Re: 389 console is blank

JESSE LUNT <jlunt@xxxxxxxxxxxxxx> · Thu, 30 Aug 2018 16:14:50 -0400

Hey All,
    So if you haven't figured it out today Cassie and I work together and double team this environment. I ran the following and did get a response back.

ldapsearch -D "uid=onecampus,ou=Tools,dc=northshore,dc=edu" -w "northshore-2018" -H ldap://389ds1.northshore.edu:389 -x -b "cn=config,o=netscaperoot" "objectclass=*"

On Thu, Aug 30, 2018 at 3:36 PM Cassandra Reed <creed@xxxxxxxxxxxxxx> wrote:
Thanks, Mark.  When executing the ldapsearch that you suggested, I am getting an error message: ldap_sasl_interactive_bind_s: Unknown authentication method (-6) additional info: SASL(-4): no mechanism available:
We have been replicating o=netscaperoot - I am not sure how up to date the replicas are, considering the trouble that we are having with the config db right now...

Cassandra Reed
978-762-4222
EDP Systems Analyst III
North Shore Community College
1 Ferncroft Road, Danvers MA 01923

On Thu, Aug 30, 2018 at 3:20 PM Mark Reynolds <mreynolds@xxxxxxxxxx> wrote:

    On 08/30/2018 03:07 PM, Cassandra Reed
      wrote:

          Hi Mark,

          You are correct, it does appear that the o=netscaperoot
            suffix was removed.  

    No, I think it's still there.  Try this search:

        # ldapsearch -D "cn=directory manager" -W -b o=netscapeoot
    objectclass=* dn

    Maybe try restarting the admin server:  

        # restart-ds-admin

    Are you replicating o=netscaperoot by any chance?  

    Mark

          Below is a bit of the access log file during the launch
            of the console.  We have two other servers that this Master
            was replicating to, is it possible to export the
            netscaperoot from one of those other two servers and import
            to the Master?  What would this require and would it be
            service impacting at all?  (Reboot of the server/etc.)  One
            of the servers hasn't been replicating in some time, would
            an older version of netscaperoot have any impact on the
            userroot directory?  

          [30/Aug/2018:14:28:03 -0400] conn=1035324 fd=79 slot=79
            connection from 127.0.0.1 to 127.0.0.1
          [30/Aug/2018:14:28:03 -0400] conn=1035324 op=0 BIND
            dn="cn=Directory Manager" method=128 version=3
          [30/Aug/2018:14:28:03 -0400] conn=1035324 op=0 RESULT
            err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager"
          [30/Aug/2018:14:28:03 -0400] conn=1035324 op=1 SRCH
            base="cn=user,cn=DefaultObjectClassesContainer,ou=1.1,ou=admin,ou=Global
            Preferences,ou=northshore.edu,o=NetscapeRoot"
            scope=0
            filter="(|(objectClass=*)(objectClass=ldapsubentry))"
            attrs=ALL
          [30/Aug/2018:14:28:03 -0400] conn=1035324 op=1 RESULT
            err=32 tag=101 nentries=0 etime=0
          [30/Aug/2018:14:28:03 -0400] conn=1035324 op=2 SRCH
base="cn=group,cn=DefaultObjectClassesContainer,ou=1.1,ou=admin,ou=Global
            Preferences,ou=northshore.edu,o=NetscapeRoot"
            scope=0
            filter="(|(objectClass=*)(objectClass=ldapsubentry))"
            attrs=ALL
          [30/Aug/2018:14:28:03 -0400] conn=1035324 op=2 RESULT
            err=32 tag=101 nentries=0 etime=0
          [30/Aug/2018:14:28:03 -0400] conn=1035324 op=3 SRCH
            base="cn=OU,cn=DefaultObjectClassesContainer,ou=1.1,ou=admin,ou=Global
            Preferences,ou=northshore.edu,o=NetscapeRoot"
            scope=0
            filter="(|(objectClass=*)(objectClass=ldapsubentry))"
            attrs=ALL
          [30/Aug/2018:14:28:03 -0400] conn=1035324 op=3 RESULT
            err=32 tag=101 nentries=0 etime=0
          [30/Aug/2018:14:28:03 -0400] conn=1035324 op=4 SRCH
            base="cn=ResourceEditorExtension,ou=1.1,ou=admin,ou=Global
            Preferences,ou=northshore.edu,o=NetscapeRoot"
            scope=1
            filter="(objectClass=nsAdminResourceEditorExtension)"
            attrs=ALL
          [30/Aug/2018:14:28:03 -0400] conn=1035324 op=4 RESULT
            err=32 tag=101 nentries=0 etime=0

          Thank you,
          -Cassie

                                Cassandra Reed

                                978-762-4222

                                EDP
                                  Systems Analyst III

                              North Shore Community College

                            1 Ferncroft Road, Danvers MA 01923

        On Thu, Aug 30, 2018 at 9:44 AM Mark Reynolds
          <mreynolds@xxxxxxxxxx> wrote:

            Are you logging in as Directory Manager?
            If you are, perhaps the o=netscaperoot suffix was removed
              from DS?  You need to look at the access log in this case
              and what it's doing when you log in.
            Mark

-- 

Jesse Lunt
Director of Network and User Services
Office of Information Services
North Shore Community College
(978)-762-4014

_______________________________________________
389-users mailing list -- 389-users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to 389-users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@xxxxxxxxxxxxxxxxxxxxxxx