[389-users] Re: Problem with SSL replication

2024-06-10 Thread William Brown
orm searches against both of the first 2 servers? Basic ldapsearch/ldapwhoami over TLS. That way we can rule out connectivity issues. -- Sincerely, William Brown Senior Software Engineer, Identity and Access Management SUSE Labs, Australia -- ___ 3

[389-users] Re: advice on 389 in production

2024-06-08 Thread morgan jones
:) > > Regards, > > AI > > > - Mail original - > > De: "Morgan Jones" > > À: "General discussion list for the 389 Directory server, project." > > <389-users@lists.fedoraproject.org> > > Envoyé: Mercredi 5 Juin 2024 2

[389-users] Problem with SSL replication

2024-06-08 Thread Riss Nicolas
Nicolas Riss -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines

[389-users] Re: advice on 389 in production

2024-06-06 Thread Ivanov Andrey (M.)
(9.4 i think). 389ds version 2.5 compiling from git branch (i think the latest one is 2.5.1, maybe it is available as rpm). No complaints at all :) Regards, AI - Mail original - > De: "Morgan Jones" > À: "General discussion list for the 389 Directory server, pr

[389-users] Re: advice on 389 in production

2024-06-05 Thread William Brown
ars to be 3.x (see above > re: preferred production version). > Due to how we build the docker containers we tend to track the "latest" right now. But there was some talk to fix that. -- Sincerely, William Brown Senior Software Engineer, Identity and Access Management SUSE

[389-users] advice on 389 in production

2024-06-05 Thread Morgan Jones
for a production install? I see there is an up to date image which I've been able to start but it appears to be 3.x (see above re: preferred production version). Thanks, -morgan -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send

[389-users] Re: Password Hashes in Audit Log

2024-05-31 Thread Mark Reynolds
ps some other way that I may have missed in my research? Thanks everyone, Trevor -- ___________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://d

[389-users] Password Hashes in Audit Log

2024-05-31 Thread Trevor Fong
e capture audit logs on. Is there perhaps some other way that I may have missed in my research? Thanks everyone, Trevor -- _______ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fe

[389-users] Re: Automatically delete "linked" objects

2024-05-27 Thread Pierre Rogier
te: >roleOccupant: uid=user1,ou=users,dc=test,dc=tld > > I would like to delete the cn=xyz-object automatically when the > uid=user1-object is deleted. Is there a way to do this server side, or > do I have to implement it client side? > > Thanks > Julian > -- > ____

[389-users] Automatically delete "linked" objects

2024-05-24 Thread Julian Kippels
-- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List

[389-users] [389-announce] Announcing 389 Directory Server 3.1.0

2024-05-15 Thread James Chapman
about the initial installation and setup See Source <https://www.port389.org/docs/389ds/development/source.html> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments to the 389-u

[389-users] Re: [Freeipa-users] Fedora 40: new warning in ipa-healthckeck

2024-04-26 Thread Rob Crittenden
Cross-posting this on the 389-users list. rob Jochen Kellner via FreeIPA-users wrote: > > Hi, > > I've upgraded my freeipa server to Fedora 40 (the system was installed > several releases ago). After the upgrade I get the following new warning > from ipa-healthcheck: >

[389-users] Re: One way supplier replication is failing on newly installed instance

2024-04-22 Thread tdarby
and then I can retire the old instances. -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code

[389-users] Re: One way supplier replication is failing on newly installed instance

2024-04-18 Thread tdarby
readwaiters: 0 opsinitiated: 1913950 opscompleted: 1913949 entriessent: 1945806 bytessent: 206107062 currenttime: 20240418184424Z starttime: 20240417165836Z nbackends: 1 -- _______ 389-users mailing list -- 389-users@lists.fedoraproject.org To

[389-users] Re: One way supplier replication is failing on newly installed instance

2024-04-18 Thread Marc Sauton
__ > 389-users mailing list -- 389-users@lists.fedoraproject.org > To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.

[389-users] Re: One way supplier replication is failing on newly installed instance

2024-04-18 Thread tdarby
. -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

[389-users] One way supplier replication is failing on newly installed instance

2024-04-18 Thread tdarby
ion to halt and it will not resume until it gets passed whatever the issue is. I was hoping that I could somehow get past this 2 hour retry by disabling and re-enabling the agreement but that seems to have no effect. Any thoughts on how to attack this? - Tim -- _________

[389-users] [389-announce] Announcing 389 Directory Server 3.0.2

2024-04-17 Thread James Chapman
nstall-389.html> for more information about the initial installation and setup See Source <https://www.port389.org/docs/389ds/development/source.html> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and c

[389-users] Re: Permission of log files

2024-04-15 Thread Rob Murray
: Julian Kippels Sent: Monday, April 15, 2024 4:51 AM To: General discussion list for the 389 Directory server project. <389-users@lists.fedoraproject.org> Subject: [389-users] Permission of log files ✉External message: Use caution. Hi, I am looking for a way to configure the default perm

[389-users] Re: Permission of log files

2024-04-15 Thread Julian Kippels
that my external log-monitoring can access the files. Julian -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https

[389-users] Permission of log files

2024-04-15 Thread Julian Kippels
. Julian smime.p7s Description: Kryptografische S/MIME-Signatur -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org

[389-users] Re: 389 DS 2.3.6 on RHEL 9 replication between 2.3.6 and 1.3.9 389DS

2024-04-02 Thread Mark Reynolds
cated in real time? My first attempt produced an error about different database versions. Maybe it is not supposed to work? Thank you, - Alex -- ___ 389-users mailing list --389-users@lists.fedoraproject.org To unsubscribe send an email to389-users-le...

[389-users] Re: 389 DS 2.3.6 on RHEL 9 replication between 2.3.6 and 1.3.9 389DS

2024-04-02 Thread Alex Nazarenko
; > > > My first attempt produced an error about different database versions. > > Maybe it is not supposed to work? > > > > Thank you, > > - Alex > > > > > > > > -- > ___ > 389-users mailing list -- 389-users@lists.fedoraproject.org &

[389-users] Re: 389 DS 2.3.6 on RHEL 9 replication between 2.3.6 and 1.3.9 389DS

2024-04-02 Thread Mark Reynolds
transition, and get the data replicated in real time? My first attempt produced an error about different database versions. Maybe it is not supposed to work? Thank you, - Alex -- _______ 389-users mailing list --389-users@lists.fedoraproject.org To unsubs

[389-users] 389 DS 2.3.6 on RHEL 9 replication between 2.3.6 and 1.3.9 389DS

2024-04-02 Thread Nazarenko, Alexander
an error about different database versions. Maybe it is not supposed to work? Thank you, - Alex -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code

[389-users] Re: Questions regarding PDBKD2 iteration count status and possible optimization

2024-03-28 Thread William Brown
that gives you some more context. -- Sincerely, William Brown Senior Software Engineer, Identity and Access Management SUSE Labs, Australia -- _______ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@l

[389-users] Questions regarding PDBKD2 iteration count status and possible optimization

2024-03-28 Thread Tobias Ernstberger
es: This could be a valuable improvement as the general idea of PBKDF2 is to increase iteration count over time while hardware resources are growing. Any comments? Kind regards, Tobias Ernstberger smime.p7s Description: S/MIME cryptographic signature -- ___________

[389-users] Re: Directory Administrators vs. Password Administrators

2024-03-18 Thread Thierry Bordaz
-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives

[389-users] Directory Administrators vs. Password Administrators

2024-03-15 Thread tdarby
of these Password Administrators. -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct

[389-users] Re: Determining max CSN of running server

2024-03-01 Thread William Faulk
, and I. If that's not clear, let me know and I can draw a diagram. -- William Faulk -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https

[389-users] Re: Determining max CSN of running server

2024-03-01 Thread William Faulk
memberof idnssoaserial entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount nsDS5ReplicatedAttributeListTotal: (objectclass=*) $ EXCLUDE entryusn krblastsuccessfulauth krblastfailedauth krbloginfailedcount -- William Faulk -- _______ 389-users mai

[389-users] Re: Determining max CSN of running server

2024-03-01 Thread Thierry Bordaz
, though. I'd have to perform a rolling reinitialization throughout our whole environment, and it takes ages and a lot of effort. -- ___________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedorapr

[389-users] Re: Determining max CSN of running server

2024-03-01 Thread Thierry Bordaz
is not yet completed. And I suspect that you hit a bug about this list. I remember that we fixed something in that area a few years ago ... I think I found it, or something closely related. https://github.com/389ds/389-ds-base/pull/4553 -- ___ 389-users

[389-users] Re: Determining max CSN of running server

2024-02-29 Thread William Brown
iling server and proceed from there. The issue is if it has changes that other nodes don't have. -- Sincerely, William Brown Senior Software Engineer, Identity and Access Management SUSE Labs, Australia -- ___ 389-users mailing list --

[389-users] Re: Determining max CSN of running server

2024-02-29 Thread Marc Sauton
https://github.com/389ds/389-ds-base/pull/4553 > -- > ___________ > 389-users mailing list -- 389-users@lists.fedoraproject.org > To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/co

[389-users] Re: Determining max CSN of running server

2024-02-29 Thread William Faulk
hing closely related. https://github.com/389ds/389-ds-base/pull/4553 -- _______ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproje

[389-users] Re: Determining max CSN of running server

2024-02-29 Thread William Faulk
and a lot of effort. -- William Faulk -- ___________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Gu

[389-users] Re: Determining max CSN of running server

2024-02-29 Thread Pierre Rogier
nderstand what actually went wrong any > better than I do now. > > > If you want to assert that "Some change I made at CSN X is on all > servers" then > > you would need to read and parse the ruv and ensure that all of them are > at or past that > > CSN for that

[389-users] Re: Determining max CSN of running server

2024-02-29 Thread Thierry Bordaz
for that replica id. Well, you'd think so. I've got that problem, too, where some CSNs just seem to get missed, but the max CSN in the RUV is well past that. But that's a different problem and not the one I'm working on now. Thanks for the input. -- _____

[389-users] Re: Determining max CSN of running server

2024-02-28 Thread William Faulk
hat problem, too, where some CSNs just seem to get missed, but the max CSN in the RUV is well past that. But that's a different problem and not the one I'm working on now. Thanks for the input. -- William Faulk -- ___________ 389-users mailing list --

[389-users] Re: Determining max CSN of running server

2024-02-28 Thread William Brown
which it sends a message that states the greatest CSN that it originated. > First off, is that a correct understanding? Might be worth re-reading https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org/thread/UYP4PYBVVDKGKZVZTC34JVXNUVP2VAVI/ It doesn't send a single

[389-users] Determining max CSN of running server

2024-02-28 Thread William Faulk
, but I'm not having any luck with that yet.) In particular, I see the max CSN for this server in all of these RUVs less than CSNs recorded in the server's own log files. -- William Faulk -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org

[389-users] Can't delete groups / users

2024-02-26 Thread Phill Harvey-Smith
=traken-test,dc=ftt binddn = cn=Directory Manager -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US

[389-users] Re: Fwd: dscontainer as non root

2024-02-12 Thread Viktor Ashirov
Message >>> Subject: dscontainer as non root >>> Date: Mon, 12 Feb 2024 20:01:09 +0530 >>> From: Antony Jose >>> To: 389-users-ow...@lists.fedoraproject.org >>> >>> Hi, >>> Can we run dscontainer as non root process. I

[389-users] Re: Fwd: dscontainer as non root

2024-02-12 Thread Viktor Ashirov
Hi Antony, On Mon, Feb 12, 2024 at 3:37 PM Mark Reynolds wrote: > Forwarding to the correct list > > > Forwarded Message > Subject: dscontainer as non root > Date: Mon, 12 Feb 2024 20:01:09 +0530 > From: Antony Jose > To: 389-users-ow...@lists.

[389-users] Fwd: dscontainer as non root

2024-02-12 Thread Mark Reynolds
Forwarding to the correct list Forwarded Message Subject:dscontainer as non root Date: Mon, 12 Feb 2024 20:01:09 +0530 From: Antony Jose To: 389-users-ow...@lists.fedoraproject.org Hi, Can we run dscontainer as non root process. I have deployed

[389-users] Announcing 389 Directory Server 3.0.1

2024-02-01 Thread Simon Pichugin
om/389ds/389ds.github.io/blob/main/docs/389ds/releases/release-3-0-1.md#feedback> Feedback We are very interested in your feedback! Please provide feedback and comments to the - 389-users mailing list: https://lists.fedoraproject.org/admin/lists/389-users.lists.fedoraproject.org - 389ds

[389-users] Re: 389 DS 2.3.6 on RHEL 9 replication over TLS

2024-01-26 Thread Marc Sauton
my Boost Samsung Galaxy A23 5G > Get Outlook for Android <https://aka.ms/AAb9ysg> > -- > *From:* Simon Pichugin > *Sent:* Thursday, January 25, 2024 5:44:57 PM > *To:* General discussion list for the 389 Directory server project. > <389-users@lists.fedoraproject.org&

[389-users] Re: 389 DS 2.3.6 on RHEL 9 replication over TLS

2024-01-26 Thread Thierry Bordaz
tps://aka.ms/AAb9ysg> *From:* Simon Pichugin *Sent:* Thursday, January 25, 2024 5:44:57 PM *To:* General discussion list for the 389 Directory server project. <389-users@lists.fedoraproject.org> *Cc:* alex

[389-users] Re: 389 DS 2.3.6 on RHEL 9 replication over TLS

2024-01-25 Thread Ciara Gadsden
Idk how to do that lol Sent from my Boost Samsung Galaxy A23 5G Get Outlook for Android<https://aka.ms/AAb9ysg> From: Simon Pichugin Sent: Thursday, January 25, 2024 5:44:57 PM To: General discussion list for the 389 Directory server project. <

[389-users] Re: 389 DS 2.3.6 on RHEL 9 replication over TLS

2024-01-25 Thread Simon Pichugin
e --suffix "dc=example,dc=com" --host "consumer.example.edu" > --port 389 --conn-protocol=LDAP --bind-dn "cn=replication > manager,cn=config" --bind-passwd "***" --bind-method=SIMPLE --init > 10.140.133.36-RO > > > > no problem occurred, and

[389-users] 389 DS 2.3.6 on RHEL 9 replication over TLS

2024-01-25 Thread Nazarenko, Alexander
bind-method=SIMPLE --init 10.140.133.36-RO no problem occurred, and the replication completed successfully. My question is whether this means the replication over TLS required different config steps, and if yes – what they are? Thank you, - Alex -- ________

[389-users] 389ds connection not successful

2024-01-21 Thread Jaehwan Kim
ot;server_ip": "34.84.136.11", "ldap_version": 3, "conn_id": 788, "msg": "Bad Ber Tag or uncleanly closed connection - B1" } = I tested with FreeIpa fedora-39-4.11.0 docker with the recent version of 389ds. ldapsearch -V ldapsearch:

[389-users] Re: Solving naming conflicts in replicated environment

2024-01-19 Thread Marc Sauton
ossible to promote the conflict entry, despite the documentation > providing a procedure exactly for that, and that I would have to > reinitialize the data on that replica. > > If anyone has any suggestions for a vendor that can provide decent IdM > support, I'd love to hear it. > > Again, m

[389-users] Re: Solving naming conflicts in replicated environment

2024-01-18 Thread William Faulk
nflict entry, despite the documentation providing a procedure exactly for that, and that I would have to reinitialize the data on that replica. If anyone has any suggestions for a vendor that can provide decent IdM support, I'd love to hear it. Again, many thanks to everyone here. -- _____

[389-users] Announcing 389 Directory Server 2.4.5

2024-01-18 Thread Viktor Ashirov
ll-389.html> for more information about the initial installation and setup See Source <https://www.port389.org/docs/389ds/development/source.html> for information about source tarballs and SCM (git) access. Feedback We are very interested in your feedback! Please provide feedback and comments

[389-users] Re: Solving naming conflicts in replicated environment

2024-01-15 Thread Pierre Rogier
le is the same as the old value: "adamss". Surely > following these directions naively is going to result in deleting the > naming attribute altogether. Unless maybe the schema prevents it from > deleting the last value? > > Am I correct in thinking I should just skip that

[389-users] Re: Solving naming conflicts in replicated environment

2024-01-12 Thread William Faulk
ld just skip that part, while continuing to delete the nsds5ReplConflict attribute? -- ___________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://d

[389-users] Re: Solving naming conflicts in replicated environment

2024-01-12 Thread William Faulk
Thanks for the confirmation. I'll follow up with the results, just in case anyone in the future comes across this thread, and to let folks know how the membership gets handled upon rename of the conflict entry. -- ___ 389-users mailing list -- 389

[389-users] Re: Password storage scheme - choices

2024-01-11 Thread William Brown
dentity and Access Management SUSE Labs, Australia -- _______________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/projec

[389-users] Re: Password storage scheme - choices

2024-01-11 Thread John Thurston
nt SUSE Labs, Australia -- -- _______ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https:/

[389-users] Re: Password storage scheme - choices

2024-01-11 Thread William Brown
own Senior Software Engineer, Identity and Access Management SUSE Labs, Australia -- ___________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https:

[389-users] Password storage scheme - choices

2024-01-11 Thread John Thurston
se you should, not just because you can. John Thurston907-465-8591 john.thurs...@alaska.gov Department of Administration State of Alaska -- _______ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@

[389-users] Re: Solving naming conflicts in replicated environment

2024-01-11 Thread Pierre Rogier
's renamed. I can't imagine that it will acquire the > correct groups just by being renamed. Am I going to just need to fix that > up manually? (That may be outside the scope of this mailing list.) > -- > _______ > 389-users mailing list -- 3

[389-users] Re: Solving naming conflicts in replicated environment

2024-01-11 Thread William Faulk
the scope of this mailing list.) -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct

[389-users] Re: Solving naming conflicts in replicated environment

2024-01-11 Thread Rob Crittenden
"right" entries on the other servers, otherwise you will delete them all. rob -- _______ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https

[389-users] Re: Solving naming conflicts in replicated environment

2024-01-11 Thread William Faulk
.) -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List

[389-users] Re: Solving naming conflicts in replicated environment

2024-01-11 Thread Pierre Rogier
ad entry from the bad replica will > cause the good entries on all the good replicas to also be deleted? If so, > is there a better way to resolve this conflict? (At the moment, I'm > inclined to just reinitialize the data on this one replica.) > -- > _

[389-users] Solving naming conflicts in replicated environment

2024-01-11 Thread William Faulk
etter way to resolve this conflict? (At the moment, I'm inclined to just reinitialize the data on this one replica.) -- _______ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fe

[389-users] Troubleshooting of slow user add or modify operation in certain conditions

2023-12-30 Thread dweller dweller
? Or should it work just fine with such number of groups? Problem is the same for 389-ds-base-1.4.3 deployments and 389-ds-base-2.2.3 deployments. -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389

[389-users] Backing up 1.4 (and soon 2.1)

2023-12-27 Thread John Thurston
? -- -- Do things because you should, not just because you can. John Thurston907-465-8591 john.thurs...@alaska.gov Department of Administration State of Alaska -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send

[389-users] AD replication with pre-existing groups and user accounts

2023-12-16 Thread Alexander Balz
389 and AD accounts? Currently, these existing accounts seem to be simply skipped by the AD sync process. Any hint on this is highly appreciated! Thank you and best regards,   Alex -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org

[389-users] Is possible name log pipe with log file

2023-12-14 Thread Nyquist
l. I have set it up. However, this setting appears to be a way to refer to the pipe in a new path, without leaving both the pipe and the file behind. What we want to achieve is to not lose logs regardless of the pipe leader state. Any tips on this? -- _______

[389-users] Re: Inquire about the principles of LDAP server bulk request processing.

2023-12-14 Thread Pierre Rogier
to inquire whether request information is > stored sequentially in the queue, and if so, where can I manage the size > and settings of the queue? > -- > ___________ > 389-users mailing list -- 389-users@lists.fedoraproject.org > To unsubscribe send an emai

[389-users] Re: 389-ds-base name log pipe problems

2023-12-13 Thread Nyquist
to large requests. Here's what I need to do: 1. Increasing the performance of the pipe reader, 2. If the log buffer is not used, measure the limitations of the LDAP server and reflect them in my architecture. Thanks -- ___ 389-users mailing list -- 389

[389-users] Inquire about the principles of LDAP server bulk request processing.

2023-12-13 Thread Nyquist
? -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List

[389-users] Re: ERR - slapi_ldap_bind - Could not send bind request for id [(anon)] authentication mechanism [EXTERNAL]: error -1 (Can't contact LDAP server), system error 0 (no error), network error

2023-12-11 Thread Graham Leggett
ll public CAs, have intermediate certs. The bugs I raised in 2020 were all abandoned and closed. Regards, Graham — -- _______ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fed

[389-users] Re: Question about @389ds/389-directory-server copr repository

2023-12-10 Thread Viktor Ashirov
Thanks! > Cheers, Rosario > > -- > _______ > 389-users mailing list -- 389-users@lists.fedoraproject.org > To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject

[389-users] Re: 389-ds-base name log pipe problems

2023-12-10 Thread Viktor Ashirov
systemd and wrote these instructions to make it work: https://bugzilla.redhat.com/show_bug.cgi?id=1520373#c5 (you can skip dsconf part as you already did have this configuration in cn=config). Could you please try this approach? Thanks. > -- > _______ > 389-users ma

[389-users] Re: 389-ds-base name log pipe problems

2023-12-10 Thread Nyquist
-- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List

[389-users] Re: 389-ds-base name log pipe problems

2023-12-08 Thread Pierre Rogier
and removing from the L4 switch is repeated. Could > this be caused by my logging settings to pipe? > Or should I think it's a problem with the Linux file system? > -- > _______ > 389-users mailing list -- 389-users@lists.fedoraproject.org > To

[389-users] Re: 389-ds-base name log pipe problems

2023-12-07 Thread Nyquist
tem? -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guideli

[389-users] Re: 389-ds-base name log pipe problems

2023-12-07 Thread Thierry Bordaz
on server A. How can logging to pipe affect directory server port 389 access? Could it be a file descriptor related issue? Why were the other 17 servers able to recover to normal? Thanks -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org

[389-users] 389-ds-base name log pipe problems

2023-12-07 Thread Nyquist
-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives

[389-users] Re: Question about @389ds/389-directory-server copr repository

2023-12-06 Thread Rosario Esposito
, Rosario -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines

[389-users] Re: Question about @389ds/389-directory-server copr repository

2023-12-06 Thread Viktor Ashirov
again available in the COPR repo. Run `dnf clean all` to purge old metadata, and the package should be available for the downgrade. HTH > > Regards, > Rosario > > > > > -- > ___ > 389-users mailing list -

[389-users] Question about @389ds/389-directory-server copr repository

2023-12-06 Thread Rosario Esposito
2.2.8 rpms are no longer available on the copr repository, then I cannot issue "dnf downgrade 389*". Is it supposed to work that way ? Is there clean way to go back to previous version ? Regards, Rosario -- _______ 389-users mailing list --

[389-users] Re: Documentation as to how replication works

2023-11-17 Thread William Faulk
o be clear, here's the ldapmodify LDIF that worked for me: dn: cn=replica,cn=...,cn=mapping tree,cn=config changetype: modify add: nsds5Task nsds5Task: CL2LDIF The LDIF that's created shows the actual changed data and not just a blob, which certainly helps. -- _____

[389-users] Re: Documentation as to how replication works

2023-11-16 Thread Marc Sauton
easy to pull the > same data out of there. > > > You could do that. Also I noticed there is code to dump the changelog to a > flat file, but it isn't clear to me how to call it : > > https://github.com/389ds/389-ds-base/blob/main/ldap/servers/plugins/replication/cl5_api.c#

[389-users] Re: Documentation as to how replication works

2023-11-16 Thread David Boreham
; same data out of there. You could do that. Also I noticed there is code to dump the changelog to a flat file, but it isn't clear to me how to call it : https://github.com/389ds/389-ds-base/blob/main/ldap/servers/plugins/replication/cl5_api.c#L4273 -- _______

[389-users] Re: Documentation as to how replication works

2023-11-16 Thread William Faulk
ssing something obvious, though. Thanks. -- _______________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/

[389-users] Re: Documentation as to how replication works

2023-11-16 Thread David Boreham
> had the same CSN That shouldn't be possible. It's an axiom of the system that CSNs are unique. -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora C

[389-users] Re: Documentation as to how replication works

2023-11-16 Thread William Faulk
her. -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/w

[389-users] Re: Documentation as to how replication works

2023-11-16 Thread David Boreham
hat hunch is correct it'd be a case of figuring out the name of the attribute so you request it, and the access rights required. Also from distant memory, but I thought the changelog was queryable via LDAP, somehow. -- _______ 389-users mailing list --

[389-users] Re: Documentation as to how replication works

2023-11-16 Thread William Brown
ng tools to help communicate here about what's going on. -- Sincerely, William Brown Senior Software Engineer, Identity and Access Management SUSE Labs, Australia -- _______ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email t

[389-users] Re: Documentation as to how replication works

2023-11-16 Thread William Faulk
Makes sense. I'll try to read some more documentation/source about the actual communication. Do you know how I can find mappings between CSNs and changes? Or even just how to see the changelog at all? -- ___ 389-users mailing list -- 389-users

[389-users] Re: Documentation as to how replication works

2023-11-16 Thread David Boreham
_________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/

[389-users] Re: Documentation as to how replication works

2023-11-16 Thread William Faulk
I'm currently just using the Directory Manager credentials for my monitoring; sorry. -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct

[389-users] Re: Documentation as to how replication works

2023-11-16 Thread William Faulk
This was helpful; thanks. I think my biggest misunderstanding was that the RUV was just the most recent CSN, when it's actually a list of the most recent CSNs from each replica. -- ___ 389-users mailing list -- 389-users@lists.fedoraproject.org

[389-users] Re: Documentation as to how replication works

2023-11-16 Thread William Faulk
a problem and I generally understand the "+nsuniqueid" conflict resolution method. My problem is occurring without conflicting updates. -- ___________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users

  1   2   3   4   5   6   7   8   9   10   >