Re: [389-users] AD replication agreement with 2 different servers/domains

gt; suffix with ou's for domains that way you can use '-s sub' to search the > entire suffix but still have that segregation, or you can export an LDIF > between AD and use ldapdiff.pl to pre-merge the AD domains. > > Hope this helps. > > Dan > > __

Re: [389-users] Stop user being replicated with Active Directory

y_Sync > > > 2011/12/12 Juan Asensio Sánchez >> >> Hi >> >> After one user has been replicated from 389 DS to Active Directory, is >> there any way to stop replicating it? I want the user, after deleting >> some attrs in 389 DS (ntUser objectClass, .

[389-users] Stop user being replicated with Active Directory

Hi After one user has been replicated from 389 DS to Active Directory, is there any way to stop replicating it? I want the user, after deleting some attrs in 389 DS (ntUser objectClass, ...), be deleted in Active Directory, but already exists in 389 DS. Is this possible? Thanks in advance. -- 389

Re: [389-users] OU attribute in AD replication agreement

diciembre de 2011 16:14, Juan Asensio Sánchez escribió: > Hi > > I continue trying to replicate the users from the 389 directory to an > AD server. After removing language subtype attributes, I get now this > error when a user contains an "ou" attribute: > &

[389-users] OU attribute in AD replication agreement

Hi I continue trying to replicate the users from the 389 directory to an AD server. After removing language subtype attributes, I get now this error when a user contains an "ou" attribute: [01/Dec/2011:13:50:04 +0100] NSMMReplicationPlugin - agmt="cn=ll" (:636): windows_process_total_entry: L

Re: [389-users] Master/Slave Replication setup via command line

http://docs.redhat.com/docs/en-US/Red_Hat_Directory_Server/8.2/html/Administration_Guide/Managing_Replication-Configuring-Replication-cmd.html 2011/12/1 John Mancuso : > Any way to setup Master/Slave Replication setup via command line? The java > GUI is a bit of a pain to use but those are the onl

Re: [389-users] *;lang-en attributes in AD replication

https://bugzilla.redhat.com/show_bug.cgi?id=759009 https://bugzilla.redhat.com/show_bug.cgi?id=759043 El día 30 de noviembre de 2011 15:21, Rich Megginson escribió: > On 11/30/2011 04:50 AM, Juan Asensio Sánchez wrote: >> >> Hi >> >> In our directory, we have some us

[389-users] *;lang-en attributes in AD replication

Hi In our directory, we have some users with attributes like cn;lang-en, sn;lang-en, with the same value than cn or sn, but without tildes (á, è) or "ñ". When I try to synchronize these users with Active Directory, I get this error: [30/Nov/2011:11:58:32 +0100] - Windows sync entry: Created new r

Re: [389-users] csngen_adjust_time: adjustment limit exceeded

OK Rich, thank you very much. I will try this tomorrow, it's evening here in Spain. For "replicas" I mean replicated suffixes/databases on each server in my previous message. Regards. 2010/8/16 Rich Megginson > Juan Asensio Sánchez wrote: > > Hi > > > > Th

Re: [389-users] csngen_adjust_time: adjustment limit exceeded

Hi Thanks Rich for your answer. Just some questions: > The bug that caused this to happen was fixed, but unfortunately cannot > fix the bad nsState that already exists. The problem is that the CSN > generator attribute (nsState) in the cn=replica entry for the suffx is > not cleaned up properly

Re: [389-users] Tuning 389 DS

2010/8/3 Rich Megginson > Juan Asensio Sánchez wrote: > > > > 2010/8/2 Rich Megginson mailto:rmegg...@redhat.com > >> > > > > Juan Asensio Sánchez wrote: > > > Hi > > > > > > I am trying to tune the performance of the

Re: [389-users] 389 DS 1.2.5 on RHEL VM

Hi We also have about 30 VMs running Centos 5 and 389 DS without any problem of resources, with a directory of about 55000 entries (VMWare ESX Server), all replicated. Also, real machines. 2010/7/13 Daniel Maher > > On 07/13/2010 01:26 AM, Barry Sitompul wrote: > > > Has anyone had the experien

Re: [389-users] 389DS ignoring nsslapd-sizelimit

One more note, this only happens in 1.2.5 versions, not in 1.1.3 (we have servers with two different versions). El 1 de julio de 2010 15:00, Juan Asensio Sánchez escribió: > Hi > > We have just realized that our servers are ignoring the parameter > nsslapd-sizelimit. If we do a s

[389-users] 389DS ignoring nsslapd-sizelimit

Hi We have just realized that our servers are ignoring the parameter nsslapd-sizelimit. If we do a search of the entire directory (about 5 entries), we have a size limit exceeded: # ldapsearch -H ldaps://localhost -x -LLL -b "dc=X,dc=es" -D "uid=X,ou=X,o=,dc=,dc=es" -W [..

Re: [389-users] The 1.2.6 release will be very soon . . .

Hi I see that there is 389-ds-console 1.2.3 version in EPEL testing, the package that is needed, according to a previous post. I will try to upgrade our test servers again. Regards. 2010/7/1 Rich Megginson > . . . but before we release to the stable repositories, we need your > feedback. Ple

Re: [389-users] Announcing 389 Directory Server 1.2.6 Release Candidate 1

that? Regards. 2010/6/25 Rich Megginson > Juan Asensio Sánchez wrote: > > Hi again > > > > What will happen if I modify the schema, creating a new aattribute > > without specifying any matching rule? Will the directory use the > > default rules fo

Re: [389-users] Announcing 389 Directory Server 1.2.6 Release Candidate 1

console, when i edit the attribute in the schema, i don't see any option to change the matching rule. Regards and thanks in advance. 2010/6/23 Rich Megginson > Juan Asensio Sánchez wrote: > > Hi > > > > I have upgraded our test server(from version 1.2.5, > > 389-ds

Re: [389-users] Announcing 389 Directory Server 1.2.6 Release Candidate 1

Hi The package 389-ds-console-1.2.3 is not available in EPEL Testing: http://download.fedora.redhat.com/pub/epel/testing/5/i386/ Just version 1.2.0 in EPEL Stable: http://download.fedora.redhat.com/pub/epel/5/i386/ Regards. 2010/6/23 Rich Megginson > Juan Asensio Sánchez wrote: >

Re: [389-users] Announcing 389 Directory Server 1.2.6 Release Candidate 1

Hi I have upgraded our test server(from version 1.2.5, 389-ds-base-1.2.6-0.7.rc2.el5.i386 and 389-admin-1.1.11-0.5.rc1.el5.i386), and when running "setup-ds-admin.pl -u", i get many messages like this (all about custom attributes): [22/Jun/2010:10:24:58 +0200] attr_syntax_create - Error: the EQUA

Re: [389-users] Synchronizing passwords

Emmm, well, this makes samba update userPassword when changing the password from Windows. But if i change the password from Linux, samba passwords are not updated, because linux machines are autheticating directly with LDAP, not with Samba (just userPassword). I have found this message (in 2006),

[389-users] Modify dse.ldif using commands

Hi To modify some parameters of the conguration, like nsslapd-cachememsize, it is required to stop the server and manually change the setting in the dse.ldif. Is there any way/command/utility to modify that file without using grep and sed? I say this because when doing this, we must be careful to

Re: [389-users] Busy replica when deleting replication conflict

OK; opened: https://bugzilla.redhat.com/show_bug.cgi?id=571677 2010/3/9 Rich Megginson > Juan Asensio Sánchez wrote: > > One note, we have servers with version 1.1.3 and servers that have > > been upgraded to version 1.2.5. Only the servers that have been > > upgraded to

Re: [389-users] Busy replica when deleting replication conflict

One note, we have servers with version 1.1.3 and servers that have been upgraded to version 1.2.5. Only the servers that have been upgraded to 1.2.5 are showing the busy replica error, not those with version 1.1.3. Hope this could help. Regards. El 8 de marzo de 2010 16:50, Juan Asensio Sánchez

Re: [389-users] Busy replica when deleting replication conflict

,o=XX,dc=XX,dc=XXXXXX" And no more... As you can see, the replica is busy since 8:16 (now is 16:51, in Spain). I am locked :S. El 8 de marzo de 2010 16:44, Juan Asensio Sánchez escribió: > At first sight, there are no messages neither in access or error logs, in > supplier

Re: [389-users] Busy replica when deleting replication conflict

ers,o=XX,dc=XX,dc=XXX" which does not get any RESULT operation. I have just enabled replication logs in the consumer to see any messages. As soon i get them, i will post. Regards. 2010/3/8 Rich Megginson > Juan Asensio Sánchez wrote: > > Hi all > > > > I have po

[389-users] About nsMatchingRule in indexes

Hi I am trying to make our directory more "user friendly". We are in Spain, so there are people names like mine, "Juan Asensio Sánchez" (Sánchez with tilde). Well, i I do a search with filter "(cn=*sánchez)" (with tilde), and I get my user in the results, but