Re: [389-users] how does user change PW?

2009-12-03 Thread Alan McKay
On Wed, Dec 2, 2009 at 10:21 PM, Chandrasekar Kannan ckan...@redhat.com wrote: I would think the Directory Server Gateway/Phonebook webapp should allow you to do that... http://directory.fedoraproject.org/wiki/DSGW Excellent - just what I was hoping for! -- “Don't eat anything you've ever

Re: [389-users] CoS imports slow

2009-12-03 Thread Rich Megginson
Edward Koko Konetzko wrote: Rich Megginson wrote: Edward Koko Konetzko wrote: I have a set of CoS objects I am importing in and their add times are extremely slow about 1 a second. What platform? What 389-ds-base version? By import do you mean ldif2db or ldap add? RHEL 5 64 bit, RHDS 8.1

Re: [389-users] how does user change PW?

2009-12-03 Thread Alan McKay
Hmmm, it seems that Centos-DS does not have this : http://directory.fedoraproject.org/wiki/WebApps_Install # Install the Directory Server Gateway package. yum install fedora-ds-dsgw # Run the setup-ds-dsgw script to set up the default instances of the Directory Server Gateway, Directory

RE: [389-users] Password Policy not working fine

2009-12-03 Thread Allan Gaston Hougham
Hi, thanks for you response, We have Fedora-ds 1.2.2 2009.237.2054 Platform: Linux zblhp36 2.6.18-8.1.14.el5 #1 SMP Tue Sep 25 11:45:55 EDT 2007 x86_64 x86_64 x86_64 GNU/Linux In this time we can apply any policies, but is not working user must change password after reset and

[389-users] Directory Server Gateway (was: change PW?)

2009-12-03 Thread Alan McKay
OK, I'm going to just shoot this out to the list as I go along and discover things - hope follks don't mind. But it is an easy if clumsy way to document this for the next person to come along. If anyone can recommend a doc that will get me through this on Centos, please do On Centos I've found

Re: [389-users] how does user change PW?

2009-12-03 Thread Rich Megginson
Alan McKay wrote: Hmmm, it seems that Centos-DS does not have this : http://directory.fedoraproject.org/wiki/WebApps_Install Right. You have to install fedora-ds-dsgw. You should be able to use fedora-ds-dsgw with centos-ds-base and centos-ds-admin. # Install the Directory Server

Re: [389-users] Password Policy not working fine

2009-12-03 Thread Rich Megginson
Allan Gaston Hougham wrote: Hi, thanks for you response, We have Fedora-ds 1.2.2 2009.237.2054 Platform: Linux zblhp36 2.6.18-8.1.14.el5 #1 SMP Tue Sep 25 11:45:55 EDT 2007 x86_64 x86_64 x86_64 GNU/Linux In this time we can apply any policies, but is not working user must change

Re: [389-users] how does user change PW?

2009-12-03 Thread Alan McKay
I doubt there will ever be one, since there is no redhat-ds-dsgw either. Centos adds other extras in that do not come from Red Hat - so you never know -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of In Defense of Food -- 389 users mailing list

Re: [389-users] Directory Server Gateway (was: change PW?)

2009-12-03 Thread Alan McKay
OK, looks like FC6 was the last release to have the RPMs here : http://directory.fedoraproject.org/yum/dirsrv/fedora/ IIRC, Centos5.x is based on FC7 is that right? Where would I get RPMs? -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of In

Re: [389-users] Directory Server Gateway (was: change PW?)

2009-12-03 Thread Alan McKay
OK, I got this RPM http://directory.fedoraproject.org/yum/dirsrv/fedora/6/x86_64/RPMS/389-dsgw-1.1.4-1.el5.x86_64.rpm and it installed fine. I ran the config /usr/sbin/setup-ds-dsgw and it said it went OK. So I got to the web GUI now and see something different which looks like that wiki page.

Re: [389-users] Password Policy not working fine

2009-12-03 Thread Rich Megginson
Allan Gaston Hougham wrote: I can´t .. We have two errors: [r...@dblvm32 ~]# passwd testsi Changing password for user testsi. Enter login(LDAP) password: New UNIX password: Retype new UNIX password: LDAP password information update failed: Confidentiality required Operation requires a secure

[389-users] i know it is a wiki, but ...

2009-12-03 Thread Alan McKay
... I'm going to ask anyway. I've got an internal wiki page in my company right now with details on how I've set up our new Centos-DS server. There is nothing like this currently on your wiki - short and sweet explanation that will probably work for 90%+ of small organisations like mine. I'd

Re: [389-users] i know it is a wiki, but ...

2009-12-03 Thread Rich Megginson
Alan McKay wrote: ... I'm going to ask anyway. I've got an internal wiki page in my company right now with details on how I've set up our new Centos-DS server. There is nothing like this currently on your wiki - short and sweet explanation that will probably work for 90%+ of small

Re: [389-users] i know it is a wiki, but ...

2009-12-03 Thread Alan McKay
Sure.  Just email me the doc and I'll figure out some place to put it. OK. I'm still working on it - figuring out replication right now -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of In Defense of Food -- 389 users mailing list

[389-users] Cos and Roles

2009-12-03 Thread Emmanuel BILLOT
Hi, Is it possible to paste a CoS on a Role ? I mean when one use a Role definition to group several users and those users may inherit attribut because they belong to this Role. BR, -- 389 users mailing list 389-us...@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users

Re: [389-users] setting up multi master replication

2009-12-03 Thread Rich Megginson
Alan McKay wrote: Hey folks, The HOWTO refers to a script that is at the end of a dead link http://directory.fedoraproject.org/wiki/Howto:MultiMasterReplication And the Red Hat docs tell me to do something that causes an error.

Re: [389-users] Re: setting up multi master replication

2009-12-03 Thread Rich Megginson
Alan McKay wrote: Oh, and another question. The first server seems to be working fine. When installing the 2nd one I came to this question and did not really know what it meant so I said yes and pointed it at the 1st server. Was this the right thing to do? Do you want to register this

Re: [389-users] setting up multi master replication

2009-12-03 Thread Nathan Kinder
On 12/03/2009 01:41 PM, Alan McKay wrote: Hey folks, The HOWTO refers to a script that is at the end of a dead link http://directory.fedoraproject.org/wiki/Howto:MultiMasterReplication And the Red Hat docs tell me to do something that causes an error.

[389-users] Re: setting up multi master replication

2009-12-03 Thread Alan McKay
(remove the trailing space) duh! Ok, I'm an idiot! Sorry, but I get really illogically frightened by anything to do with LDAP sigh -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of In Defense of Food -- 389 users mailing list

[389-users] Re: setting up multi master replication

2009-12-03 Thread Alan McKay
OK, sorry again to cry wolf, but I think this is a real question this time :-) Back to the Red Hat doc it says : Specify the replication settings for the multi-mastered read-write replica. 1. In the Directory Server Console, select the Configuration tab. 2. In the navigation

[389-users] Re: setting up multi master replication

2009-12-03 Thread Alan McKay
Well, I blew something. http://www.redhat.com/docs/manuals/dir-server/8.1/admin/images/replagmt1.png When I got to this point I did not see at the bottom the subtree dc=example,dc=com I saw NetscapeRoot Which means when I asked the other question about whether to choose NetscapeRoot or

Re: [389-users] Re: setting up multi master replication

2009-12-03 Thread muzzol
i recommend you to follow this other howto: http://directory.fedoraproject.org/wiki/Howto:WalkthroughMultimasterSSL 2009/12/3 Alan McKay alan.mc...@gmail.com: Well, I blew something. http://www.redhat.com/docs/manuals/dir-server/8.1/admin/images/replagmt1.png When I got to this point I did

Re: [389-users] Re: setting up multi master replication

2009-12-03 Thread Alan McKay
http://directory.fedoraproject.org/wiki/Howto:WalkthroughMultimasterSSL Thanks, that is what I will do tomorrow -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of In Defense of Food -- 389 users mailing list 389-us...@redhat.com

Re: [389-users] Re: setting up multi master replication

2009-12-03 Thread Nathan Kinder
On 12/03/2009 02:41 PM, Alan McKay wrote: Well, I blew something. http://www.redhat.com/docs/manuals/dir-server/8.1/admin/images/replagmt1.png When I got to this point I did not see at the bottom the subtree dc=example,dc=com I saw NetscapeRoot Which means when I asked the other question

Re: [389-users] Re: setting up multi master replication

2009-12-03 Thread Alan McKay
On Thu, Dec 3, 2009 at 6:14 PM, Nathan Kinder nkin...@redhat.com wrote: You need to choose userRoot.  The default database name is userRoot, which maps to whatever suffix you defined at install time.  The NetscapeRoot backend is used by the Administration Server for things like letting the

Re: [389-users] allowing only certain users to log into Linux boxen

2009-12-03 Thread Rich Megginson
Alan McKay wrote: Hey folks, I finally have this thing running - and I love it so far! I have basic Linux login working, as well as Apache auth. Those are my 2 primary concerns so I think I'm ready to start to roll this bad boy out. And one password to unite them all!!! Bwa, ha, ha, ha!

Re: [389-users] allowing only certain users to log into Linux boxen

2009-12-03 Thread Alan McKay
Take a look at http://directory.fedoraproject.org/wiki/Howto:Netgroups and http://directory.fedoraproject.org/wiki/Howto:Posix Oooo, this is looking good! thanks! -- “Don't eat anything you've ever seen advertised on TV” - Michael Pollan, author of In Defense of Food -- 389 users

Re: [389-users] allowing only certain users to log into Linux boxen

2009-12-03 Thread muzzol
2009/12/3 Alan McKay alan.mc...@gmail.com: Hey folks, I finally have this thing running - and I love it so far!  I have basic Linux login working, as well as Apache auth.  Those are my 2 primary concerns so I think I'm ready to start to roll this bad boy out. And one password to unite them

Re: [389-users] CoS imports slow

2009-12-03 Thread Edward Koko Konetzko
Rich Megginson wrote: Edward Koko Konetzko wrote: Rich Megginson wrote: Edward Koko Konetzko wrote: I have a set of CoS objects I am importing in and their add times are extremely slow about 1 a second. What platform? What 389-ds-base version? By import do you mean ldif2db or ldap add?