[Fedora-directory-users] Windows sync not syncing users with passwords

2005-07-08 Thread William Francis
I have FDS installed on FC3 and configured to talk to a SBS AD server. I believe all is well as far as SSL certificates go and if I leave the "Sync New Windows Users" option off in my Windows replication agreement, I can readily complete full resyncs and incremental. All of my non-regular use

Re: [Fedora-directory-users] Advantages of using FDS vs OpenLDAP?

2005-07-08 Thread Mike Jackson
Bryan wrote: This question is probably completely obvious to those more versed in LDAP, which I am not. And since I couldn't find an answer to this in the Wiki, I thought that it didn't hurt to ask. So what are the advantages of using a "specialized" LDAP server, whether Fedora/Red Hat Di

Re: [Fedora-directory-users] integrating samba and FDS/RHDS (draft 1)

2005-07-08 Thread Christopher Blizzard
Adam has (been) volunteered to add this to the wiki under the samba howto. Go, Adam! --Chris Adam Stokes wrote: I have taken some time out to write up a rough draft on integrating samba with RHDS/FDS. Please have a look and I welcome any and all comments/modifications. http://people.redhat.c

Re: [Fedora-directory-users] Installation of Fedora Directory Ser vice on RHEL v3 or v4

2005-07-08 Thread David Boreham
Rich Megginson wrote: Yes.  There are two different connections.  The main connection is from FDS to AD - FDS does an LDAP BIND to AD to issue a sync request.  When you configure the windows sync agreement on FDS (usually using the console), you have to specify the DN of the user

Re: [Fedora-directory-users] Installation of Fedora Directory Ser vice on RHEL v3 or v4

2005-07-08 Thread Rich Megginson
Talwar, Puneet (NIH/NIAID) wrote: Thank you, I manage to download the binary RPM of RHEL 4 on my workstation. Now, I setup the FD to sync with MS AD domain which we have here, but one question I have do I need to have enterprise admin right to sync the FD to the AD DC server to pull user i

RE: [Fedora-directory-users] Advantages of using FDS vs OpenLDAP?

2005-07-08 Thread Pete Rowley
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf > Of Sam Tran > Sent: Friday, July 08, 2005 10:59 AM > To: General discussion list for the Fedora Directory server project. > Subject: Re: [Fedora-directory-users] Advantages of using FDS > vs OpenLDA

RE: [Fedora-directory-users] Installation of Fedora Directory Ser vice on RHEL v3 or v4

2005-07-08 Thread Talwar, Puneet (NIH/NIAID)
Thank you, I manage to download the binary RPM of RHEL 4 on my workstation. Now, I setup the FD to sync with MS AD domain which we have here, but one question I have do I need to have enterprise admin right to sync the FD to the AD DC server to pull user infos and etc? Right now when I want to s

[Fedora-directory-users] integrating samba and FDS/RHDS (draft 1)

2005-07-08 Thread Adam Stokes
I have taken some time out to write up a rough draft on integrating samba with RHDS/FDS. Please have a look and I welcome any and all comments/modifications. http://people.redhat.com/astokes/samba_rhds.pdf http://people.redhat.com/astokes/samba_rhds.html Of course the links can be found at http:/

Re: [Fedora-directory-users] Installation of Fedora Directory Ser vice on RHEL v3 or v4

2005-07-08 Thread Brian Jones
Get the binary rpm. It installs just fine on RHEL 3 and 4 as per my testing. On 7/8/05, Kevin Myer <[EMAIL PROTECTED]> wrote: > Quoting "Talwar, Puneet (NIH/NIAID)" <[EMAIL PROTECTED]>: > > > I would like to know when I run the builddsrpm.sh RHEL4 command, I get a > > message saying that it cann

RE: [Fedora-directory-users] Installation of Fedora Directory Ser vice on RHEL v3 or v4

2005-07-08 Thread Kevin Myer
Quoting "Talwar, Puneet (NIH/NIAID)" <[EMAIL PROTECTED]>: I would like to know when I run the builddsrpm.sh RHEL4 command, I get a message saying that it cannot find RHEL4-ds.spec file. Just curious - is there a reason you have not downloaded the binary RPM, that doesn't require you to compile

Re: [Fedora-directory-users] Installation of Fedora Directory Ser vice on RHEL v3 or v4

2005-07-08 Thread Rich Megginson
Talwar, Puneet (NIH/NIAID) wrote: I would like to know when I run the builddsrpm.sh RHEL4 command, I get a message saying that it cannot find RHEL4-ds.spec file.   Would anyone know where do I get this RHEL4-ds.spec file from? You cannot currently build the entire FDS p

RE: [Fedora-directory-users] Installation of Fedora Directory Ser vice on RHEL v3 or v4

2005-07-08 Thread Talwar, Puneet (NIH/NIAID)
I would like to know when I run the builddsrpm.sh RHEL4 command, I get a message saying that it cannot find RHEL4-ds.spec file.   Would anyone know where do I get this RHEL4-ds.spec file from?   Thanks,         From: Talwar, Puneet (NIH/NIAID) Sent: Thursday, July 07, 2005

Re: [Fedora-directory-users] Advantages of using FDS vs OpenLDAP?

2005-07-08 Thread David Boreham
However according to that paper multi-master replication could lead to inconsistencies: http://www.watersprings.org/pub/id/draft-zeilenga-ldup-harmful-02.txt What do you think? Kurt's views do not represent the majority of the Directory Server vendor community (actually quite the reverse :

Re: [Fedora-directory-users] Advantages of using FDS vs OpenLDAP?

2005-07-08 Thread Rich Megginson
Sam Tran wrote: On 7/8/05, Kevin Myer <[EMAIL PROTECTED]> wrote: Quoting Sam Tran <[EMAIL PROTECTED]>: I was wondering how FDS compares with OpenLDAP in terms of performance. Well, its faster, in our case (and I say that tongue-in-cheek). Our curren

Re: [Fedora-directory-users] FDS support for Windows?

2005-07-08 Thread Thomas Mathiesen
Joshua Kampmeier wrote: I was wondering if the Fedora Directory Server supports Windows clients? I didn't see anything on the site about it. Sorry if it's there and I just missed it. -- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listin

Re: [Fedora-directory-users] Advantages of using FDS vs OpenLDAP?

2005-07-08 Thread Sam Tran
On 7/8/05, Kevin Myer <[EMAIL PROTECTED]> wrote: > Quoting Sam Tran <[EMAIL PROTECTED]>: > > I was wondering how FDS compares with OpenLDAP in terms of performance. > > Well, its faster, in our case (and I say that tongue-in-cheek). Our current > primary directory server is running on a dual 168M

Re: [Fedora-directory-users] Advantages of using FDS vs OpenLDAP?

2005-07-08 Thread Kevin Myer
Quoting Sam Tran <[EMAIL PROTECTED]>: I was wondering how FDS compares with OpenLDAP in terms of performance. Well, its faster, in our case (and I say that tongue-in-cheek). Our current primary directory server is running on a dual 168Mhz Ultra 2 Sun box. And our secondary is a Sparcstation 1

Re: [Fedora-directory-users] Advantages of using FDS vs OpenLDAP?

2005-07-08 Thread Rich Megginson
Sam Tran wrote: On 7/8/05, Kevin Myer <[EMAIL PROTECTED]> wrote: If I can piggyback off of this question and ask another: advantages of using RedHat Directory Server vs. Fedora Directory Server? The only thing I can see we get with RedHat Directory server is official support (and

Re: [Fedora-directory-users] Advantages of using FDS vs OpenLDAP?

2005-07-08 Thread Sam Tran
On 7/8/05, Kevin Myer <[EMAIL PROTECTED]> wrote: > If I can piggyback off of this question and ask another: advantages of using > RedHat Directory Server vs. Fedora Directory Server? > > The only thing I can see we get with RedHat Directory server is > official support > (and at the prices I was q

Re: [Fedora-directory-users] Advantages of using FDS vs OpenLDAP?

2005-07-08 Thread Rich Megginson
Kevin Myer wrote: If I can piggyback off of this question and ask another: advantages of using RedHat Directory Server vs. Fedora Directory Server? The only thing I can see we get with RedHat Directory server is official support (and at the prices I was quoted per year, for two servers, I cou

Re: [Fedora-directory-users] Advantages of using FDS vs OpenLDAP?

2005-07-08 Thread Kevin Myer
If I can piggyback off of this question and ask another: advantages of using RedHat Directory Server vs. Fedora Directory Server? The only thing I can see we get with RedHat Directory server is official support (and at the prices I was quoted per year, for two servers, I could hire half a perso

Re: [Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Kevin Myer
Quoting Brian Jones <[EMAIL PROTECTED]>: Thanks, Kevin. Can I make a feature request to whoever sees this that is way better at Java/C than me to at least make the stored password crypted in something stronger than rot13? Just my opinion, but its kind of moot what format its stored in, as lo

Re: [Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Rich Megginson
Brian Jones wrote: Thanks, Kevin. Can I make a feature request to whoever sees this that is way better at Java/C than me to at least make the stored password crypted in something stronger than rot13? What would you suggest?  Note that a determined attacker will be able to decode anythi

Re: [Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Rich Megginson
Kevin Myer wrote: http://www.redhat.com/docs/manuals/dir-server/ag/intro.htm#39523 NB: you trade the ease of startup with a security risk, in that your keyphrase is stored in a file cleartext. Right. Very secure environments invest in hardware crypto devices/dongles that provide this fun

Re: [Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Brian Jones
Thanks, Kevin. Can I make a feature request to whoever sees this that is way better at Java/C than me to at least make the stored password crypted in something stronger than rot13? On 7/8/05, Kevin Myer <[EMAIL PROTECTED]> wrote: > http://www.redhat.com/docs/manuals/dir-server/ag/intro.htm#395

Re: [Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Kevin Myer
http://www.redhat.com/docs/manuals/dir-server/ag/intro.htm#39523 NB: you trade the ease of startup with a security risk, in that your keyphrase is stored in a file cleartext. Kevin Quoting Brian Jones <[EMAIL PROTECTED]>: Hi all. I hit a snag yesterday when I rebooted my directory server

[Fedora-directory-users] boot time startup requires password

2005-07-08 Thread Brian Jones
Hi all. I hit a snag yesterday when I rebooted my directory server box (running RHEL 4). The problem is that I'm using SSL/TLS, and that means that every time I restart the directory server I have to provide the password for the certificate database. Now, I *know* that this would never stand in a

Re: [Fedora-directory-users] Advantages of using FDS vs OpenLDAP?

2005-07-08 Thread Rich Megginson
Bryan wrote: This question is probably completely obvious to those more versed in LDAP, which I am not. And since I couldn't find an answer to this in the Wiki, I thought that it didn't hurt to ask. So what are the advantages of using a "specialized" LDAP server, whether Fedora/Red Hat D

Re: [Fedora-directory-users] MD5 for password hashes

2005-07-08 Thread Nathan Benson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sam/Rich, the only way that {MD5} has worked for me in the past (using OpenLDAP) was if the actual MD5 hash was binary data. the following are all hashes of the password "test", and in OL they all work equally: {CRYPT}ch.V5DKiTQWmc {CRYPT}$1$cpSVhP

Re: [Fedora-directory-users] FDS support for Windows?

2005-07-08 Thread David Boreham
Though, using Samba3 as an nt4 domain controller works fine. True, although one might be slightly concerned about continued MS support for the NT4 protocols in the client. -- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora

Re: [Fedora-directory-users] FDS support for Windows?

2005-07-08 Thread Adam Dobrin
David Boreham wrote: Joshua Kampmeier wrote: I was wondering if the Fedora Directory Server supports Windows clients? I didn't see anything on the site about it. Sorry if it's there and I just missed it. FDS is an LDAP server : so it supports any LDAP client, which would of course include

Re: [Fedora-directory-users] FDS support for Windows?

2005-07-08 Thread David Boreham
Joshua Kampmeier wrote: I was wondering if the Fedora Directory Server supports Windows clients? I didn't see anything on the site about it. Sorry if it's there and I just missed it. FDS is an LDAP server : so it supports any LDAP client, which would of course include software running on t

[Fedora-directory-users] FDS support for Windows?

2005-07-08 Thread Joshua Kampmeier
I was wondering if the Fedora Directory Server supports Windows clients? I didn't see anything on the site about it. Sorry if it's there and I just missed it. -- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users