The 389 Directory Server (previously Fedora-DS) is an LDAP (Lightweight Directory Access Protocol) server developed by Red Hat, as part of Red Hat's community-supported Fedora Project. 389 Directory Server is identical to the Red Hat Directory Server, just rebranded. The name 389 is derived from the ...

learn more… | top users | synonyms

0
votes
0answers
33 views

NFS nobody issue

I am having the nfs nobody issue running Centos 6 . I am running nfsv4 and authenticating users using 389-ds LDAP . The nfs mounts on the client are fine, but I am getting the folling error: ...
0
votes
1answer
13 views

changing where pam_mkhomedir makes a directory

I want to create user directories for an LDAP user (389-ds) If they don't exist so I am using pam_mkhomedir . How do I create these directories on a different mount point say /nfs/home instead . I ...
1
vote
1answer
31 views

FreeIPA and AD password synchronisation

I am attempting to integrate FreeIPA with Active Directory to provide single-sign-on for Windows and Linux users by following this guide. I have successfully created the 'winsync' agreement and ...
0
votes
0answers
25 views

Connecting Solaris 11 to 389 server for authenthication

We have setup a 389 server on Centos 6.7. Confiuring other Linux systems to authenticate with 389 server was straight forward and LDAP users are able to ssh into the Linux servers. However we are ...
0
votes
0answers
72 views

Why I cannot find ldap.conf file when I want to integrate 389-ds and samba on centos 7?

I am working on two servers, a samba server and a 389-ds server. Now I want to integrate them so that samba shares are authenticated via ldap server. I have followed instructions on http://directory....
0
votes
0answers
29 views

Delete root dse from 389 directory server

I have a mail server with kolab 3 installed, when I was installing the server, for testing purposes, i created a second domain that I'll name test.com, now I want to delete this domain from my ldap ...
1
vote
1answer
96 views

How to import SSL certificates in a 389 Directory Server using the command line?

I am trying to setup a new 389 Directory Server in a RHEL machine and I am trying to configure SSL for LDAPS using the command line. I have just spent several hours digging through every piece of ...
0
votes
1answer
109 views

How to configure 389ds LDAP for idle user timeout

For my application till now i was using Java code for timing out the inactive user session from application. But for the purpose of upgrading it, want to use 389ds LDAP (my application is already ...
0
votes
1answer
140 views

389DS Access.log parsing - turning LDAP request type into an audit event

Has anyone authored code to parse a 389 Directory Server's access.log file with an aim of generating audit events based around the LDAP request type. Bascially, take the log sequence [21/Apr/2007:11:...
3
votes
0answers
85 views

Multiple passwordStorageScheme values on same user on 389ds / FreeIPA

I have deployed a FreeIPA identity solution which is backed inside by a 389 directory server. Due to the need of periodically syncing user passwords to another platform (Google Apps for Work), I need ...
4
votes
2answers
11k views

How to install and setup 389-DS on CentOS 7

Setting up Directory Server(389-DS) and Directory Server Admin Console on CentOS 7 Since 389-DS is missing in yum repo of CentOS7 presently and information related it not available. I tried to figure ...
0
votes
2answers
954 views

How to disable Null and Weak Ciphers on 389-Directory-Server

I am running 389-DS on CentOS. Version - '389-ds-base.i686 1.2.11.15-34.el6_5'. Security scans revealed that NullCiphers were found on Port 389 and 636. I tried to disable them by shutting down DS, ...
0
votes
1answer
624 views

FreeIPA/389 DS userPassword

I am connecting to FreeIPA LDAP (386 Directory Server) as admin. I can find a user, and add the userPassword attribute like #!RESULT OK #!CONNECTION ldap://freeipa1.localdomain:389 #!DATE 2014-09-...
0
votes
1answer
62 views

red hat directory 9 / 389 directory server - Do duplicate invalid passwords count toward the lockout policy?

I have been looking at Red Hat's Directory server 9 (aka 389 directory server). One thing I was looking to find out was how account lockouts are handled if the same invalid password is repeated over ...
0
votes
1answer
558 views

389-ds and openldap client setup

I am working towards a proof concept: I have installed 389-dc on centos and enabled ssl via a self-signed certificate. (after a lot of reading) I can see the port 636 is listening on the centos ...
0
votes
1answer
120 views

389 directory server - password not recognized

I have installed "389 directory server" on a CentOS6.5 server, with the setup-ds-admin.pl script. Then added 2 users from the '389-console', to "People" (setting their password from the GUI). Now I'm ...
1
vote
0answers
279 views

Creating users in 389 Directory Server: Autofill UID & GID

I have a 389 Directory Server cluster as ldap. I can create users using 389 management console but... When Selecting "Posix User" tab and checking "Enable Posix User Attributes" is necessary manually ...
0
votes
1answer
540 views

389-ds dirsrv-admin will not start after enabling single master replication

On the supplier server I went ahead and enabled replication. Restarted dirsrv and then was receiving nss shutdown failed error -8038; so I attempted to restart dirsrv-admin and now it fails with the ...
1
vote
0answers
259 views

Any reason why nsAccountLock is multi-valued?

I discovered today that the nsAccountLock attribute (used in LDAP servers such as RedHat Directory Server, 389ds, ...) is multi-valued. Link to source. I cannot think of any reason explaining why it ...
1
vote
1answer
499 views

How to relocate the database directory for Red Hat Directory Server 9.0

I am running RHDS in a VM, but would like to store the data and logs on a separate volume, that is on a SAN. The partition is ext4fs on /sdb1 and is mounted as /data. I tried many variations of the ...
2
votes
1answer
218 views

Start 389 Administration Server on boot

I am using 389 Directory Server on Fedora 18. I've been able to have 389 DS start at boot using systemctl enable dirsrv.target. However, this only starts the directory server itself, and not the ...
0
votes
1answer
1k views

How to start 389 Directory Server at boot

How do I configure 389 Directory Server to start automatically during boot? I am using Fedora 18 and 389 DS version 1.3.0.2, build 2013.017.28. There does not seem to be any recent documentation on ...
0
votes
1answer
303 views

Fedora 389 ds sasl mapping issue?

I have a fedora client that is authenticating to a centos server running 389 ds and kerberos I can run kinit <my-user-principal> on the fedora client successfully and get a ticket, but no ...
1
vote
1answer
683 views

Integrate openSource Directory server to Microsoft Active Directory

I don't know much about Directory server or Windows Active Directory, I just wan't know the possibility of having a Windows Active directory and a Directory Server(say, Redhat DS or Fedora Directory ...
2
votes
1answer
8k views

LDAP Client Authentication using SSSD: Groups issue

I have been able to setup 389 LDAP server and SSSD client authentication. However, whenever I login using ldap user after each login it displays the error ttt@dsl's password: Last login: Thu Dec 6 ...
3
votes
2answers
3k views

How to add admin users in 389 LDAP, fedora directory server

I want to create couple of Admin users who have access to create/delete users on a particular group/Organization Unit. For example, User: uid=testadmin, ou=people, dc=my,dc=net Should have access ...
2
votes
2answers
2k views

LDAP 389: Auto user creation at the client machines

I have setup an 389 directory server on Centos 6. User authentication works fine, however, I have to create individual users on each client machine after creating the user at the directory server. ...
1
vote
1answer
713 views

Start TLS and 389 Directory

I'm trying to configure Start TLS on 389 Directory server, but I'm having all sorts of issues. I've been following this doc: https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Directory_Server/9....
2
votes
0answers
149 views

389 DS Architecture for Multiple Sites

I'm looking to deploy 389 Directory in my environment to replace an existing iPlanet installation. I would be using it primarily to store user account data for authentication purposes. I have two ...
6
votes
4answers
6k views

Setting up SSL with 389 Directory Server for LDAP authentication

I've got 389 Directory Server running on RHEL 5 with groups, users, posix etc. RHEL clients are authenticating users with LDAP - no problems, everything works perfect, but passwords are sent in ...
-5
votes
2answers
3k views

Is Active Directory backup as flexible as OpenLDAPs or 389-ds's?

With 389-ds I can export my entire directory using db2ldif and import it into a new directory server using ldif2db without any issues; even in catastrophic failure situations. Now, the question is ...
3
votes
3answers
2k views

LDAP authentication with Graphite

I have setup Graphite Web 0.9.9 on CentOS 6.2 x86_64 at EC2 and I'm trying to get LDAP authentication to work against 389 Directory Server. I have configured local_settings.py with: USE_LDAP_AUTH ...
2
votes
3answers
5k views

389 Directory Server Administrative Limit Exceeded error?

I am trying to use 389 ds with large amounts of data as children of entries. I have tried doing a search on these entries using ldapsearch but I keep getting the following error: result: 11 ...
1
vote
1answer
263 views

Are Centos directory server and 389 directory server the same?

I have very broad view that Redhat Directory server , 389 directory server and Centos Directory server are all the same. Its just the support you pay for on the RedHat version. Is this true ? Are ...
2
votes
1answer
2k views

LDAP (389 Directory Service) and Pacemaker with Multi-Master

I'm trying to setup a pair of LDAP servers running 389 (formerly Fedora DS) in high availability using Pacemaker with a floating IP. In addition, 389 supports multi-master replication, where all ...
0
votes
2answers
2k views

Is RedHat directory server free if you have a Redhat license (RHEL 5)? [duplicate]

Possible Duplicate: Can you help me with my software licensing question? If I have a RHEL 5 server with a paid subscription do I need to purchase any licenses / keys to run Redhat Directory ...
1
vote
2answers
2k views

How to use 389 Directory Server with Mac OS X for login

We are using 389 Directory Server on a Fedora machine as our LDAP server and wish to sign on to Mac OS X Snow Leopard clients using this. Is there a particular LDAP schema to use for Mac OS X Snow ...
0
votes
1answer
2k views

How to set up iptables for LDAP on Fedora

I am running 389 Directory Server on Fedora 14. When I use ldapsearch to connect to myserver.com:389 from localhost, it works fine. When I use ldapsearch to connect to myserver.com:389 from a ...
2
votes
1answer
462 views

Using LDAP to store customer data

We wish to store some data in 389 Directory Server LDAP that doesn't fit that well into the standard set of schema's that come with the product. Nothing too amazing, things like: when the customer ...
0
votes
3answers
2k views

Is it possible for 389 Directory Server to do read-only AD sync?

Goal: Have 389DirectoryServer (AKA Redhat/Centos/Fedora DS) pull account info from AD, allowing both AD accounts and 389-native accounts be authenticated through 389DS, but have the sync be one way, ...
1
vote
2answers
2k views

389 directory server error “Operation requires a secure connection”

I have installed a directory server but I can't change the password of user. I have used this command: [root@xxxx]# ldappasswd -x -D "cn=directory manager" -W "uid=xxxxx,ou=xxxx,dc=xxx,dc=xx" ...
1
vote
1answer
753 views

how to migrate old fedora directory server to new server

I have and old fedora 4 running fedora directory server, now I have to migrate all the database, schema to a new host running fedora 12 with 389 dir server. I wanna know how to do it, how to export ...
0
votes
1answer
691 views

How can I start Fedora Directory Service with SELinux enabled?

I just did a fresh base install of fedora 12, and did a yum install 389-ds. I went through the included setup script (setup-ds-admin.pl) and everything started fine and was working normally. I could ...