Re: [389-users] Replication hell - picking apart info/warning/error messages

2014-05-05 Thread Ludwig Krispenz
A generation ID is an id generated when the backend is created or when data from an ldif (without generation id) is imported. So when setting up an environment all servers have a different generation ID, to make replication work you need to choose one server and initialize all otheres from

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Graham Leggett
On 04 May 2014, at 9:35 PM, David Boreham david_l...@boreham.org wrote: It should be possible to add an N+1th replica to an N-node deployment. Replication agreements are peer-to-peer, so you just add a new replication agreement from each of the servers you want to feed changes to the N+1th

[389-users] bak2db script: how do you use it?

2014-05-05 Thread Graham Leggett
Hi all, I am now trying to make the initial replication happen manually through the restoration of a backup. This is also turning out to be strangely difficult. After backing up servera I have the following directory on serverc: [root@serverc ~]# ls -al /tmp/replicate/ total 16 drwx--. 4

[389-users] archive2db: Failed to read backup file set. Either the directory specified doesn't exist, or it exists but doesn't contain a valid backup set, or file permissions prevent the server readin

2014-05-05 Thread Graham Leggett
Hi all, I am now trying to use the bak2db.pl script in an effort to restore a backup as follows, and receive the error below. Can anyone point out what I am doing wrong? (I had to manually hack the bak2db.pl script to change the host to localhost, the script blindly assumes the box is

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Graham Leggett
On 05 May 2014, at 11:37 AM, Graham Leggett minf...@sharp.fm wrote: It should be possible to add an N+1th replica to an N-node deployment. Replication agreements are peer-to-peer, so you just add a new replication agreement from each of the servers you want to feed changes to the N+1th

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread David Boreham
On 5/5/2014 3:37 AM, Graham Leggett wrote: What appears to be happening is that during the replication process, an LDAP operation that is accepted on servera is being rejected by serverc. The replication process is brittle, and has not been coded to handle any kind of error during the

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Rich Megginson
On 05/05/2014 08:55 AM, Graham Leggett wrote: On 05 May 2014, at 11:37 AM, Graham Leggett minf...@sharp.fm wrote: It should be possible to add an N+1th replica to an N-node deployment. Replication agreements are peer-to-peer, so you just add a new replication agreement from each of the

Re: [389-users] dsgw not checking passwords during auth

2014-05-05 Thread Rich Megginson
On 05/05/2014 07:34 AM, Ted Strother wrote: I have a web server running dsgw which is pointing at an ldap instance on another server in the config. Searches work fine, actions tht require auth work fine when the password was correct. When an incorrect password is entered it is still accepted, a

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread David Boreham
On 5/5/2014 8:55 AM, Graham Leggett wrote: One of the objects being replicated is a large group containing about 21000 uniqueMembers. When it comes to replicate this object, the replication pauses for about 6 seconds or so, and at that point it times out, responding with the following

Re: [389-users] dsgw not checking passwords during auth

2014-05-05 Thread Ted Strother
An indication that the password was incorrect, as in another dsgw instance that we have (from back when it was netscape directory): Authentication Failed Authentication failed because the password you supplied is incorrect. Please click the Retry button and try again. If you have forgotten the

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Rich Megginson
On 05/05/2014 09:39 AM, David Boreham wrote: On 5/5/2014 9:24 AM, Rich Megginson wrote: See https://fedorahosted.org/389/ticket/47606 This bug looks quite consistent with the OP's symptoms and the presence of a large group entry, but he should be seeing Incoming BER Element was too long

Re: [389-users] dsgw not checking passwords during auth

2014-05-05 Thread Rich Megginson
On 05/05/2014 09:29 AM, Ted Strother wrote: An indication that the password was incorrect, as in another dsgw instance that we have (from back when it was netscape directory): Authentication Failed Authentication failed because the password you supplied is incorrect. Please click the Retry

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Graham Leggett
On 05 May 2014, at 5:39 PM, David Boreham david_l...@boreham.org wrote: See https://fedorahosted.org/389/ticket/47606 This bug looks quite consistent with the OP's symptoms and the presence of a large group entry, but he should be seeing Incoming BER Element was too long in the consumer

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread David Boreham
On 5/5/2014 9:46 AM, Graham Leggett wrote: [05/May/2014:17:36:04 +0200] NSMMReplicationPlugin - agmt=cn=Agreement servera.example.com (servera:636): Replica has a different generation ID than the local data. I haven't the faintest clue what a generation ID is, how you set it, or what the

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Graham Leggett
On 05 May 2014, at 5:41 PM, Rich Megginson rmegg...@redhat.com wrote: See https://fedorahosted.org/389/ticket/47606 This bug looks quite consistent with the OP's symptoms and the presence of a large group entry, but he should be seeing Incoming BER Element was too long in the consumer log

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Mark Reynolds
On 05/05/2014 12:13 PM, Graham Leggett wrote: On 05 May 2014, at 5:41 PM, Rich Megginson rmegg...@redhat.com wrote: See https://fedorahosted.org/389/ticket/47606 This bug looks quite consistent with the OP's symptoms and the presence of a large group entry, but he should be seeing Incoming

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Rich Megginson
On 05/05/2014 10:13 AM, Graham Leggett wrote: On 05 May 2014, at 5:41 PM, Rich Megginson rmegg...@redhat.com wrote: See https://fedorahosted.org/389/ticket/47606 This bug looks quite consistent with the OP's symptoms and the presence of a large group entry, but he should be seeing Incoming

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Graham Leggett
On 04 May 2014, at 10:18 PM, Graham Leggett minf...@example.com wrote: We got ber_get_next failed for connection 2 without being told what exactly failed. Will dig on the other side to see if there are any clues. On the other side we see this: [04/May/2014:21:29:10 +0100]

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Graham Leggett
On 05 May 2014, at 6:18 PM, Mark Reynolds marey...@redhat.com wrote: nsslapd-maxbersize: 0 0 tells the server to use the default value of 2mb, you need to set it higher(5mb?). You're kidding. Zero actually means 2MB. Intuitive. I double checked servera and serverb, both have these set as

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Graham Leggett
On 05 May 2014, at 6:24 PM, Rich Megginson rmegg...@redhat.com wrote: I think the problem is this: [05/May/2014:17:34:41 +0200] - import userRoot: WARNING: Skipping entry nsuniqueid=---,o=Foo,c=ZA which has no parent, ending at line 18 of file

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Mark Reynolds
On 05/05/2014 12:46 PM, Graham Leggett wrote: On 05 May 2014, at 6:18 PM, Mark Reynolds marey...@redhat.com wrote: nsslapd-maxbersize: 0 0 tells the server to use the default value of 2mb, you need to set it higher(5mb?). You're kidding. Zero actually means 2MB. Intuitive. I agree, I don't

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Rich Megginson
On 05/05/2014 10:49 AM, Graham Leggett wrote: On 05 May 2014, at 6:24 PM, Rich Megginson rmegg...@redhat.com wrote: I think the problem is this: [05/May/2014:17:34:41 +0200] - import userRoot: WARNING: Skipping entry nsuniqueid=---,o=Foo,c=ZA which has no

Re: Trouble starting webex in F20

2014-05-05 Thread Pal, Laszlo (private)
Hi, I'm fighting with webex under FC20 for months and there is no good news at all. First of all Webex is very outdated, even no support for 64bit environemnts. I've tried to set-up 32bit env. and 32 bit firefox w/o success and finally after exchanging some mails with webex support I given up

Re: Small Home server - HDD/SDD

2014-05-05 Thread Pal, Laszlo (private)
Forget USB stick as OS device as it told by others :) If you want to keep SATA ports, you should add some more either connecting to a low profile pci/pcie card or maybe to use some msata add-on card. It is fast, reliable and not so expensive L: -- users mailing list

Re: A new Thinkpad X240 touchpad issue

2014-05-05 Thread Pal, Laszlo (private)
On my thinkpad this is a very useful script sometimes... touchpad/trackpoint in thinkpads under linux are not so good, however there is always a workaround :)) Palmdetect is working for you? L: #!/bin/bash case $1 in usb|ext|off) xinput set-prop TPPS/2 IBM TrackPoint

Re: remmina

2014-05-05 Thread Robert Dady
Hi all! I had to have a F20 reinstall, now I am lost how I used to use remmina as XEN vncviewer! Thank Robert On 3 May 2014 16:37, Patrick Dupre pdu...@gmx.com wrote: OK, it seems correct. However, I am may be not entirely. For example, if a open a new session, let say :1 I can connect,

Re: fc20 with full updates: unable to pair with wifi router

2014-05-05 Thread Marko Vojinovic
On Sun, 4 May 2014 20:41:03 -0700 Luke Nath luken...@hotmail.com wrote: Date: Mon, 5 May 2014 00:46:16 +0100 From: vvma...@gmail.com To: users@lists.fedoraproject.org Subject: Re: fc20 with full updates: unable to pair with wifi router Just to be sure --- you did use wpa_passphrase to

Re: grub2

2014-05-05 Thread Patrick Dupre
- Original Message - From: Chris Murphy Sent: 05/05/14 07:35 AM To: Community support for Fedora users Subject: Re: grub2 On May 4, 2014, at 4:33 PM, Patrick Dupre pdu...@gmx.com wrote: Hello, After the installation of a new kernel (typically during an update). There

Re: remmina

2014-05-05 Thread Patrick Dupre
Hello, I recently moved to remmina with the vnc puggin. I do not use vncviewer. This only work for a LAN (no firewall). Good luck Hi all! I had to have a F20 reinstall, now I am lost how I used to use remmina as XEN vncviewer! Thank Robert On 3 May 2014 16:37, Patrick Dupre

Playing video gone wacky?

2014-05-05 Thread Tom Horsley
Some recent update has completely messed up video playback on my system. I believe mplayer uses the 'xv' output by default and it now looks like it only manages to update a band here and there on each frame. The picture looks like it was run through a shredder and pasted back together with the

fedora 19 update fail

2014-05-05 Thread Franklin McCormick
This morning update of Fedora 19 included a new Thunderbird. It failed and now T'bird won't run. These are the details: Updating: thunderbird i686 24.5.0-1.fc19 updates 15 M Transaction Summary

Re: cups-pdf

2014-05-05 Thread Daniel J Walsh
On 05/04/2014 06:27 PM, Patrick Dupre wrote: - Original Message - From: Steven Stern Sent: 05/05/14 12:03 AM To: Community support for Fedora users Subject: Re: cups-pdf On 05/04/2014 04:57 PM, Patrick Dupre wrote: - Original Message - From: Steven Stern Sent: 05/04/14

Re: remmina

2014-05-05 Thread Ed Greshko
On 05/05/14 18:42, Patrick Dupre wrote: I recently moved to remmina with the vnc puggin. I do not use vncviewer. This only work for a LAN (no firewall). It should be made clear that the situation you describe would be true for any network based applications in an environment where a firewall,

Re: Set SELinux to allow only httpd daemon to use specific tty device

2014-05-05 Thread Daniel J Walsh
On 05/04/2014 12:22 AM, Emmanuel Noobadmin wrote: Using Fedora 20 3.11.10-301.fc20.x86_64 and selinux targeted policy.29 I've a PHP application that sends data to a USB tty device e.g. /dev/usbDataCollector Unfortunately selinux is blocking this action. When set to permissive, the alert

Re: Playing video gone wacky?

2014-05-05 Thread Ed Greshko
On 05/05/14 19:57, Tom Horsley wrote: Some recent update has completely messed up video playback on my system. I believe mplayer uses the 'xv' output by default and it now looks like it only manages to update a band here and there on each frame. The picture looks like it was run through a

[389-users] dsgw not checking passwords during auth

2014-05-05 Thread Ted Strother
I have a web server running dsgw which is pointing at an ldap instance on another server in the config. Searches work fine, actions tht require auth work fine when the password was correct. When an incorrect password is entered it is still accepted, a cookie is created, and as soon as an

Re: Playing video gone wacky?

2014-05-05 Thread Tom Horsley
On Mon, 05 May 2014 21:33:05 +0800 Ed Greshko wrote: There are also others having problems with one type of Intel graphics card, but not another type. Is there an existing bug report somewhere I could chime in on and add my video info? -- users mailing list users@lists.fedoraproject.org To

Re: Playing video gone wacky?

2014-05-05 Thread Ed Greshko
On 05/05/14 22:05, Tom Horsley wrote: On Mon, 05 May 2014 21:33:05 +0800 Ed Greshko wrote: There are also others having problems with one type of Intel graphics card, but not another type. Is there an existing bug report somewhere I could chime in on and add my video info?

Re: system-config-services

2014-05-05 Thread Thomas Woerner
Hello On 05/03/2014 02:10 AM, Patrick Dupre wrote: Hello, I am lost again!!! I cannot open the port: 5900/tcp closed vnc 5901/tcp closed vnc-1 5902/tcp closed vnc-2 5903/tcp closed vnc-3 or from localhost: 5900/tcp closed vnc 5901/tcp filtered vnc-1 5902/tcp closed vnc-2 5903/tcp

unreportable kernel oops / bluetooth

2014-05-05 Thread Steven Stern
I get kerneloops reports that I can't pass on because the kernel is tained by the virtualbox drivers. The oops occurs when a previously paired bluetooth device becomes discoverable. My F20 systems sees the device and connects, then disconnects, then the oops occurs. If I put the device back

Doing a bit of c++ compiling

2014-05-05 Thread Robert Moskowitz
OK, in terms of compiling ANYTHING, I am at best a hack. I don't believe I have any compile stuff on this system, as it was a base notebook install. But here I am needing one LITTLE c++ piece of code compiled. You can find it in: http://en.wikipedia.org/wiki/Birthday_attack I need to

Re: Doing a bit of c++ compiling

2014-05-05 Thread Ranjan Maitra
On Mon, 5 May 2014 13:48:19 -0400 Robert Moskowitz r...@htt-consult.com wrote: OK, in terms of compiling ANYTHING, I am at best a hack. I don't believe I have any compile stuff on this system, as it was a base notebook install. But here I am needing one LITTLE c++ piece of code compiled.

Re: Doing a bit of c++ compiling

2014-05-05 Thread Jack Craig
if you do yum group installs forDevelopment Libraries Development Tools, it should cover it... On Mon, May 5, 2014 at 10:48 AM, Robert Moskowitz r...@htt-consult.comwrote: OK, in terms of compiling ANYTHING, I am at best a hack. I don't believe I have any compile stuff on this system,

Re: Doing a bit of c++ compiling

2014-05-05 Thread Robert Moskowitz
On 05/05/2014 01:48 PM, Robert Moskowitz wrote: OK, in terms of compiling ANYTHING, I am at best a hack. I don't believe I have any compile stuff on this system, as it was a base notebook install. But here I am needing one LITTLE c++ piece of code compiled. You can find it in:

Re: [389-users] Failed to send extended operation: LDAP error -1 (Can't contact LDAP server)

2014-05-05 Thread Graham Leggett
On 5 May 2014, at 17:57, Mark Reynolds marey...@redhat.com wrote: You're kidding. Zero actually means 2MB. Intuitive. I agree, I don't think we should even allow 0 as a valid value, but then again that's what the docs are for. That's what the principal of least astonishment is for. I

Re: unreportable kernel oops / bluetooth

2014-05-05 Thread D. Hugh Redelmeier
| From: Steven Stern subscribed-li...@sterndata.com | I get kerneloops reports that I can't pass on because the kernel is | tained by the virtualbox drivers. ... | Any suggestions about how to debug/fix this? See if you can repeat this without the virtualbox drivers installed. If so: report to

Re: unreportable kernel oops / bluetooth

2014-05-05 Thread Steven Stern
On 05/05/2014 01:37 PM, D. Hugh Redelmeier wrote: | From: Steven Stern subscribed-li...@sterndata.com | I get kerneloops reports that I can't pass on because the kernel is | tained by the virtualbox drivers. ... | Any suggestions about how to debug/fix this? See if you can repeat this

RE: fc20 with full updates: unable to pair with wifi router

2014-05-05 Thread Luke Nath
Date: Mon, 5 May 2014 09:13:33 +0100 From: vvma...@gmail.com To: users@lists.fedoraproject.org Subject: Re: fc20 with full updates: unable to pair with wifi router On Sun, 4 May 2014 20:41:03 -0700 Luke Nath luken...@hotmail.com wrote: Date: Mon, 5 May 2014 00:46:16 +0100 From:

How/Where to Report google chrom repo errors

2014-05-05 Thread Tim Evans
Getting this from yum for the last several days: google-chrome-unstable-36.0.19 FAILED http://dl.google.com/linux/chrome/rpm/stable/x86_64/google-chrome-unstable-36.0.1964.2-1.x86_64.rpm: [Errno 14] HTTP Error 404 - Not Found Trying other mirror. Error downloading packages:

Re: How/Where to Report google chrom repo errors

2014-05-05 Thread g
On 05/06/14 03:09, Tim Evans wrote: Getting this from yum for the last several days: google-chrome-unstable-36.0.19 FAILED http://dl.google.com/linux/chrome/rpm/stable/x86_64/google-chrome-unstable-36.0.1964.2-1.x86_64.rpm: [Errno 14] HTTP Error 404 - Not Found Trying other mirror. Error

Re: How/Where to Report google chrom repo errors

2014-05-05 Thread David
On 5/5/2014 5:09 PM, Tim Evans wrote: Getting this from yum for the last several days: google-chrome-unstable-36.0.19 FAILED http://dl.google.com/linux/chrome/rpm/stable/x86_64/google-chrome-unstable-36.0.1964.2-1.x86_64.rpm: [Errno 14] HTTP Error 404 - Not Found Trying other mirror.

Re: How/Where to Report google chrom repo errors

2014-05-05 Thread g
*in addition* On 05/06/14 03:29, g wrote: On 05/06/14 03:09, Tim Evans wrote: Getting this from yum for the last several days: google-chrome-unstable-36.0.19 FAILED http://dl.google.com/linux/chrome/rpm/stable/x86_64/google-chrome-unstable-36.0.1964.2-1.x86_64.rpm: [Errno 14] HTTP Error

Re: How/Where to Report google chrom repo errors

2014-05-05 Thread g
On 05/06/14 03:36, g wrote: *in addition* On 05/06/14 03:29, g wrote: On 05/06/14 03:09, Tim Evans wrote: Getting this from yum for the last several days: google-chrome-unstable-36.0.19 FAILED

Re: Playing video gone wacky?

2014-05-05 Thread Tom Horsley
https://bugs.freedesktop.org/show_bug.cgi?id=75723 https://bugzilla.redhat.com/show_bug.cgi?id=1093940 Are the 2 I know of Hmmm... Maybe they are the same problem, but the descriptions are so different I decided to make a new bug and let someone who might understand this stuff decide

printer

2014-05-05 Thread Patrick Dupre
Hello, Every time that I reboot, I lost the queue configuration of my printer. I have to remove the printer and add it again. How can I avoid this disfunctioning in fedora 20? Thank. === Patrick DUPRÉ                      

Re: printer

2014-05-05 Thread Doug
On 05/05/2014 06:21 PM, Patrick Dupre wrote: Hello, Every time that I reboot, I lost the queue configuration of my printer. I have to remove the printer and add it again. How can I avoid this disfunctioning in fedora 20? Thank.

Re: printer

2014-05-05 Thread Lee
On May 5, 2014 3:22 PM, Patrick Dupre pdu...@gmx.com wrote: Hello, Every time that I reboot, I lost the queue configuration of my printer. I have to remove the printer and add it again. How can I avoid this disfunctioning in fedora 20? Thank. Try reinstalling CUPS. -- users mailing

Re: printer

2014-05-05 Thread Eddie O'Connor
Also I would recommend installing the hplip packages as well?.I know this works for most printers, even if they're not HP's. EGO II On Mon, May 5, 2014 at 6:41 PM, Lee ny6...@gmail.com wrote: On May 5, 2014 3:22 PM, Patrick Dupre pdu...@gmx.com wrote: Hello, Every time that I

Re: printer

2014-05-05 Thread Patrick Dupre
- Original Message - From: Eddie O'Connor Sent: 05/06/14 12:44 AM To: Community support for Fedora users Subject: Re: printer Also I would recommend installing the hplip packages as well?.I know this works for most printers, even if they're not HP's. It is already installed.

Re: printer

2014-05-05 Thread Edward
On 5/5/2014 3:51 PM, Patrick Dupre wrote: - Original Message - From: Eddie O'Connor Sent: 05/06/14 12:44 AM To: Community support for Fedora users Subject: Re: printer Also I would recommend installing the hplip packages as well?.I know this works for most printers, even if they're

Re: printer

2014-05-05 Thread jarmo
Tue, 06 May 2014 00:21:57 +0200 Patrick Dupre pdu...@gmx.com kirjoitti: Hello, Every time that I reboot, I lost the queue configuration of my printer. I have to remove the printer and add it again. Could you name printer you trying to use? Jarmo -- users mailing list

Re: Set SELinux to allow only httpd daemon to use specific tty device

2014-05-05 Thread Emmanuel Noobadmin
On 5/5/14, Daniel J Walsh dwa...@redhat.com wrote: Simplest would be to just use # grep usbDataCollector /var/log/audit/audit.log | audit2allow -M myhttp # semodule -i myhttp.pp This would allot httpd_t processes the ability to use usb_device_t. If you really wanted to tighten it up, you