Martin Eckel wrote: > Am Do 11.10.2007 22:15 schrieb Richard Megginson <rmeggins at redhat.com>: > > > Martin Eckel wrote: > > > Am Di 09.10.2007 17:47 schrieb Richard Megginson > <rmeggins at redhat.com>: > > > > > > > Martin Eckel wrote: > > > > > Hi, > > > > > > > > > > I have installed fedora-ds-1.0.4-1 on a FC6 Linux. I am able > to run > > > > > the startconsole, but when I open the Admin Server window and > select > > > > > any item than an error message appears that it trys to access to > > > > > /admin-serv/tasks/Configuration/ServerSetup. But the tasks > directory > > > > > don't exist. I would expect that is was created by the rpm-package > > > > > while installation but it isn't. > > > > > I started the rpm-installation with the --nodeps argument (what I > > > > > would like to avoid, I assume that could be the reason) because it > > > > > says that no httpd is available, but an apache is already > > > installed as > > > > > source-package on this system. I have created a symbolic link > before > > > > > to the httpd-file in /usr/sbin but that don't help. > > > > > Anyone knows, why no tasks directory and its subfolders was > created > > > > > after the installation ? > > > > That URL path is not the actual path in the file system. The way the > > > > admin server works is that it maps that URL to a LDAP entry > somewhere > > > > under o=NetscapeRoot in the configuration directory server. It does > > > > this so it can apply fine grained access control to each task > based on > > > > Fedora DS ACIs, rather than on httpd access control. > > > > > > > > It's going to be tricky to install properly without an httpd.worker > > > > package available for setup. > > > > > > My Apache is compiled as worker version. > > > > > > > > > > > > > Excuse me for my bad English and many Thanks in advance > > > > > Martin > > > > > > > > > ------------------------------------------------------------------------ > > > > > > > > > > -- > > > > > Fedora-directory-users mailing list > > > > > Fedora-directory-users at redhat.com > > > > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > > > > > > > > > > > Thank you for your answer, Richard. I am still working on the same > > > problem. I have checked my ldap structure into the Directory Server > > > startconsole. There exists an "admin-serv-ldap" element into the > > > NetscapeRoot Directory. I have called my servername "ldap" while the > > > installation setup,so it should be correct. But if I click on any > > > button into the Admin Server console window, the error-message shows > > > that it trys to access to "admin-serv" directory. > > Check the admin server access and error logs > /opt/fedora-ds/admin-serv/logs > > > Also a mysterious thing is that if I click on a button into the > > > Directory Server window, i.e. "Manage Certificates" than only an > empty > > > box is appearing. > > Check the admin server access and error logs? > > > Is there any configuration file where this access path is defined ? > > Not exactly. It's really very simple - the admin server converts the > > path /admin-serv/Tasks/Name into an ldap entry - it first looks for the > > admin server entry cn=admin-serv-ldap, then looks for cn=Name,cn=Tasks > > under that entry. > > > > > > Regards, > > > Martin > > > > > > > > > > ------------------------------------------------------------------------ > > > > > > -- > > > Fedora-directory-users mailing list > > > Fedora-directory-users at redhat.com > > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > > > This is a part of the admin-serv/logs/error file: > [Fri Oct 12 14:37:02 2007] [notice] [client 217.24.204.116] > admserv_host_ip_check: ap_get_remote_host could not resolve 217.24.204.116 > [Fri Oct 12 14:37:02 2007] [warn] [client 217.24.204.116] > admserv_host_ip_check: failed to get host by ip addr [217.24.204.116] > - check your host and DNS configuration > [Fri Oct 12 14:37:10 2007] [notice] [client 217.24.204.116] > admserv_host_ip_check: ap_get_remote_host could not resolve 217.24.204.116 > [Fri Oct 12 14:37:10 2007] [warn] [client 217.24.204.116] > admserv_host_ip_check: failed to get host by ip addr [217.24.204.116] > - check your host and DNS configuration > [Fri Oct 12 14:37:10 2007] [error] [client 217.24.204.116] > (104)Connection reset by peer: ap_content_length_filter: > apr_bucket_read() failed > > > And this will always repeated in the access file if I do something > into the Admin Server: > 217.24.204.110 - admin [12/Oct/2007:14:36:54 +0200] "GET > /admin-serv/authenticate HTTP/1.0" 200 369 > 217.24.204.116 - uid=admin, ou=Administrators, ou=TopologyManagement, > o=NetscapeRoot [12/Oct/2007:14:37:00 +0200] "GET > /admin-serv/tasks/operation/StatusPing HTTP/1.0" 200 19 > 217.24.204.116 - uid=admin, ou=Administrators, ou=TopologyManagement, > o=NetscapeRoot [12/Oct/2007:14:37:02 +0200] "GET > /admin-serv/tasks/operation/StatusPing HTTP/1.0" 200 19 > 217.24.204.116 - uid=admin, ou=Administrators, ou=TopologyManagement, > o=NetscapeRoot [12/Oct/2007:14:37:10 +0200] "POST > /admin-serv/tasks/Configuration/ServerSetup HTTP/1.0" 20 > 0 58 > > Could it be, that reverse DNS mapping is required for a correct > functionality of the Admin Server ? It is if you want to restrict access by host name. But you can disable this and just restrict access by IP address. See http://directory.fedoraproject.org/wiki/Howto:AdminServerLDAPMgmt - please read the whole page then especially the section "How to set the hosts/IP addresses allowed to access the Admin Server" > The URL of my ldap server has a valid entry in a DNS server ald I can > do a ping on it. In the error log is nothing else than the DNS errors > > ------------------------------------------------------------------------ > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users > -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3245 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20071012/9718d497/attachment.bin
