[Fedora-directory-users] dbus and ldap and boot problems

2007-08-08 Thread Ted X Toth
After adding ldap to the passwd, group and shadow lines of nsswitch.conf my FC6 box wasn't too happy on reboot. It seems that dbus is trying to connect to ldap which isn't running. How can I resolve this issue, start ldap prior to dbus? Does ldap have a dependency on dbus? -- Fedora-directory-

Re: [Fedora-directory-users] Groups

2007-08-08 Thread Patrick Morris
On Wed, 08 Aug 2007, Ted X Toth wrote: > Ok so how do I add a posixgroup entry in LDAP? Create on object with an objectClass of posixGroup. -- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Fedora-directory-users] Setting up the administrative server using ssl on port 636

2007-08-08 Thread Anderson, Cary
I have successfully setup replication between two ldap servers using ssl and port 636, So I have a server cert and cacert already setup. If I want to now have the administrative server use encryption do I need to request a second server cert or do I reuse the one I setup for replication? Thanks

Re: [Fedora-directory-users] Groups

2007-08-08 Thread Ted X Toth
Satish Chetty wrote: Ted X Toth wrote: Maybe this isn't the right place to ask this but ... I've set up fedora-ds in order to do network logins via ldap. I've configured ssh to use pam_mkhomedir and pam_ldap. I used a copy of Example.ldif changed the root dn and configuring my users and import

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-08 Thread David Boreham
David Bogen wrote: Our experience has shown start_tls to be noticeably slower than straight ssl; slow enough that the difference is noticeable to people and not just to measurements. I would recommend going with straight SSL and not messing around with start_tls Interesting observation given th

Re: [Fedora-directory-users] Groups

2007-08-08 Thread Satish Chetty
Ted X Toth wrote: Maybe this isn't the right place to ask this but ... I've set up fedora-ds in order to do network logins via ldap. I've configured ssh to use pam_mkhomedir and pam_ldap. I used a copy of Example.ldif changed the root dn and configuring my users and imported it. I used the cons

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-08 Thread David Bogen
We use SSL connections (LDAPS) almost exclusively and have easily handled over 7000 SSL connections per minute without extensive tuning of FDS. That particular server is a RHEL4 box running an AMD Opteron with 4GB of RAM. Even a crusty old PIII (1.2Ghz) running RHEL3 has handled over 1000 SSL con

[Fedora-directory-users] Groups

2007-08-08 Thread Ted X Toth
Maybe this isn't the right place to ask this but ... I've set up fedora-ds in order to do network logins via ldap. I've configured ssh to use pam_mkhomedir and pam_ldap. I used a copy of Example.ldif changed the root dn and configuring my users and imported it. I used the console to make my use

Re: [Fedora-directory-users] Fedora 7 and FDS 1.0.4-FC6

2007-08-08 Thread Richard Megginson
Del wrote: Hi, Following an earlier suggestion on this thread, I have tried to get FDS running on a Fedora 7 box using the binary RPM from the download area for Fedora Core 6. The directory server appears to run fine, but the admin server just spews a torrent of log messages saying: [Wed Aug

RE: [Fedora-directory-users] How limit access to server

2007-08-08 Thread DeMarco, Dennis
In /etc/ldap.conf set your pam_groupdn Ie: Pam_groupdn cn=unixadmin, ou=LoginGroups, dc=example, dc=com Then create an ou called LoginGroups and inside a container with people that have access to that box. It works well here. There isn't any way I know to do multiple cn's though.

Re: [Fedora-directory-users] FDS SSL performance tuning query

2007-08-08 Thread Andrey Ivanov
Hi, JB> Hello all, currently we have a FDS instance running on RHEL4 with a JB> small number of entries (6,000), we also have a linux compute cluster of JB> 100 nodes which uses LDAP for user account data (via libnss_ldap). JB> nss_ldap on the cluster is configured to use SSL, and everything is

[Fedora-directory-users] Sync passwords from FDS to AD

2007-08-08 Thread Ville Silventoinen
Hi, our FDS contains a NIS-like structure of user accounts, Unix groups, netgroups, mail aliases and sudoers entries. We manage everything in Unix/Linux, using command-line tools and web pages that update the FDS and NIS database files (generated from the LDAP server). We are not ready to aba

[Fedora-directory-users] Fedora 7 and FDS 1.0.4-FC6

2007-08-08 Thread Del
Hi, Following an earlier suggestion on this thread, I have tried to get FDS running on a Fedora 7 box using the binary RPM from the download area for Fedora Core 6. The directory server appears to run fine, but the admin server just spews a torrent of log messages saying: [Wed Aug 08 18:00:07