically FDS. I had an OpenLDAP server setup a year or so ago which I used an older version of phpldapadmin with. It seemed to work without too much trouble, but I can't seem to get either FDS or OpenLDAP working with

Re: [Fedora-directory-users] FDS behind NATed firewall

2007-01-10 Thread Patrick Morris
On Wed, 10 Jan 2007, Nathaniel Hall wrote: I have a master directory server behind a firewall that uses NAT. I want to place a read only server behind a different firewall. The new server does have a public IP address. Here is my setup: Master -- Firewall (NAT) -- Internet -- Firewall --

Re: [Fedora-directory-users] Windows Sync Errors

2007-01-05 Thread Patrick Morris
On Fri, 05 Jan 2007, Glenn wrote: So if I have some object classes and attributes required for AD that are not allowed in DS, and vice-versa, how can I make Windows Sync work? I'm sure I'm missing something here. I'm including sample ldif entries from each import below. Thanks.

Re: [Fedora-directory-users] Standalone Windows Console?

2006-12-18 Thread Patrick Morris
On Mon, 18 Dec 2006, Glenn wrote: Netscape Directory had a standalone application that gave Windows users access to the directory console. The 4.2 version of this app does not seem to work with Red Hat Directory Server 7.1SP3, and I'm wondering if there is a standalone console available

Re: [Fedora-directory-users] GIDs

2006-08-14 Thread Patrick Morris
On Mon, 14 Aug 2006, Adams, Samuel D Contr AFRL/HEDR wrote: How do I, or can I use the directory server to centrally serve POSIX groups to my Linux clients? I can add a group, but it doesn't have a place to put a GID. Try gidNumber. -- Patrick Morris Snapfish/HP 303 Second Street Suite 500

Re: [Fedora-directory-users] High cpu utilizaton by slapd

2006-08-07 Thread Patrick Morris
On Mon, 07 Aug 2006, Bliss, Aaron wrote: Hi everyone, I'm running fds on 2 servers, a supplier and consumer, both are running redhat ES 4; I noticed today and for the last few days that the supplier directory server is running very, very slow, top reveals that ns-slapd is killing the cpu;

Re: [Fedora-directory-users] Requirements

2006-08-01 Thread Patrick Morris
On Tue, 01 Aug 2006, Ken Wood wrote: Sorry if these are really dumb questions but what software is required before Fedora Directory can be installed? Depends how you're installing it and what you're installing it on. On my machines, the only other software I have to install is Apache. As far