Re: [Fedora-directory-users] SASL authentication

2006-09-07 Thread David Boreham
One thing to observe here is that _generally_ one does not want to reveal more information to a potential attacker than is necessary. In this case it may be useful for a bad guy to know that there is no plaintext password vs. only knowing that authentication failed. Put another way : attempts to a

Re: [Fedora-directory-users] SASL authentication

2006-09-07 Thread Richard Megginson
Josh Kelley wrote: On 9/7/06, Richard Megginson <[EMAIL PROTECTED]> wrote: Josh Kelley wrote: > Is this a bug in FDS? Or did I misconfigure something? Is there an > easy workaround? I'm not sure. Is it the LDAP resultCode that causes the OS X clients to fail, or is it the SASL return code?

Re: [Fedora-directory-users] SASL authentication

2006-09-07 Thread Josh Kelley
On 9/7/06, Richard Megginson <[EMAIL PROTECTED]> wrote: Josh Kelley wrote: > Is this a bug in FDS? Or did I misconfigure something? Is there an > easy workaround? I'm not sure. Is it the LDAP resultCode that causes the OS X clients to fail, or is it the SASL return code? I assume it's the LD

Re: [Fedora-directory-users] SASL authentication

2006-09-07 Thread Richard Megginson
Josh Kelley wrote: SASL authentication appears to be operating incorrectly on my install of FDS. We do not use SASL; our passwords are stored in FDS using CRYPT-MD5, SMD5, and SSHA256, depending on when and how the account's password was last changed. As I understand it, SASL authentication usi

[Fedora-directory-users] SASL authentication

2006-09-07 Thread Josh Kelley
SASL authentication appears to be operating incorrectly on my install of FDS. We do not use SASL; our passwords are stored in FDS using CRYPT-MD5, SMD5, and SSHA256, depending on when and how the account's password was last changed. As I understand it, SASL authentication using DIGEST-MD5 and CR

Re: [Fedora-directory-users] ds_newinst.pl

2006-09-07 Thread Richard Megginson
Diana Shepard wrote: I have Fedora Directory Server 1.0.2 installed on Redhat Linux. I am trying to come up with a Disaster Recovery kickstart install of the server, Directory Server (DS) and DS contents. I tried ds_newinst.pl, as described in the Fedora DS Install Guide, to create a new DS in

[Fedora-directory-users] ds_newinst.pl

2006-09-07 Thread Diana Shepard
Title: ds_newinst.pl I have Fedora Directory Server 1.0.2 installed on Redhat Linux.  I am trying to come up with a Disaster Recovery kickstart install of the server, Directory Server (DS) and DS contents. I tried ds_newinst.pl, as described in the Fedora DS Install Guide, to create

Re: [Fedora-directory-users] scheduled backup

2006-09-07 Thread Richard Megginson
basile wrote: when i do a backup with redhat console does i use the script db2bak ( or which script ? ) Console probably uses the cn=tasks interface to initiate a backup via LDAP. See the db2bak.pl script for more details. thanks basile Richard Megginson wrote: basile wrote: hi is it poss

Re: [Fedora-directory-users] scheduled backup

2006-09-07 Thread basile
when i do a backup with redhat console does i use the script db2bak ( or which script ? ) thanks basile Richard Megginson wrote: basile wrote: hi is it possible to scheduled backup through fedora console No. I guess the usual way to do this is to set up a cron script. thanks basile --