-----Original Message-----
From: fedora-directory-users-bounces@redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
Megginson
Sent: Monday, July 14, 2008 9:01 AM
To: General discussion list for the Fedora Directory server project.
Subject: Re: [Fedora-directory-users] Getting closergetting apassword
policyexport
Mallory, Doug (TPUSA) wrote:
> Using this command it returns nothing
> ldapsearch -s dc=twi,dc=dom -b cn=config
>
You have to authenticate as a privileged user - try ldapsearch -x -D
"cn=directory manager" -w thepassword -s base -b "cn=config"
"objectclass=*"
> Doug
>
> -----Original Message-----
> From: fedora-directory-users-bounces@redhat.com
> [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
> Megginson
> Sent: Thursday, July 10, 2008 9:29 PM
> To: General discussion list for the Fedora Directory server project.
> Subject: Re: [Fedora-directory-users] Getting closer getting apassword
> policyexport
>
> Mallory, Doug (TPUSA) wrote:
>
>>> anyone know how I can get an export of the current password policy?
>>>
>>>
>> You had sent out a previous email with the list of attributes. The
>>
> list
>
>> from the current schema is correct - looks like the admin guide
>>
> doesn't
>
>> have the new ones. The others are documented here -
>> http://directory.fedoraproject.org/wiki/Password_Syntax
>>
>>
>>> Or
>>>
>>>
>> I can see the schema I just need to see what the current settings are
>>
> or
>
>> export them to a flat file and gan give the auditors. (ldif would
>>
> work)
>
>>
>>
> ldapsearch -s base -b cn=config
> then just grab those attributes from the LDIF output
>
>> Doug
>>
>> --
>> Fedora-directory-users mailing list
>> Fedora-directory-users@redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
07-14-2008, 02:22 PM
Rich Megginson
Getting closergetting apassword policyexport
Mallory, Doug (TPUSA) wrote:
This is what I have now and it does not like the syntax.
Ah, I see - when I say "-s base" I mean that literally, not "-s <your
base suffix>"
Doug Mallory, CISM, CISSP
Sr Network Security Engineer
Cell 859-420-5609
Office 859-514-4833
Fax 859-514-5833
-----Original Message-----
From: fedora-directory-users-bounces@redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
Megginson
Sent: Monday, July 14, 2008 9:01 AM
To: General discussion list for the Fedora Directory server project.
Subject: Re: [Fedora-directory-users] Getting closergetting apassword
policyexport
Mallory, Doug (TPUSA) wrote:
Using this command it returns nothing
ldapsearch -s dc=twi,dc=dom -b cn=config
You have to authenticate as a privileged user - try ldapsearch -x -D
"cn=directory manager" -w thepassword -s base -b "cn=config"
"objectclass=*"
Doug
-----Original Message-----
From: fedora-directory-users-bounces@redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
Megginson
Sent: Thursday, July 10, 2008 9:29 PM
To: General discussion list for the Fedora Directory server project.
Subject: Re: [Fedora-directory-users] Getting closer getting apassword
policyexport
Mallory, Doug (TPUSA) wrote:
anyone know how I can get an export of the current password policy?
You had sent out a previous email with the list of attributes. The
list
from the current schema is correct - looks like the admin guide
doesn't
have the new ones. The others are documented here -
http://directory.fedoraproject.org/wiki/Password_Syntax
Or
I can see the schema I just need to see what the current settings are
or
export them to a flat file and gan give the auditors. (ldif would
work)
ldapsearch -s base -b cn=config
then just grab those attributes from the LDIF output
Doug
--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users
07-14-2008, 02:25 PM
"Mallory, Doug (TPUSA)"
Getting closergetting apassword policyexport
That got hat I was looking for Thanks!
Doug Mallory
-----Original Message-----
From: fedora-directory-users-bounces@redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
Megginson
Sent: Monday, July 14, 2008 10:23 AM
To: General discussion list for the Fedora Directory server project.
Subject: Re: [Fedora-directory-users]Getting closergetting apassword
policyexport
Mallory, Doug (TPUSA) wrote:
> This is what I have now and it does not like the syntax.
>
> ldapsearch -x -D "cn=directory manager" -w LDSPASSWORD! -s
dc=twi,dc=dom
> -b cn=config "objectclass=*"
>
Ah, I see - when I say "-s base" I mean that literally, not "-s <your
base suffix>"
> Doug Mallory, CISM, CISSP
>
> Sr Network Security Engineer
>
> Cell 859-420-5609
>
> Office 859-514-4833
>
> Fax 859-514-5833
>
>
> -----Original Message-----
> From: fedora-directory-users-bounces@redhat.com
> [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
> Megginson
> Sent: Monday, July 14, 2008 9:01 AM
> To: General discussion list for the Fedora Directory server project.
> Subject: Re: [Fedora-directory-users] Getting closergetting apassword
> policyexport
>
> Mallory, Doug (TPUSA) wrote:
>
>> Using this command it returns nothing
>> ldapsearch -s dc=twi,dc=dom -b cn=config
>>
>>
> You have to authenticate as a privileged user - try ldapsearch -x -D
> "cn=directory manager" -w thepassword -s base -b "cn=config"
> "objectclass=*"
>
>> Doug
>>
>> -----Original Message-----
>> From: fedora-directory-users-bounces@redhat.com
>> [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Rich
>> Megginson
>> Sent: Thursday, July 10, 2008 9:29 PM
>> To: General discussion list for the Fedora Directory server project.
>> Subject: Re: [Fedora-directory-users] Getting closer getting
apassword
>> policyexport
>>
>> Mallory, Doug (TPUSA) wrote:
>>
>>
>>>> anyone know how I can get an export of the current password policy?
>>>>
>>>>
>>>>
>>> You had sent out a previous email with the list of attributes. The
>>>
>>>
>> list
>>
>>
>>> from the current schema is correct - looks like the admin guide
>>>
>>>
>> doesn't
>>
>>
>>> have the new ones. The others are documented here -
>>> http://directory.fedoraproject.org/wiki/Password_Syntax
>>>
>>>
>>>
>>>> Or
>>>>
>>>>
>>>>
>>> I can see the schema I just need to see what the current settings
are
>>>
>>>
>> or
>>
>>
>>> export them to a flat file and gan give the auditors. (ldif would
>>>
>>>
>> work)
>>
>>
>>>
>>>
>>>
>> ldapsearch -s base -b cn=config
>> then just grab those attributes from the LDIF output
>>
>>
>>> Doug
>>>
>>> --
>>> Fedora-directory-users mailing list
>>> Fedora-directory-users@redhat.com
>>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>>
>>>
>>>
>> --
>> Fedora-directory-users mailing list
>> Fedora-directory-users@redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>>
>>
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
--
Fedora-directory-users mailing list
Fedora-directory-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users