FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora Directory

 
 
LinkBack Thread Tools
 
Old 07-14-2008, 02:19 PM
"Mallory, Doug (TPUSA)"
 
Default Getting closergetting apassword policyexport

This is what I have now and it does not like the syntax.

ldapsearch -x -D "cn=directory manager" -w LDSPASSWORD! -s dc=twi,dc=dom
-b cn=config "objectclass=*"

Doug Mallory, CISM, CISSP

Sr Network Security Engineer

Cell 859-420-5609

Office 859-514-4833

Fax 859-514-5833


-----Original Message-----
From: fedora-directory-users-bounces@redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
Megginson
Sent: Monday, July 14, 2008 9:01 AM
To: General discussion list for the Fedora Directory server project.
Subject: Re: [Fedora-directory-users] Getting closergetting apassword
policyexport

Mallory, Doug (TPUSA) wrote:
> Using this command it returns nothing
> ldapsearch -s dc=twi,dc=dom -b cn=config
>
You have to authenticate as a privileged user - try ldapsearch -x -D
"cn=directory manager" -w thepassword -s base -b "cn=config"
"objectclass=*"
> Doug
>
> -----Original Message-----
> From: fedora-directory-users-bounces@redhat.com
> [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
> Megginson
> Sent: Thursday, July 10, 2008 9:29 PM
> To: General discussion list for the Fedora Directory server project.
> Subject: Re: [Fedora-directory-users] Getting closer getting apassword
> policyexport
>
> Mallory, Doug (TPUSA) wrote:
>
>>> anyone know how I can get an export of the current password policy?
>>>
>>>
>> You had sent out a previous email with the list of attributes. The
>>
> list
>
>> from the current schema is correct - looks like the admin guide
>>
> doesn't
>
>> have the new ones. The others are documented here -
>> http://directory.fedoraproject.org/wiki/Password_Syntax
>>
>>
>>> Or
>>>
>>>
>> I can see the schema I just need to see what the current settings are
>>
> or
>
>> export them to a flat file and gan give the auditors. (ldif would
>>
> work)
>
>>
>>
> ldapsearch -s base -b cn=config
> then just grab those attributes from the LDIF output
>
>> Doug
>>
>> --
>> Fedora-directory-users mailing list
>> Fedora-directory-users@redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>


--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
 
Old 07-14-2008, 02:22 PM
Rich Megginson
 
Default Getting closergetting apassword policyexport

Mallory, Doug (TPUSA) wrote:

This is what I have now and it does not like the syntax.

ldapsearch -x -D "cn=directory manager" -w LDSPASSWORD! -s dc=twi,dc=dom
-b cn=config "objectclass=*"

Ah, I see - when I say "-s base" I mean that literally, not "-s <your
base suffix>"

Doug Mallory, CISM, CISSP

Sr Network Security Engineer

Cell 859-420-5609

Office 859-514-4833

Fax 859-514-5833


-----Original Message-----
From: fedora-directory-users-bounces@redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
Megginson
Sent: Monday, July 14, 2008 9:01 AM
To: General discussion list for the Fedora Directory server project.
Subject: Re: [Fedora-directory-users] Getting closergetting apassword
policyexport

Mallory, Doug (TPUSA) wrote:


Using this command it returns nothing
ldapsearch -s dc=twi,dc=dom -b cn=config


You have to authenticate as a privileged user - try ldapsearch -x -D
"cn=directory manager" -w thepassword -s base -b "cn=config"

"objectclass=*"

Doug


-----Original Message-----
From: fedora-directory-users-bounces@redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
Megginson
Sent: Thursday, July 10, 2008 9:29 PM
To: General discussion list for the Fedora Directory server project.
Subject: Re: [Fedora-directory-users] Getting closer getting apassword
policyexport

Mallory, Doug (TPUSA) wrote:



anyone know how I can get an export of the current password policy?




You had sent out a previous email with the list of attributes. The



list



from the current schema is correct - looks like the admin guide


doesn't


have the new ones. The others are documented here -
http://directory.fedoraproject.org/wiki/Password_Syntax




Or




I can see the schema I just need to see what the current settings are



or



export them to a flat file and gan give the auditors. (ldif would



work)






ldapsearch -s base -b cn=config
then just grab those attributes from the LDIF output



Doug

--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users




--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users





--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users



--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
 
Old 07-14-2008, 02:25 PM
"Mallory, Doug (TPUSA)"
 
Default Getting closergetting apassword policyexport

That got hat I was looking for Thanks!

Doug Mallory


-----Original Message-----
From: fedora-directory-users-bounces@redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
Megginson
Sent: Monday, July 14, 2008 10:23 AM
To: General discussion list for the Fedora Directory server project.
Subject: Re: [Fedora-directory-users]Getting closergetting apassword
policyexport

Mallory, Doug (TPUSA) wrote:
> This is what I have now and it does not like the syntax.
>
> ldapsearch -x -D "cn=directory manager" -w LDSPASSWORD! -s
dc=twi,dc=dom
> -b cn=config "objectclass=*"
>
Ah, I see - when I say "-s base" I mean that literally, not "-s <your
base suffix>"
> Doug Mallory, CISM, CISSP
>
> Sr Network Security Engineer
>
> Cell 859-420-5609
>
> Office 859-514-4833
>
> Fax 859-514-5833
>
>
> -----Original Message-----
> From: fedora-directory-users-bounces@redhat.com
> [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
> Megginson
> Sent: Monday, July 14, 2008 9:01 AM
> To: General discussion list for the Fedora Directory server project.
> Subject: Re: [Fedora-directory-users] Getting closergetting apassword
> policyexport
>
> Mallory, Doug (TPUSA) wrote:
>
>> Using this command it returns nothing
>> ldapsearch -s dc=twi,dc=dom -b cn=config
>>
>>
> You have to authenticate as a privileged user - try ldapsearch -x -D
> "cn=directory manager" -w thepassword -s base -b "cn=config"
> "objectclass=*"
>
>> Doug
>>
>> -----Original Message-----
>> From: fedora-directory-users-bounces@redhat.com
>> [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
>> Megginson
>> Sent: Thursday, July 10, 2008 9:29 PM
>> To: General discussion list for the Fedora Directory server project.
>> Subject: Re: [Fedora-directory-users] Getting closer getting
apassword
>> policyexport
>>
>> Mallory, Doug (TPUSA) wrote:
>>
>>
>>>> anyone know how I can get an export of the current password policy?
>>>>
>>>>
>>>>
>>> You had sent out a previous email with the list of attributes. The
>>>
>>>
>> list
>>
>>
>>> from the current schema is correct - looks like the admin guide
>>>
>>>
>> doesn't
>>
>>
>>> have the new ones. The others are documented here -
>>> http://directory.fedoraproject.org/wiki/Password_Syntax
>>>
>>>
>>>
>>>> Or
>>>>
>>>>
>>>>
>>> I can see the schema I just need to see what the current settings
are
>>>
>>>
>> or
>>
>>
>>> export them to a flat file and gan give the auditors. (ldif would
>>>
>>>
>> work)
>>
>>
>>>
>>>
>>>
>> ldapsearch -s base -b cn=config
>> then just grab those attributes from the LDIF output
>>
>>
>>> Doug
>>>
>>> --
>>> Fedora-directory-users mailing list
>>> Fedora-directory-users@redhat.com
>>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>>
>>>
>>>
>> --
>> Fedora-directory-users mailing list
>> Fedora-directory-users@redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>


--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
 

Thread Tools




All times are GMT. The time now is 07:17 PM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org