Re: [Fedora-directory-users] Setting a self ssl certificate

2007-09-12 Thread Peter Santiago
Steven Jones wrote: Since it appears the LDAP server was stuffed, I re-installed it and again followed the instructions, now I find that in attempting to re-start the server it will notso I have had to re-install again. So this particular set of instructions, http://www.redhat.com/docs/manu

RE: [Fedora-directory-users] Setting a self ssl certificate

2007-09-12 Thread Steven Jones
Since it appears the LDAP server was stuffed, I re-installed it and again followed the instructions, now I find that in attempting to re-start the server it will notso I have had to re-install again. So this particular set of instructions, http://www.redhat.com/docs/manuals/dir-server/ag/7.1/

[Fedora-directory-users] Setting a self ssl certificate

2007-09-12 Thread Steven Jones
While following the RDS manual to make a self cert, the last command is to convert the certification database, 8><- 9. Run pk12util to convert the certificate database to pkcs12 format, so it is accessible by the Directory Server: /serverRoot/shared/bin/pk12util -d . -o cert.pk12 -n Se

[Fedora-directory-users] Debian and MAC OSX (10.4) clients to FDS

2007-09-12 Thread Steven Jones
Anybody got some good URLs or docs? regards Steven Jones Senior Linux/Unix/San/Vmware System Administrator APG -Technology Integration Team Victoria University of Wellington Phone: +64 4 463 6272 -- Fedora-directory-users mailing list Fedora-directory-users@redhat.com https://www.redhat.com/ma

RE: [Fedora-directory-users] ssh login fail ~ a gottha on RHAS4

2007-09-12 Thread Steven Jones
While setting up a second AS4 client I ran authconfig-gtk and started to compare the before and after ldap.conf files, only to find I could not see any differences, doing a diff proved it. I even > ldap.conf the file to zero it and authconfig-gtk did not write a thing So I ran authconfig inst

RE: [Fedora-directory-users] Fedora DS 1.0.4 build on Solaris 10?

2007-09-12 Thread Scott Ding
I got it working. The logs directory needs executable permission. Thank you all for helping me out! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rob Crittenden Sent: Wednesday, September 12, 2007 11:06 AM To: General discussion list for the Fedora Dire

RE: [Fedora-directory-users] ssh login fail

2007-09-12 Thread Steven Jones
Thanks, like a dictionary, google only retunrs useful stuff if you know what to look for...a bit catch 22. Some of the docs I did read only covered ssh, and while yes it is probably a wider issue, leaving this point out of an ssh setup page is an issue... regards Steven Jones Senior Linux/Unix/

RE: [Fedora-directory-users] Fedora DS 1.0.4 build on Solaris 10?

2007-09-12 Thread Scott Ding
The three certificate db files need to be read/write. After I changed them, the NSS initialization errors are gone. However, I now get server failed to start prompt on the console. The logs/errors does not show any specific errors. I used the truss on start-slapd. It seems complaining it could n

Re: [Fedora-directory-users] Fedora DS 1.0.4 build on Solaris 10?

2007-09-12 Thread Rob Crittenden
Scott Ding wrote: Using the certutil-bin instructions given by Rob, I was able to generate slapd-lsctsol06-key3.db,slapd-lsctsol06-cert8.db, and secmod.db successfully under /home/dings/fds/alias. However, when I call start-slapd as root, I still get the same errors. Attached is the errors log

Re: [Fedora-directory-users] failover works but very slow.

2007-09-12 Thread George Holbert
I just want to add that our SUSE 10 clients do not have this problem at all. Interesting! Do you know what versions of pam_ldap and nss_ldap are used on those clients? Hai Wu wrote: I just want to add that our SUSE 10 clients do not have this problem at all. On 9/11/07, George Holbert <[

RE: [Fedora-directory-users] Fedora DS 1.0.4 build on Solaris 10?

2007-09-12 Thread Scott Ding
Using the certutil-bin instructions given by Rob, I was able to generate slapd-lsctsol06-key3.db,slapd-lsctsol06-cert8.db, and secmod.db successfully under /home/dings/fds/alias. However, when I call start-slapd as root, I still get the same errors. Attached is the errors log file under logs. -

Re: [Fedora-directory-users] FDS crash - happened after adding views

2007-09-12 Thread Richard Megginson
Dave Augustus wrote: On Tue, 2007-09-11 at 18:56 -0600, Richard Megginson wrote: Dave Augustus wrote: On Tue, 2007-09-11 at 17:10 -0500, Dave Augustus wrote: Hello all, On Centos 5 x86_64, we have fedora-ds-1.0.4-1.FC6.x86_64 installed. We are in the painful process of migr

Re: [Fedora-directory-users] FDS crash - happened after adding views

2007-09-12 Thread Dave Augustus
On Tue, 2007-09-11 at 18:56 -0600, Richard Megginson wrote: > Dave Augustus wrote: > > On Tue, 2007-09-11 at 17:10 -0500, Dave Augustus wrote: > > > >> Hello all, > >> > >> On Centos 5 x86_64, we have fedora-ds-1.0.4-1.FC6.x86_64 installed. > >> > >> We are in the painful process of migrating fr

Re: [Fedora-directory-users] FDS schema

2007-09-12 Thread Richard Megginson
Matthias Dieter Wallnöfer wrote: Hi all! On a FDS installation I notice many installed schema files that are used by the old Netscape or SUN enterprise services (50ns-*). I think they aren't necessary for many environments and shouldn't be installed by default anymore. For the next release I

[Fedora-directory-users] FDS schema

2007-09-12 Thread Matthias Dieter Wallnöfer
Hi all! On a FDS installation I notice many installed schema files that are used by the old Netscape or SUN enterprise services (50ns-*). I think they aren't necessary for many environments and shouldn't be installed by default anymore. For the next release I would propose an advanced option

Re: [Fedora-directory-users] Fedora DS 1.0.4 build on Solaris 10?

2007-09-12 Thread Rob Crittenden
Dave Augustus wrote: On Tue, 2007-09-11 at 19:56 -0700, Scott Ding wrote: /home/dings/fds/alias does exist. I am starting FDS by using start-slapd as root user. /home/dings/fds/alias is writable by the server. It looks like start-slapd is looking for some certificate under /home/dings/fds/alia

Re: [Fedora-directory-users] failover works but very slow.

2007-09-12 Thread Steve Rigler
On Tue, 2007-09-11 at 16:54 -0700, Hai Wu wrote: > Hi, > > We are using fedora 1.0.4, When the first ldap server dies and does not ping, > the clients can still bind to second server but it is very slow to do > anything on clients, opening a terminal or listing a dir takes a few > seconds. I find

RE: [Fedora-directory-users] ssh login fail

2007-09-12 Thread Steve Rigler
On Wed, 2007-09-12 at 10:07 +1200, Steven Jones wrote: > > I must have had multiple issues and initially I created accounts with a > posix user but later as I had re-done fully it sooo many times, I > stopped botheringnot realising it could have been an issue. > > SO I just setup the posix a

RE: [Fedora-directory-users] Fedora DS 1.0.4 build on Solaris 10?

2007-09-12 Thread Dave Augustus
On Tue, 2007-09-11 at 19:56 -0700, Scott Ding wrote: > /home/dings/fds/alias does exist. I am starting FDS by using start-slapd > as root user. /home/dings/fds/alias is writable by the server. It looks > like start-slapd is looking for some certificate under > /home/dings/fds/alias. I checked th