Re: [389-users] ldap authenticaion is not getting correct information (SSL/TLS) (all files, logs included- please give me light on this)

2013-12-29 Thread Christopher Wood
-D 'cn=Directory Manager' It looks like your ldapsearch is using Directory Manager (the 389 equivalent to the root user). However I do not see where you have specified a bind DN in an ldap.conf file so possibly PAM is binding anonymously and an ACL is prohibiting the search? If this is a

Re: [389-users] ldap authenticaion is not getting correct information (SSL/TLS) (all files, logs included- please give me light on this)

2013-12-29 Thread Christopher Wood
On Sun, Dec 29, 2013 at 05:33:09PM +, fosiul alam wrote: Hi Thanks for the quick Reply. I was thinking that same that some where its missing the Bind dn and I can conferm that, its working with definning binddn and bindpw in ldap.conf but , I confiered this before and I never had

Re: [389-users] how to generate the userpassword

2012-08-05 Thread Christopher Wood
Perhaps use slappasswd? On Sun, Aug 05, 2012 at 01:58:33PM +0100, Fosiul Alam wrote: Hi I am generating the ldif by script. but i cant understand how will i generate the userpassword. userPassword: {crypt}x how this crypt or hash working Please give me some lights on this.

Re: [389-users] openldap client HA for multimaster replication

2012-07-06 Thread Christopher Wood
On Fri, Jul 06, 2012 at 06:27:31PM +, Ryan Palamara wrote: I am using a mix of CentOS 5 and 6 servers using openldap for client ldap. I have 2 289 Directory servers that are using multi-master replication.   When dirsrv stops working on the first server listed under URI,

Re: [389-users] Replica ID management

2012-03-26 Thread Christopher Wood
n Mon, Mar 26, 2012 at 01:15:18PM -0400, mja...@guesswho.com wrote: @Ryan, thanks! That’s an interesting solution. And I thought of another question. Do the replica IDs need to be unique across all databases? Whether or not there's a technological need, consider the advantage of having a

Re: [389-users] Importing Thunderbird AddressBook into LDAP

2011-05-23 Thread Christopher Wood
On 23/05/11 02:06 AM, Carsten Grzemba wrote: I guess the standard schema of 389Ds do not know objectclass mozillaAbPersonAlpha and the attribute mozillanickname My 389 install (rpm via epel) has those: [root@cwldap-01 ~]# grep mozillaAbPersonAlpha /etc/dirsrv/schema/60mozilla.ldif #

Re: [389-users] Importing Thunderbird AddressBook into LDAP

2011-05-22 Thread Christopher Wood
My short trite answer is: http://directory.fedoraproject.org/wiki/FAQ#Troubleshooting * What errors are you getting? * What version are you running? * When you ldapsearch on one of your pre-existing entries, does it look like what you posted below? On 22/05/11 03:10 PM, Philip

Re: [389-users] Manage Certificates button item (slightly different)

2011-03-14 Thread Christopher Wood
On Thu, Feb 10, 2011 at 11:10:19AM -0500, Christopher Wood wrote: On Thu, Feb 10, 2011 at 09:01:52AM -0700, Rich Megginson wrote: On 02/10/2011 08:57 AM, Christopher Wood wrote: On Thu, Feb 10, 2011 at 08:42:45AM -0700, Rich Megginson wrote: On 02/10/2011 08:23 AM, Christopher Wood wrote

Re: [389-users] advice on ssl cert rotation

2011-03-01 Thread Christopher Wood
You can use certutil to manually modify the cert stores. If you installed via rpm this will already be on your systems. Not at my work systems so I don't recall which package it's in. On Tue, Mar 01, 2011 at 07:27:53PM -0800, jon heise wrote: Recently i had ssl certs expire on my directory

Re: [389-users] Manage Certificates button item (slightly different)

2011-02-10 Thread Christopher Wood
On Thu, Feb 10, 2011 at 08:42:45AM -0700, Rich Megginson wrote: On 02/10/2011 08:23 AM, Christopher Wood wrote: On Thu, Feb 10, 2011 at 08:11:09AM -0700, Rich Megginson wrote: On 02/10/2011 07:45 AM, Christopher Wood wrote: 11;rgb://On Wed, Feb 09, 2011 at 05:49:28PM -0700, Rich

Re: [389-users] Manage Certificates button item (slightly different)

2011-02-10 Thread Christopher Wood
On Thu, Feb 10, 2011 at 09:01:52AM -0700, Rich Megginson wrote: On 02/10/2011 08:57 AM, Christopher Wood wrote: On Thu, Feb 10, 2011 at 08:42:45AM -0700, Rich Megginson wrote: On 02/10/2011 08:23 AM, Christopher Wood wrote: On Thu, Feb 10, 2011 at 08:11:09AM -0700, Rich Megginson wrote: On 02

Re: [389-users] Manage Certificates button item (slightly different)

2011-02-10 Thread Christopher Wood
11;rgb://On Wed, Feb 09, 2011 at 05:49:28PM -0700, Rich Megginson wrote: On 02/09/2011 07:59 AM, Christopher Wood wrote: On Tue, Feb 08, 2011 at 06:14:27PM -0700, Rich Megginson wrote: On 02/08/2011 04:11 PM, Christopher Wood wrote: These bugs are almost exactly the issue I'm

Re: [389-users] Manage Certificates button item (slightly different)

2011-02-09 Thread Christopher Wood
On Tue, Feb 08, 2011 at 06:14:27PM -0700, Rich Megginson wrote: On 02/08/2011 04:11 PM, Christopher Wood wrote: These bugs are almost exactly the issue I'm experiencing: https://bugzilla.redhat.com/show_bug.cgi?id=430499 https://bugzilla.redhat.com/show_bug.cgi?id=442103 In my case

[389-users] Manage Certificates button item (slightly different)

2011-02-08 Thread Christopher Wood
These bugs are almost exactly the issue I'm experiencing: https://bugzilla.redhat.com/show_bug.cgi?id=430499 https://bugzilla.redhat.com/show_bug.cgi?id=442103 In my case, the admin server on host1 can use the Manage Certificates button on the admin server, and the directory server installed on

[389-users] schema for dns

2011-01-17 Thread Christopher Wood
Questions: When was the dNSDomain schema deprecated in 389 DS? Why was it deprecated in 389 DS? What schema do 389 Directory Server or Red Hat Directory Server users customarily use to store DNS zones in their directories? (Am I asking the right questions?) As well, my thanks to the list

[389-users] case sensitivity and matching rules

2010-04-20 Thread Christopher Wood
I'm puzzling over case-sensitivity, attributes, and matching rules in 389. I have an attribute (oid slightly munged for privacy): attributeTypes: ( 1.2.3.4 NAME 'ldapAuthLogin' DESC 'Account login name' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'user defined' ) It doesn't

Re: [389-users] stuck on a single entry

2010-03-25 Thread Christopher Wood
On Thu, Mar 25, 2010 at 11:59:31AM -0600, Rich Megginson wrote: Christopher Wood wrote: I'm having another issue that I'm not making headway on. This time, I can't import a single value into one attribute in my directory. The attribute in question is a DirectoryString . (Previously

Re: [389-users] Netscape 6.2 389 Directory server replication

2010-03-25 Thread Christopher Wood
I'm doing much the same thing -- from an NDS 6.21 single master setup, ideally to a 389 dual master setup. I have the same situation with critical production servers and also plan to replicate my way through the upgrade. I ran into two big caveats: 1) schema I was not able to simply move my

Re: [389-users] importing large subtree crashes ns-slapd

2010-03-15 Thread Christopher Wood
On Mon, Mar 15, 2010 at 12:57:08PM -0600, Rich Megginson wrote: Christopher Wood wrote: On Thu, Mar 04, 2010 at 12:06:31PM -0700, Rich Megginson wrote: Christopher Wood wrote: On Wed, Mar 03, 2010 at 08:30:19PM -0700, Rich Megginson wrote: Christopher Wood wrote

Re: [389-users] importing large subtree crashes ns-slapd

2010-03-15 Thread Christopher Wood
On Thu, Mar 04, 2010 at 12:06:31PM -0700, Rich Megginson wrote: Christopher Wood wrote: On Wed, Mar 03, 2010 at 08:30:19PM -0700, Rich Megginson wrote: Christopher Wood wrote: I'm just getting started with 389 Directory Server (at work), and I've run into an issue that I'm

Re: [389-users] importing large subtree crashes ns-slapd

2010-03-15 Thread Christopher Wood
On Mon, Mar 15, 2010 at 12:57:08PM -0600, Rich Megginson wrote: Christopher Wood wrote: On Thu, Mar 04, 2010 at 12:06:31PM -0700, Rich Megginson wrote: Christopher Wood wrote: On Wed, Mar 03, 2010 at 08:30:19PM -0700, Rich Megginson wrote: Christopher Wood wrote

Re: [389-users] importing large subtree crashes ns-slapd

2010-03-15 Thread Christopher Wood
On Mon, Mar 15, 2010 at 03:05:10PM -0600, Rich Megginson wrote: Christopher Wood wrote: On Mon, Mar 15, 2010 at 12:57:08PM -0600, Rich Megginson wrote: Christopher Wood wrote: On Thu, Mar 04, 2010 at 12:06:31PM -0700, Rich Megginson wrote: Christopher Wood wrote

Re: [389-users] importing large subtree crashes ns-slapd

2010-03-04 Thread Christopher Wood
On Wed, Mar 03, 2010 at 08:30:19PM -0700, Rich Megginson wrote: Christopher Wood wrote: I'm just getting started with 389 Directory Server (at work), and I've run into an issue that I'm not certain how to troubleshoot. I would greatly appreciate any assistance or tips you could offer

[389-users] importing large subtree crashes ns-slapd

2010-03-03 Thread Christopher Wood
I'm just getting started with 389 Directory Server (at work), and I've run into an issue that I'm not certain how to troubleshoot. I would greatly appreciate any assistance or tips you could offer, especially on where to look to see what's failing. Also, I apologize in advance for changing