Re: Preparing to upgrade to fds 1.0.4

[Richard Megginson <rmeggins@xxxxxxxxxx>]

Bliss, Aaron wrote:
> I attempted to run the following with of course a good directory manager
> password:
> ldapmodify -x -D "cn=directory manager" -w password
> dn: cn=config
> changetype: modify
> replace: passwordCheckSyntax
> passwordCheckSyntax: off
>
> And receive a response saying" modifying entry "cn=config" however it
> doesn't seem that the command ever completes, as control isn't returned
> back to the command line (I apologize for the newbie questions, however
> I'm not all that familiar with editing ldap entries from the command
> line).  Thanks.
>   
You have to type Ctrl-D (the EOF character) to tell ldapmodify you are 
done.  Also, your modify command must be followed by a blank line, so 
after the last character input, type Enter, Enter, then Ctrl-D. After 
typing the second Enter, you should see some feedback about your 
operation from ldapmodify.
> Aaron 
>
> -----Original Message-----
> From: Richard Megginson [mailto:rmeggins@xxxxxxxxxx] 
> Sent: Monday, February 19, 2007 1:02 PM
> To: General discussion list for the Fedora Directory server project.
> Cc: Bliss, Aaron
> Subject: Re:  Preparing to upgrade to fds 1.0.4
>
> Bliss, Aaron wrote:
>   
> > After doing some more reading, I did run the setup script, however I'm
> > still having the login issue with my userid; I also seem to have a few
> > other problems; any help would be much appreciated.
> >
> > [slapd-al-lnx-s11]: starting up server ...
> > [slapd-al-lnx-s11]:     Fedora-Directory/1.0.4 B2006.312.435
> > [slapd-al-lnx-s11]:     al-lnx-s11.preferredcare.org:389
> > (/opt/fedora-ds/slapd-al-lnx-s11)
> > [slapd-al-lnx-s11]:
> > [slapd-al-lnx-s11]: [19/Feb/2007:12:33:16 -0500] -
> > Fedora-Directory/1.0.4 B2006.312.435 starting up
> > [slapd-al-lnx-s11]: [19/Feb/2007:12:33:16 -0500] NSMMReplicationPlugin
> >     
> -
>   
> > agmt="cn=rep2" (ms-lnx-s12:636): SSL Not Initialized, Replication over
> > SSL FAILED
> > [slapd-al-lnx-s11]: [19/Feb/2007:12:33:16 -0500] NSMMReplicationPlugin
> >     
> -
>   
> > agmt="cn=rep2" (ms-lnx-s12:636): Incremental update failed and
> >     
> requires
>   
> > administrator action
> >   
> >     
> I think these are ok - ssl is disabled during the upgrade and reenabled 
> at the end - see below.
>   
> > [slapd-al-lnx-s11]: [19/Feb/2007:12:33:16 -0500] - slapd started.
> > Listening on All Interfaces port 389 for LDAP requests
> >
> > NMC_Status: 0
> > NMC_Description: Success! The server has been started.
> >
> > Start Slapd Starting Slapd server reconfiguration.
> > Fatal Slapd ERROR: Could not update Directory Server Instance
> > URL ldap://al-lnx-s11.preferredcare.org:389/o=NetscapeRoot user id
> >     
> admin
>   
> > DN cn=slapd-al-lnx-s11,cn=Fedora Directory Server,cn=Server
> >
> >     
> Group,cn=al-lnx-s11.preferredcare.org,ou=preferredcare.org,o=NetscapeRoo
>   
> > t (19:Constraint violation)
> >   
> >     
> This means password policy was not disabled during the upgrade - as 
> specified in the Release Notes - 
> http://directory.fedora.redhat.com/wiki/Release_Notes#Fedora_Directory_S
> erver_1.0.4_-_11.2F09.2F2006
>   
> > Configuring Administration Server...
> > InstallInfo: Apache Directory "ApacheDir" is missing.
> >   
> >     
> This may be a consequence of the constraint violation above.
>   
> > /opt/fedora-ds/slapd-al-lnx-s11/config/dse.ldif: SSL on ...
> > Restarting Directory Server:
> >     
> /opt/fedora-ds/slapd-al-lnx-s11/start-slapd
>   
> > You can now use the console.  Here is the command to use to start the
> > console:
> > cd /opt/fedora-ds
> > /startconsole -u admin -a http://al-lnx-s11.preferredcare.org:1505/
> >
> > INFO Finished with setup, logfile is setup/setup.log 
> >
> > -----Original Message-----
> > From: Bliss, Aaron 
> > Sent: Monday, February 19, 2007 12:26 PM
> > To: Bliss, Aaron; General discussion list for the Fedora Directory
> > server project.
> > Subject: RE:  Preparing to upgrade to fds
> >     
> 1.0.4
>   
> > I should mention that I didn't run setup after upgrading the rpm; is
> > this necessary?  Thanks.
> >
> > Aaron 
> >
> > -----Original Message-----
> > From: fedora-directory-users-bounces@xxxxxxxxxx
> > [mailto:fedora-directory-users-bounces@xxxxxxxxxx] On Behalf Of Bliss,
> > Aaron
> > Sent: Monday, February 19, 2007 12:07 PM
> > To: General discussion list for the Fedora Directory server project.
> > Subject: RE:  Preparing to upgrade to fds
> >     
> 1.0.4
>   
> > Well, I checked out the release notes, and disabled all syntax
> >     
> checking
>   
> > in all password policies before upgrading; upgrade seems to have gone
> > okay, however I'm not unable to log into the directory server console;
> > directory server is running:
> > ldap     32287  7.7  2.3 522820 24416 ?      Sl   12:01   0:00
> > /ns-slapd -D /opt/fedora-ds/slapd-al-lnx-s11 -i
> > /opt/fedora-ds/slapd-al-lnx-s11/logs/pid -w
> > root     32374  1.0  0.3 35372 3256 ?        Ssl  12:02   0:00
> > /usr/sbin//httpd.worker -k start -d /opt/fedora-ds/admin-serv -f
> > /opt/fedora-ds/admin-serv/co
> > root     32376  0.0  0.1 35356 1672 ?        S    12:02   0:00
> > /usr/sbin//httpd.worker -k start -d /opt/fedora-ds/admin-serv -f
> > /opt/fedora-ds/admin-serv/co
> > ldap     32379  4.0  0.4 704088 4928 ?       Sl   12:02   0:00
> > /usr/sbin//httpd.worker -k start -d /opt/fedora-ds/admin-serv -f
> > /opt/fedora-ds/admin-serv/co
> >
> > I can however login with the built-in admin account; I'm also able to
> > still log into the console on the slave directory server (which is
> >     
> still
>   
> > running fds 1.0.2); login error is error 401 Authorization required;
> > next line displays status 401.  Queries to the server seem to be okay;
> > It seems almost as if the console either isn't searching the proper
> > directory (like it's searching the Netscape directory name space or
> >     
> the
>   
> > console has lost the configuration piece that allows my uid to login);
> >     
> I
>   
> > remember setting this thru the console way back when I originally
> >     
> setup
>   
> > fds, however I can't find where that option is thru the gui; any ideas
> > how to further troubleshoot?  Thanks.
> >
> > Aaron
> >
> > -----Original Message-----
> > From: fedora-directory-users-bounces@xxxxxxxxxx
> > [mailto:fedora-directory-users-bounces@xxxxxxxxxx] On Behalf Of
> >     
> Richard
>   
> > Megginson
> > Sent: Monday, February 19, 2007 10:41 AM
> > To: General discussion list for the Fedora Directory server project.
> > Subject: Re:  Preparing to upgrade to fds
> >     
> 1.0.4
>   
> > Bliss, Aaron wrote:
> >   
> >     
> > > Hi everyone
> > > I'm currently running fds 1.0.2 on 2 redhat boxes (a master and a 
> > > slave); are there any gotchas that I should look out for before 
> > > upgrading to 1.0.4?  Can I go directly to this release, or do I need 
> > > to first upgrade to .3?  Thanks for your help.
> > >
> > >     
> > >       
> > You can go directly from .2 to .4.
> >
> > Be sure to read the release notes - 
> > http://directory.fedora.redhat.com/wiki/Release_Notes - and follow the
> >     
>
>   
> > directions there.
> >   
> >     
> > > Aaron
> > >
> > > Confidentiality Notice:
> > > The information contained in this electronic message is intended for 
> > > the exclusive use of the individual or entity named above and may 
> > > contain privileged or confidential information.  If the reader of
> > >       
> this
>   
> > >     
> > >       
> >   
> >     
> > > message is not the intended recipient or the employee or agent 
> > > responsible to deliver it to the intended recipient, you are hereby 
> > > notified that dissemination, distribution or copying of this 
> > > information is prohibited.  If you have received this communication
> > >       
> in
>   
> > >     
> > >       
> >   
> >     
> > > error, please notify the sender immediately by telephone and destroy 
> > > the copies you received.
> > >
> > >
> > >     
> > >       
> ------------------------------------------------------------------------
>   
> >   
> >     
> > > --
> > > Fedora-directory-users mailing list
> > > Fedora-directory-users@xxxxxxxxxx
> > > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> > >   
> > >     
> > >       
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users@xxxxxxxxxx
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users@xxxxxxxxxx
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >   
> >

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users