Adding new admins to Sun one Directory Server 5.2

Hi!
I'm planning to script a small tool that would allow user to add users,delete them, change passwords etc. For this purpose, I want to add an additional admin group which would have rights to be directory server admin. A few selected users would be added to this group and thereby have the privilege of adding/deleting users etc. The idea behind this is not to reveal the dir manager's password.
Has anyone tried this and if yes, have a sample ldif to this?
Thanks in advance.
Regards
S.Swaminath.

Installing on a standalone PC has been discussed several times on this forum.
Please search the archives.
Hint: The solution is to edit the etc/hosts files.
Regards,
Ludovic.

Similar Messages

How to migrate Sun One directory server to a new physical server install

need help
We have to move our existing installation of sun on directory server 5.2 to a new physical server.
We have a new physical server with a new host name. I am trying to find an easiest way to take a snapshot of our existing server and put it on a new installation
So will installing sun one directory server , its shows me two choices either to create a new instance or copy configuration from a existing server
What do i choose and which is the fastest route to replicate my old server
Thanks a bunch in advance
Sganb

Hi,
I'm glad you're still using the old, glorious Sun One Directory Server 5.2, because it brings me back a lot of memories... But are you seriously talking of the 'plain' version, with no patches/hot fixes on top? If that's the case, you're using of a software that has been developed in 2004 and released in Jan 2005! Just for you to be aware, in the last *8* (eight) years a considerable number (in the magnitude of 10^3) of bugs, security problems and performance issues has been identified and fixed...
However, to provide a better answer to your question, it would be important to understand the 'big picture' in terms of scenario and requirements:
1) Is this a critical 24x7 service for which you need to perform an on-line migration or you have a 'maintenance window' during which the service may be switched off?
2) Is the old server member of replication environment? If yes, how many masters/slaves do you have already? Shall the new server be part of this topology? What role shall it have?
3) Would it be possible to make the the old server able to communicate with the new server?
4) How big is the database that you've got to migrate? Do you have any requirement in terms of caches?
5) Do you take backups on a regularly basis and have in place working (*tested*) backup/restore procedures?
6) Is the new server conserving or changing the O.S. and architecture? [SPARC->SPARC, x86->x86, SPARC->x86, Solaris -> ? , 32 .vs. 64-bit? ]
7) What are the steps you did to 'install' the software on the new server?
Thanks,
Marco
P.S.: I don't wanna sound 'scaring' with all these questions, neither this should be intended as an 'hidden advertising' for Oracle Professional/Consulting Services, but the only way to not put in jeopardy your data is being aware of the risks, having the control of what's going on and ... possibly have a 'B' plan ;-)
P.S.S.: My last suggestion is to consider a migration to a later release AS SOON AS POSSIBLE; the latest is ODSEE 11.1.1.7, which is available here:
http://www.oracle.com/technetwork/middleware/downloads/oid-11g-161194.html
and seems to work pretty well ;-)

Adding a windows client to a sun one Directory server running on Win 2000

Hi,
I am a newbie to sun one directory server but i am familiar with windows active directory.
I have followed the instructions and installed Sun One Directory Server on Windows 2000 Server using a typical setup and create a domain and also created some users in that domain.
The next thing i wanted to do was to add a windows 2000 professional desktop on this domain and login with one of the user accounts. I tried to adding the computer to the domain via the "My Computer->Network Identification->Properties->Domain" option and gave the domain name as the one i created on the Sun One Directory Server, but i get an error saying that domain was not found.
Am i missing something here. Do i need to install some client piece on the windows 2000 desktop to add the box on the sun one domain and login in as one of the users.
Any help will be deeply appreciated?
Thanks,
Raj...

yes, you can use samba for a windows client to login to ldap
http://www.samba.org/samba/docs/man/Samba-Guide/happy.html#id2536158
, but for windows XP clients you need to tweak the registry
http://www-jerry.oit.duke.edu/linux/docs/samba/winxp_client_registry_edit

Urgent help on Sun One Directory server 5.1

Hi All,
Am trying to access sun one directory server using the JAVA api provided by the tool itself. Developed an application to access that server and perform several operation.
When I try to unassign a user from a group, all the users from that group are getting unassigned. Can there me any scenario in which this can happen. The user(no an admin user) who is used to connect to the LDAP server has all privileges to do operations on that group. More over this issue is very inconsistent, we could notice only once in separate environment (once per environment) and there hence cannot
be reproducible.
Below is snippet which remove a user from a group.
LDAPAttribute attr = new LDAPAttribute( "uniquemember", userEntryDN );
LDAPModification ldapMod = new LDAPModification( LDAPModification.DELETE, attr );
ldapConnection.modify( myEntryDN, ldapMod );
Any help on will be greatful.
Thanks in advance
-Sri

TTT

Page size limitation on Sun ONE directory server 5.2

Hi All,
How do i know what is the Page size limitation on Sun ONE directory server 5.2?
How do i cahnage it?
Best Regards,
Ayelet Regev
[email protected]

I enabled SSL in SUN ONE Directory Server 5.2, I use the following code to download the server certs,
     Hashtable env = new Hashtable(11);
     env.put(Context.INITIAL_CONTEXT_FACTORY,
     "com.sun.jndi.ldap.LdapCtxFactory");
     env.put(Context.PROVIDER_URL, "ldaps://bharatkumar.webm.webmethods.com:636/o=in");
     env.put(Context.SECURITY_AUTHENTICATION, "EXTERNAL");
     env.put(Context.SECURITY_PROTOCOL, "ssl");
     try {
     // Create initial context
     DirContext ctx = new InitialDirContext(env);
System.out.println(ctx.lookup("ou=web"));
ctx.close();
     } catch (NamingException e) {
     e.printStackTrace();
But it throws the following error:
javax.naming.CommunicationException: SASL bind failed: bharat.com:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.
validator.ValidatorException: PKIX path building failed: sun.security.provider.c
ertpath.SunCertPathBuilderException: unable to find valid certification path to
requested target]
at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:220)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2637)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:283)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:175)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:193
How to rectify the above error?
Kindly Help me.
Thanks,
Bharat

Backup of Sun ONE Directory Server 5.2

Hello,
I am new to Sun ONE Directory server and I installed a copy of version 5.2 on Windows 2000 server and want to ask for your help that how could I backup the LDAP server?
Since there is tool for backup of data but how could I recover if the server instance is failed?
Thanks in advanced.
Pat

Hi Pat,
If you are new to the Directory Server, then it is recommended to study the documentation ;-).
Chapter 4 of the Administrators Guide discusses the backup and restore procedures.
See: http://docs.sun.com/source/816-6698-10/populate.html
If you cannot start the directory server because the database is corrupted, then you may want to use the off-line restore tools (e.g. bak2db).
Before you do anything, study the above chapter.
Bertold

Migrate from Sun One Directory Server 5.1 to 5.2

Greetings
I am trying to run the script provided with the 5.2 release MigrateInstance5; I have installed the server and have followed the instructions to a tee. I keep getting the error, Unable to start the Sun One Directory Server, when I run the script, I am at my wits end as this is supposed to be the easy step, I have to go from 4.2 to 5.2 next.
Please help.

Hello,
We upgraded our directory server version for several times.
If you want a secure method.
export your data.
Copy your schema file to the new install path, modify the information related to the old version and server (also the last line containing db number : keep only lines about the schema entry, it's ACI, objectclasse and attributes) and restart your directory.
Import your data. (you might use a script to clean your ldif file : empty attributes ...)
For the upgrade from 4.2 to 5.2 you will have to work a little bit more on the schema file as you have two of them instead of one. but the idea is the same.
edit your New schema file, keep only the following lines "
dn: cn=schema
objectClass: top
objectClass: ldapSubentry
objectClass: subschema
cn: schema
aci: ....
aci: ....
copy and paste your custom attributes and then objectclasses form the corresponding files.
On the import phase, check that you are not using objectclasses whiche were modified or suppressed.
I hope it was helpfull.

How can I import Openldap schema into sun one directory server?

Hello All
I have a schema which was written for openldap, and I want to import this schema into sun directory server. I found that some attribute syntaxes, like "NumericString", are not exist in sun directory server and some attribute definitions are also different. For example, the "internationaliSDNNumber" in sun directory is defined in "IA5String" syntax, but it is "NumericString" in openldap. Is there any effect on querying data from two different ldap server? How can I solve this problem?
Thank you!

http://directory.fedora.redhat.com/wiki/Howto:OpenLDAP
Migration
GaryThanks! But after I use some of scripts in that page, I got
"Unknown attribute syntax OID "1.3.6.1.4.1.1466.115.121.1.36"
It seems those scripts only transform schema file format, not the gap between different type(attribute syntax). Is it possible to import or add new type(attribute syntax) in sun one directory server?
Thanks.

Help!! How to install and use Sun ONE Directory Server Resource Kit 5.2

Hi ! Friend:
I have some problem on install and use Sun ONE Directory Server Resource Kit 5.2, when I execute "java DSRK", afterwards something like this : com.iplanet.install.until.wbResource::gerstring:resource bundle"locale.resources.S1DSRKResource" not found appeared in the window ,that's why?
Meanwhile ,can you give some data about it on how to use it ?
Thank you !

You should be aware of the following characteristics of your directory when using this tool:
Size and number of entries.
Directory structure and access permissions.
Virtual attributes, class of service, and indexing.
Usage, types of access, and access patterns.
Post your error messages completely.
Thanks
--Britto

Install Sun ONE Directory Server 5,2 & how to use it for authenticate user

Good afternoon, Excuse, are newbie in the scope I am learning and putting desire to him, this in my situation I am trying to install Sun ONE Directory Server 5,2 since I understand that this it is application LDAP for Solaris, ok I want to install it to authenticate user against the system, that is to say, to be able to acces the server entering with a created user from the data base of LDAP and make think user that his created in the system. But the documentation that I finds indicates the installation of Sun ONE Directory Server 5,2 but it not clearly about how to use it for authentication. Some one have any manual step by step of Sun ONE Directory Server 5,2 installation and how to make it for authentication systems users.
I read the forum seeking for anwser and i get confuse
Thanks for the help and sorry for any inconvenient
Message was edited by:
Aku_28
Message was edited by:
Aku_28

I think that I found the Sun endorsed book locations for using LDAP accounts that don't use authentication besides "crypt". I now can use an account with a "ssha" password. It can be more than 8 characters long.
Chapter 14 System Administration Guide: Naming and Directory Services
Read page 201 which is the pam.conf file pam_ldap setups. I edited my "/etc/pam.conf" file to reflect this
Chapter 7 Directory Server 5.2 2005Q4 - Administration Guide
Read page 316-318 which has a graphical technique to specify password syntax. I set it up and then tried the password by running "su - brahms". It now requires a longer password than 8 characters and it is set up to use "ssha" for that UID entry "brahms".

Migrating data from Sun ONE directory server into openLDAP

Hi,
I was to migrate the data from Sun ONE directory server into openldap. Has anybody done this or know about this. Can you please share the steps that needs to be done.
NOTE: I have exported the data into LDIF file but when I run with ldapadd into the open ldap
ldap_add: Invalid syntax (21)
additional info: objectClass: value #1 invalid per syntax
Are there specific schemas that i need. Where can I find them?
Thanks

Why would you want to migrate data into an OpenLDAP server ?Good Question, let me explain you my problem with Sun DS.
No Question DS is the better product (even Red Hat realized this).
Problem: DS is not a base Solaris 10 OS component, for patch support
you need some additional plan, now sun marketing nightmare comes ;o)
Every year service plans are changed (want a SJES or a DS or a DSEE ?)
so use solaris with OpenLDAP, or linus with NSDS.
Sun please give us a Solaris Core Component called LDAP Server (no need for trillions of entries).
joe

Problems while installing Sun ONE Directory Server.

Hi all,
I'm a newbie to LDAP amd my problem is -
When I started Installing SunONE DS on machine first time, at the end of the installation, it thrown an error message.
"The program cant start because nss3.dll is missing from your computer. Try reinstalling the program to fix this problem."
Later, I copied nss3.dll file to "C:\Windows\System32" and then started the installation then it thrown error again as follows -
"Configuration of the Directory Server failed.
Error Directory Server configuration failure
Checking connection to the Configuration Directory Server... failed.
The Administration Server cannot be configured.
Error Administration Server configuration failure
Error Configuration of the server(s) failed.
Click Next to continue. "
What is the reason behind this?

Bingo, It worked. Yup, I'm using SODS 5.2, I have copied all .dll files from nsbasesystem.zip to "C:\Windows\System32".
but now the problem is -
Sun One Directory server service is running
but
Sun ONE Administration server process is not running
I have tried to start it manually but it didn't worked. It initiates the starting of process and then suddenly shows error message that
"The Sun ONE Administration server 5.2 service on local Computer started and then stopped. Some services stop automatically if they are not in use by other services or programs."

Error installing Sun ONE Directory Server 5.2 under Windows 2000 SP3

Hi,
When I attempt to install the Sun ONE Directory Server 5.2 under Windows 2000 Server SP3, I get the following errors:
Installing Sun ONE Server Basic System Libraries
Installed:C:\WINNT\system32\icudt2.dll
Installed:C:\WINNT\system32\icuin2.dll
Installed:C:\WINNT\system32\icuuc2.dll
Installed:C:\WINNT\system32\libadminutil52.dll
Installed:C:\WINNT\system32\libadmsslutil52.dll
Uninstalling C:\WINNT\System32\icudt2.dll
Uninstalling C:\WINNT\System32\icuin2.dll
Uninstalling C:\WINNT\System32\icuuc2.dll
Uninstalling C:\WINNT\System32\libadminutil52.dll
Uninstalling C:\WINNT\System32\libadmsslutil52.dll
Uninstalling C:\WINNT\System32\libnspr4.dll
Uninstalling C:\WINNT\System32\libplc4.dll
Uninstalling C:\WINNT\System32\libplds4.dll
Uninstalling C:\WINNT\System32\nsldap32v50.dll
Uninstalling C:\WINNT\System32\nsldappr32v50.dll
Uninstalling C:\WINNT\System32\nsldapssl32v50.dll
Uninstalling C:\WINNT\System32\nss3.dll
Uninstalling C:\WINNT\System32\sasl32.dll
Uninstalling C:\WINNT\System32\smime3.dll
Uninstalling C:\WINNT\System32\ssl3.dll
Product Install Failed: java.io.FileNotFoundException: C:\WINNT\System32\libnspr4.dll (Access is denied)
I've checked, and this file does not pre-exist under WINNT\System32.
Any ideas why I'm getting this error? Is this a bug in the installer?
Cheers,
Scott

IIRC this file, sasl32.dll, should get installed onto %WINDIR%\system32 when you install DS5.2 windows version.
You may run WinZIP and File/Open "d52diu.zip" (DS5.2 zip image) and look for "nsbasesys.zip", double click to Open it and you should find "sasl32.dll" there.
Gary

Sun ONE Directory Server 5.1 SP1 crash

A bug not present in the 5.1 without SP, only in SP1.
Scenario:
- Solaris 8 or Solaris 9.
- Sun ONE Directory Server 5.1 SP1.
- Changelog enabled with maximun age of 1 day.
- Retro Changelog Plugin active (needed for the metadirectory access of cn=changelog).
The LDAP crashes when:
- You search for a changeNumber <= in cn=changelog and that search does not return any entry.
Something like this will crash de LDAP server:
ldapsearch -D "cn=Directory Manager" -w <passwd> -b cn=changelog "(changeNumber<=0)"
Does anyone have experienced this?
Any idea?

No. You can try it.
One with changeNumber, only with <= searches, only when the search does not return anything, and only when there has been, at least, a change in the database (that produced a changelog that it is not included in the search).
I can�t belive nobody has experienced that.
Do you think that all metadirectories use that kind of searches?. We use Critical Path.

Active Directory 2003 and Sun One Directory Server 5.2

I just installed Sun One Directory Server 5.2 on a Linux machine. I want to configure LDAP on that machine so that it can be authenticated on Active Directory 2003. How do I go about doing this?

Active Directory server is a "directory server" (and kerberos server.) If your linux client authenticates against Active Directory it doesn't have to involve the Sun Directory Server at all. You have several general approaches you could investigate:
1. Linux client gets accounts and and authentication via LDAP from Active Directory
If you use AD to handle unix LDAP authentication (opt 1) you may need to extend schema in AD to add the unix password field. I haven't tried it yet, but hope to.
2. Linux client gets accounts from AD LDAP and authorization from AD Kerberos.
There should be docs on support.microsoft.com on enabling kerberos support for non-Win clients.
3. Linux client (with samba client installed, with winbind or pam_smb to support unix level services) gets accounts and authentication as a "Windows" client from Active directory "Windows server"
Check the samba.org docn or forums- I think this is a pretty common solution.
4. Linux client gets account information from Sun Directory server but uses kerberos (against active directory) for authentication.
There should be docs on support.microsoft.com on enabling kerberos support for non-Win clients.
5 Linux client gets account and authorization from Sun Directory server, which the sun Directory server configured to use Active Directory as a Kerberos server.
Probably incredibly complex.

Adding new admins to Sun one Directory Server 5.2

Similar Messages

Maybe you are looking for