The 389 Directory Server (previously Fedora-DS) is an LDAP (Lightweight Directory Access Protocol) server developed by Red Hat, as part of Red Hat's community-supported Fedora Project. 389 Directory Server is identical to the Red Hat Directory Server, just rebranded. The name 389 is derived from the ...

learn more… | top users | synonyms

0
votes
0answers
11 views

Is there a way using the shell to install certificates and enable encryption in 389 directory server?

My client has a 389 directory server installation that I discovered does not have SSL enabled on it. I would like to do this but I've always had to do it using the Admin console. At some point they ...
0
votes
2answers
51 views

How to disable Null and Weak Ciphers on 389-Directory-Server

I am running 389-DS on CentOS. Version - '389-ds-base.i686 1.2.11.15-34.el6_5'. Security scans revealed that NullCiphers were found on Port 389 and 636. I tried to disable them by shutting down DS, ...
0
votes
1answer
42 views

FreeIPA/389 DS userPassword

I am connecting to FreeIPA LDAP (386 Directory Server) as admin. I can find a user, and add the userPassword attribute like #!RESULT OK #!CONNECTION ldap://freeipa1.localdomain:389 #!DATE ...
0
votes
1answer
24 views

red hat directory 9 / 389 directory server - Do duplicate invalid passwords count toward the lockout policy?

I have been looking at Red Hat's Directory server 9 (aka 389 directory server). One thing I was looking to find out was how account lockouts are handled if the same invalid password is repeated over ...
0
votes
1answer
51 views

389-ds and openldap client setup

I am working towards a proof concept: I have installed 389-dc on centos and enabled ssl via a self-signed certificate. (after a lot of reading) I can see the port 636 is listening on the centos ...
0
votes
0answers
26 views

Is it possible to use iptables and trafficcontrol (tc qdisc) together to set rules on only specific packets/traffic?

I would need to set delay on my network interface such that only a specific set of packets/traffic is affected by this delay. i.e., I can set a 9 sec delay on eth0 tc qdisc add dev eth0 root netem ...
0
votes
1answer
57 views

389 directory server - password not recognized

I have installed "389 directory server" on a CentOS6.5 server, with the setup-ds-admin.pl script. Then added 2 users from the '389-console', to "People" (setting their password from the GUI). Now I'm ...
0
votes
0answers
53 views

389 ldap server: woes setting it up

I'd like to use a LDAP server as a centralized rolodex I'm on fedora 20 I'm following the 389 administration manual, but when I get to create a root object, I get this window from the visual console ...
1
vote
0answers
88 views

Creating users in 389 Directory Server: Autofill UID & GID

I have a 389 Directory Server cluster as ldap. I can create users using 389 management console but... When Selecting "Posix User" tab and checking "Enable Posix User Attributes" is necessary manually ...
0
votes
1answer
115 views

389-ds dirsrv-admin will not start after enabling single master replication

On the supplier server I went ahead and enabled replication. Restarted dirsrv and then was receiving nss shutdown failed error -8038; so I attempted to restart dirsrv-admin and now it fails with the ...
1
vote
0answers
119 views

Any reason why nsAccountLock is multi-valued?

I discovered today that the nsAccountLock attribute (used in LDAP servers such as RedHat Directory Server, 389ds, ...) is multi-valued. Link to source. I cannot think of any reason explaining why it ...
1
vote
1answer
150 views

How to relocate the database directory for Red Hat Directory Server 9.0

I am running RHDS in a VM, but would like to store the data and logs on a separate volume, that is on a SAN. The partition is ext4fs on /sdb1 and is mounted as /data. I tried many variations of the ...
2
votes
1answer
101 views

Start 389 Administration Server on boot

I am using 389 Directory Server on Fedora 18. I've been able to have 389 DS start at boot using systemctl enable dirsrv.target. However, this only starts the directory server itself, and not the ...
0
votes
1answer
332 views

How to start 389 Directory Server at boot

How do I configure 389 Directory Server to start automatically during boot? I am using Fedora 18 and 389 DS version 1.3.0.2, build 2013.017.28. There does not seem to be any recent documentation on ...
0
votes
1answer
164 views

Fedora 389 ds sasl mapping issue?

I have a fedora client that is authenticating to a centos server running 389 ds and kerberos I can run kinit <my-user-principal> on the fedora client successfully and get a ticket, but no ...
1
vote
1answer
332 views

Integrate openSource Directory server to Microsoft Active Directory

I don't know much about Directory server or Windows Active Directory, I just wan't know the possibility of having a Windows Active directory and a Directory Server(say, Redhat DS or Fedora Directory ...
0
votes
1answer
4k views

LDAP Client Authentication using SSSD: Groups issue

I have been able to setup 389 LDAP server and SSSD client authentication. However, whenever I login using ldap user after each login it displays the error ttt@dsl's password: Last login: Thu Dec 6 ...
3
votes
1answer
1k views

How to add admin users in 389 LDAP, fedora directory server

I want to create couple of Admin users who have access to create/delete users on a particular group/Organization Unit. For example, User: uid=testadmin, ou=people, dc=my,dc=net Should have access ...
2
votes
2answers
855 views

LDAP 389: Auto user creation at the client machines

I have setup an 389 directory server on Centos 6. User authentication works fine, however, I have to create individual users on each client machine after creating the user at the directory server. ...
1
vote
1answer
420 views

Start TLS and 389 Directory

I'm trying to configure Start TLS on 389 Directory server, but I'm having all sorts of issues. I've been following this doc: ...
2
votes
0answers
116 views

389 DS Architecture for Multiple Sites

I'm looking to deploy 389 Directory in my environment to replace an existing iPlanet installation. I would be using it primarily to store user account data for authentication purposes. I have two ...
5
votes
4answers
4k views

Setting up SSL with 389 Directory Server for LDAP authentication

I've got 389 Directory Server running on RHEL 5 with groups, users, posix etc. RHEL clients are authenticating users with LDAP - no problems, everything works perfect, but passwords are sent in ...
1
vote
2answers
911 views

LDAP authentication with Graphite

I have setup Graphite Web 0.9.9 on CentOS 6.2 x86_64 at EC2 and I'm trying to get LDAP authentication to work against 389 Directory Server. I have configured local_settings.py with: USE_LDAP_AUTH ...
2
votes
3answers
3k views

389 Directory Server Administrative Limit Exceeded error?

I am trying to use 389 ds with large amounts of data as children of entries. I have tried doing a search on these entries using ldapsearch but I keep getting the following error: result: 11 ...
0
votes
1answer
211 views

Are Centos directory server and 389 directory server the same?

I have very broad view that Redhat Directory server , 389 directory server and Centos Directory server are all the same. Its just the support you pay for on the RedHat version. Is this true ? Are ...
1
vote
1answer
1k views

LDAP (389 Directory Service) and Pacemaker with Multi-Master

I'm trying to setup a pair of LDAP servers running 389 (formerly Fedora DS) in high availability using Pacemaker with a floating IP. In addition, 389 supports multi-master replication, where all ...
0
votes
2answers
1k views

Is RedHat directory server free if you have a Redhat license (RHEL 5)? [duplicate]

Possible Duplicate: Can you help me with my software licensing question? If I have a RHEL 5 server with a paid subscription do I need to purchase any licenses / keys to run Redhat ...
1
vote
2answers
2k views

How to use 389 Directory Server with Mac OS X for login

We are using 389 Directory Server on a Fedora machine as our LDAP server and wish to sign on to Mac OS X Snow Leopard clients using this. Is there a particular LDAP schema to use for Mac OS X Snow ...
0
votes
1answer
1k views

How to set up iptables for LDAP on Fedora

I am running 389 Directory Server on Fedora 14. When I use ldapsearch to connect to myserver.com:389 from localhost, it works fine. When I use ldapsearch to connect to myserver.com:389 from a ...
2
votes
1answer
329 views

Using LDAP to store customer data

We wish to store some data in 389 Directory Server LDAP that doesn't fit that well into the standard set of schema's that come with the product. Nothing too amazing, things like: when the customer ...
0
votes
3answers
2k views

Is it possible for 389 Directory Server to do read-only AD sync?

Goal: Have 389DirectoryServer (AKA Redhat/Centos/Fedora DS) pull account info from AD, allowing both AD accounts and 389-native accounts be authenticated through 389DS, but have the sync be one way, ...
1
vote
2answers
1k views

389 directory server error “Operation requires a secure connection”

I have installed a directory server but I can't change the password of user. I have used this command: [root@xxxx]# ldappasswd -x -D "cn=directory manager" -W "uid=xxxxx,ou=xxxx,dc=xxx,dc=xx" ...
1
vote
1answer
549 views

how to migrate old fedora directory server to new server

I have and old fedora 4 running fedora directory server, now I have to migrate all the database, schema to a new host running fedora 12 with 389 dir server. I wanna know how to do it, how to export ...
0
votes
1answer
592 views

How can I start Fedora Directory Service with SELinux enabled?

I just did a fresh base install of fedora 12, and did a yum install 389-ds. I went through the included setup script (setup-ds-admin.pl) and everything started fine and was working normally. I could ...