[389-users] Re: 389-ds opensuse container questions
Well you can create "dc=arizona,dc=edu", and then create a regular entry under it: "dc=eds,dc=arizona,dc=edu". That will all be under a single suffix then. You just need to put your users under whatever branch you prefer. There is no right or wrong, as long as your LDAP clients use the correct search base when trying to find users, etc. HTH, Mark On 6/13/22 2:12 PM, tda...@email.arizona.edu wrote: Ok, so I think what you're saying is that each domain (dc=arizona,dc=edu and dc=eds,dc=arizona,dc=edu) requires its own database? Maybe I will rethink this plan just to keep things simple. ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure -- Directory Server Development Team ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[389-users] Re: 389-ds opensuse container questions
Ok, so I think what you're saying is that each domain (dc=arizona,dc=edu and dc=eds,dc=arizona,dc=edu) requires its own database? Maybe I will rethink this plan just to keep things simple. ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[389-users] Re: 389-ds opensuse container questions
On 6/13/22 1:31 PM, tda...@email.arizona.edu wrote: I've got things pretty well scripted now, but one thing I've never been sure of is what exactly maps to a database. In our current dirsrv, we've got one databse for our base suffix "dc=eds,dc=arizona,dc=edu" and everything is contained in that (ou=people,dc=eds,dc=arizona,dc=edu, for example). In the new directory, I'd like the base suffix to be "dc=arizona,dc=edu" (where some new objects will live) and then the additional suffix "dc=eds,dc=arizona,dc=edu", which will contain all the same stuff as the current directory (ou=people, etc.) So my question is, if I make a database for "dc=arizona,dc=edu", can "dc=eds,dc=arizona,dc=edu" also reside in that database (by making an additional domain for it?) or does it have to have its own db. Why not just use "dc=arizona,dc=edu" and move all the entries under it? Otherwise yes you need two databases and then you can make dc=eds,dc=arizona,dc=edu a subsuffix of the other. But if you don't need two databases then I would just merge the content under a single suffix (much much easier to maintain). Mark ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure -- Directory Server Development Team ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[389-users] Re: 389-ds opensuse container questions
I've got things pretty well scripted now, but one thing I've never been sure of is what exactly maps to a database. In our current dirsrv, we've got one databse for our base suffix "dc=eds,dc=arizona,dc=edu" and everything is contained in that (ou=people,dc=eds,dc=arizona,dc=edu, for example). In the new directory, I'd like the base suffix to be "dc=arizona,dc=edu" (where some new objects will live) and then the additional suffix "dc=eds,dc=arizona,dc=edu", which will contain all the same stuff as the current directory (ou=people, etc.) So my question is, if I make a database for "dc=arizona,dc=edu", can "dc=eds,dc=arizona,dc=edu" also reside in that database (by making an additional domain for it?) or does it have to have its own db. ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[389-users] Re: 389-ds opensuse container questions
Oh, brilliant, thanks! ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[389-users] Re: 389-ds opensuse container questions
Hi Tim,
FYI: There is an example about how to change nsslapd-db-locks using lib389
in one of our test:
see
https://github.com/389ds/389-ds-base/blob/master/dirsrvtests/tests/suites/monitor/db_locks_monitor_test.py
As you can see that is that is quite direct:
bdb_config = BDB_LDBMConfig(inst)
bdb_config.replace("nsslapd-db-locks", "11000")
# Restart server
inst.restart()
On Tue, Jun 7, 2022 at 6:29 AM wrote:
> Thanks, so is there a way to change the nsslapd-db-locks attribute in
> Python? it would be nice to do it all there instead of having to shell out
> to dsconf.
>
> I'll try to put together a list of lib389 things.
> ___
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
> Do not reply to spam on the list, report it:
> https://pagure.io/fedora-infrastructure
>
--
--
389 Directory Server Development Team
___
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
[389-users] Re: 389-ds opensuse container questions
Thanks, so is there a way to change the nsslapd-db-locks attribute in Python? it would be nice to do it all there instead of having to shell out to dsconf. I'll try to put together a list of lib389 things. ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[389-users] Re: 389-ds opensuse container questions
Thanks! I've succeeded in getting all my configs scripted with Python, except for setting the nsslapd-db-locks attribute: standalone.conig,set (fail) dse_ldif.replace (fail) dsconf works! What's the magic here? Is there a Pythonic way to do this? Also, I'm surpsised at how much I had to resort to Python LDAP to get things done. I kinda thought that lib389 would do most of it? ___ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
