[389-users] Sharing scripts for AD<->RHDS integration

2009-06-15 Thread Kenneth Holter
Hi all. I'm working on a few small scripts aimed at AD<->FDS/RHDS integration. The scripts basically add posix attributes to users synced over from AD, and use AD group memberships to create NIS netgroup membership (which can be used for controlling which users gets to access which servers). I h

Re: [389-users] Error debianizing the 389-ds-base-1.2.1 package

2009-06-15 Thread Morenisco
Rich Megginson wrote: [...] The problem is that libslapd is not linked with -lrt, which provides the semaphore functions. This is usually fine, since ns-slapd (the executable) is linked with -lrt, so that at runtime all of these references are resolved, But Debian uses -Wl,-z,defs which forc

Re: [389-users] GID error

2009-06-15 Thread John A. Sullivan III
On Mon, 2009-06-15 at 17:03 -0500, Doug Coats wrote: > That did it. Thanks for pointing out the obvious. > > For those coming after me. Create a group with the same name as the > user. Add the posixgroup to that groups Objectclass. Fill in the > gidnumber with the same gid number you used whe

Re: [389-users] GID error

2009-06-15 Thread Doug Coats
That did it. Thanks for pointing out the obvious. For those coming after me. Create a group with the same name as the user. Add the posixgroup to that groups Objectclass. Fill in the gidnumber with the same gid number you used when you created the user. Now it shows up as expected when I list

Re: [389-users] GID error

2009-06-15 Thread John A. Sullivan III
On Mon, 2009-06-15 at 15:45 -0500, Doug Coats wrote: > Thanks for you help John and Braden. > > I tried using the the Directory Server area of the Console to add the > object class "posixgroup" to the Groups, People, user dcoats, and > group dcoats. > > So I make myself clear I did this by do

[389-users] cron no longer works after password expiration

2009-06-15 Thread Aaron Mills
Hi all, I set up password policy on my FDS box and things were humming along just fine until people's passwords expired (100 days). Users can still log in to our linux boxen as normal (though we were seeing Invalid Credentials log entries). I disabled password policy, however now cron jobs no

Re: [389-users] GID error

2009-06-15 Thread Jazcek Braden
the object class posixgroup has a required attribute of gidnumber. In the interface that you mentioned it should automatically create this field that is empty on the attribute list of the object. You need to fill a number in there before you try to save the entry. -- Jazcek On Mon, Jun 15, 2009

Re: [389-users] GID error

2009-06-15 Thread Doug Coats
Thanks for you help John and Braden. I tried using the the Directory Server area of the Console to add the object class "posixgroup" to the Groups, People, user dcoats, and group dcoats. So I make myself clear I did this by double clicking on Directory Server in the Management Console. I then cl

Re: [389-users] loss of group members in AD after initialization of sync

2009-06-15 Thread Jean-Noel Chardron
Richard Megginson a écrit : - "jean-Noël Chardron" wrote: hello, When I initiate a first full synchronization of DS and AD I lost members in groups error log shows : [10/Jun/2009:15:00:07 +0200] NSMMReplicationPlugin - agmt="cn=zebigbos" (zebigbos:636): map_entry_dn_inbound: looki

Re: [389-users] loss of group members in AD after initialization of sync

2009-06-15 Thread Richard Megginson
- "jean-Noël Chardron" wrote: > hello, > > When I initiate a first full synchronization of DS and AD I lost > members > in groups > > error log shows : > > [10/Jun/2009:15:00:07 +0200] NSMMReplicationPlugin - > agmt="cn=zebigbos" > (zebigbos:636): map_entry_dn_inbound: looking for local

Re: [389-users] which user must have access to /var/run/dirsrv ?

2009-06-15 Thread Nathan Kinder
dima vasiletc wrote: On 06/15/2009 08:08 PM, Nathan Kinder wrote: dima vasiletc wrote: Hello When i try start dirsrv i have error Failed to delete old semaphore for stats file (/var/run/dirsrv/slapd-MY-DOMAIN-COM.stats). Error 13 (Permission denied). Note that this is referring to a semaphore

Re: [389-users] which user must have access to /var/run/dirsrv ?

2009-06-15 Thread dima vasiletc
On 06/15/2009 08:08 PM, Nathan Kinder wrote: dima vasiletc wrote: Hello When i try start dirsrv i have error Failed to delete old semaphore for stats file (/var/run/dirsrv/slapd-MY-DOMAIN-COM.stats). Error 13 (Permission denied). Note that this is referring to a semaphore that coordinates acce

Re: [389-users] which user must have access to /var/run/dirsrv ?

2009-06-15 Thread dima vasiletc
On 06/15/2009 08:08 PM, Nathan Kinder wrote: dima vasiletc wrote: Hello When i try start dirsrv i have error Failed to delete old semaphore for stats file (/var/run/dirsrv/slapd-MY-DOMAIN-COM.stats). Error 13 (Permission denied). Note that this is referring to a semaphore that coordinates acce

Re: [389-users] which user must have access to /var/run/dirsrv ?

2009-06-15 Thread dima vasiletc
On 06/15/2009 08:08 PM, Nathan Kinder wrote: dima vasiletc wrote: Hello When i try start dirsrv i have error Failed to delete old semaphore for stats file (/var/run/dirsrv/slapd-MY-DOMAIN-COM.stats). Error 13 (Permission denied). Note that this is referring to a semaphore that coordinates acce

Re: [389-users] which user must have access to /var/run/dirsrv ?

2009-06-15 Thread Nathan Kinder
dima vasiletc wrote: Hello When i try start dirsrv i have error Failed to delete old semaphore for stats file (/var/run/dirsrv/slapd-MY-DOMAIN-COM.stats). Error 13 (Permission denied). Note that this is referring to a semaphore that coordinates access to the stats file, not the stats file itse

Re: [389-users] which user must have access to /var/run/dirsrv ?

2009-06-15 Thread Richard Megginson
- "dima vasiletc" wrote: > On 06/15/2009 07:53 PM, Richard Megginson wrote: > > ls -al /var/run/dirsrv > > > > drwxrwxrwx 2 dirsrv nobody 4096 2009-06-15 10:21 . > drwxr-xr-x 31 root root 4096 2009-06-15 10:21 .. > -rw-r--r-- 1 dirsrv dirsrv6 2009-06-15 10:21 > slapd-MYDOMAIN

Re: [389-users] Performance cuestions about ds.

2009-06-15 Thread Richard Megginson
- "Julio Gómez Belmonte" wrote: > Hello everybody, > > This is my first message to the list, so I hope don't make recurring > questions. > > My question concerns the performance of directory server, I have a > directory with a large number of entries, ~ 20,000 objects. My > question is:

Re: [389-users] which user must have access to /var/run/dirsrv ?

2009-06-15 Thread dima vasiletc
On 06/15/2009 07:53 PM, Richard Megginson wrote: ls -al /var/run/dirsrv drwxrwxrwx 2 dirsrv nobody 4096 2009-06-15 10:21 . drwxr-xr-x 31 root root 4096 2009-06-15 10:21 .. -rw-r--r-- 1 dirsrv dirsrv6 2009-06-15 10:21 slapd-MYDOMAIN-COM.startpid -rw-r--r-- 1 dirsrv dirsrv 2072 2

Re: [389-users] which user must have access to /var/run/dirsrv ?

2009-06-15 Thread Richard Megginson
- "dima vasiletc" wrote: > Hello > When i try start dirsrv i have error > Failed to delete old semaphore for stats file > (/var/run/dirsrv/slapd-MY-DOMAIN-COM.stats). Error 13 (Permission > denied). > > but access for dirsrv user permited. > also ls -al /var/run/dirsrv > > -- > С уваже

[389-users] which user must have access to /var/run/dirsrv ?

2009-06-15 Thread dima vasiletc
Hello When i try start dirsrv i have error Failed to delete old semaphore for stats file (/var/run/dirsrv/slapd-MY-DOMAIN-COM.stats). Error 13 (Permission denied). but access for dirsrv user permited. also -- С уважением, Дмитрий -- 389 users mailing list 389-us...@redhat.com https://www.redh

Re: [389-users] GID error

2009-06-15 Thread Jazcek Braden
you need to create a posixgroup object with cn=user and gidnumber=10009 On Sat, Jun 13, 2009 at 9:11 AM, Doug Coats wrote: > I have run into a issue with my system being able to correctly identify a > user and their group. > > I am running CentOS 5.3 and centos-ds 8.1 > > I have created a user usi

[389-users] Performance cuestions about ds.

2009-06-15 Thread Julio Gómez Belmonte
Hello everybody, This is my first message to the list, so I hope don't make recurring questions. My question concerns the performance of directory server, I have a directory with a large number of entries, ~ 20,000 objects. My question is: When I receive a too large query, the directory will