summaryrefslogtreecommitdiffstats
path: root/ldap/admin
Commit message (Collapse)AuthorAgeFilesLines
...
* Resolves: #239337Noriko Hosoi2007-05-082-106/+92
| | | | | | | Summary: Change the name and location of template-cl-dump.pl and template-repl-monitor.pl Description: 1) Removed "template-" from the script name 2) added shell script wrappers cl-dump and repl-monitor 3) moved them to bindir
* Resolves: #237356Noriko Hosoi2007-04-2711-1936/+0
| | | | | Summary: Move DS Admin Code into Admin Server (Comment #2) Description: Cleaning up unused code
* Resolves: 236612Nathan Kinder2007-04-261-47/+47
| | | | Summary: Modified the with-fhs and with-fhs-opt configure options
* Resolves: 236612Nathan Kinder2007-04-241-0/+62
| | | | Summary: Added a configure option for FHS optional software layout style.
* Resolves: #237040Noriko Hosoi2007-04-194-649/+0
| | | | Summary: Remove obsolete makefiles
* Resolves: 235143Nathan Kinder2007-04-031-2/+2
| | | | Summary: Set correct default nsslapd-saslpath config setting on non-Linux platforms.
* Resolves: #233215Noriko Hosoi2007-03-301-2/+4
| | | | | Summary: verify-db.pl still assumes the db dir is always in the instance dir (Comment #8) Description: Introduced "DB-DIR" macro
* Resolves: 233027Noriko Hosoi2007-03-291-1/+3
| | | | | Summary: make db2bak.pl & db2ldif.pl user more user-friendly (Comment #10) Change: fixed 'db2ldif -s ""' fails with shift unavailable
* Resolves: #233027Noriko Hosoi2007-03-241-16/+18
| | | | | | Summary: make db2bak.pl & db2ldif.pl user more user-friendly (Comment #8) Fixed problem: the command line fails to generate an output file name when an empty suffix is passed like this: db2ldif -s ""
* Resolves: #233215Noriko Hosoi2007-03-211-127/+138
| | | | | | | | | | | | | | Summary: verify-db.pl still assumes the db dir is always in the instance dir Changes: 0) eliminated the "current directory" from the utility. Now, it can be run from any location. 1) updated to take a new option [-a <fullpath_to_db_dir> ] to allow specifying the db dir/changelog dir; by default the start point is "db_dir" (nsslapd-directory in cn=config,cn=ldbm database,cn=plugins,cn=config) 2) instead of assuming the db dir structure (e.g., db/<backend_instance>/<db_files>), now it checks all the db files found under the specified path. This allows to run the utility against the backup files, as well.
* Resolves: #233027Noriko Hosoi2007-03-204-26/+59
| | | | | | | | | | | | | | | Summary: make db2bak.pl & db2ldif.pl user more user-friendly (Comment #4) Changes: 1) Found db2bak, db2bak.pl, and db2ldif do not backup/export into the dir/file which do not start with the <server-id> string. It could cause the difficulty to find out which server instance does the backup/exported file belongs to. Also, to make them consistent with db2ldif.pl, added the "server id" string to the back up dir name/exported ldif file name. 2) db2ldif[.pl] takes -M option. With the -M option, the server adds backend name to the ldif file name. To reduce the redundancy, stopped adding the backend name if -M is set. 3) made the ldif file name db2ldif generates consistent with the one db2ldif.pl generates.
* Resolves: #233027Noriko Hosoi2007-03-192-3/+18
| | | | Summary: make db2bak.pl & db2ldif.pl user more user-friendly
* Resolves: 232746Noriko Hosoi2007-03-191-1/+1
| | | | Summary: template file for db2bak.pl fails due to variable/path mismatches
* The line to create db2bak.pl was missing...Noriko Hosoi2007-03-171-0/+3
|
* Resolves: bug 231905Rich Megginson2007-03-161-0/+676
| | | | | | | | | | | | | | Bug Description: migration: Migrate from 1.0.x to 1.1 Reviewed by: nhosoi (Thanks!) Fix Description: The basic strategy is 1) shutdown the old servers - databases should be quiescent 2) run the migration script - this will copy all of the files (under /opt/fedora-ds/slapd-* by default) to their new FHS style locations, and fix up any entries and attributes that are obsolete or have changed (e.g. values that refer to paths) 3) service fedora-ds start The migration script does not need to do anything to the database files - the new database code added by Noriko will handle the database upgrade automagically, but I'm leaving the database upgrade code in the script, commented out, in case we need it in the future. This also fixes an annoying problem with automake - it would build ds_newinst.pl from ds_newinst.pl.in in the source ldap/admin/src directory, and use that version. This is really a problem with multi platform builds, where you want to share the ldapserver source code among multiple platforms. With the fix, built/ldap/admin/src/ds_newinst.pl is generated from srcdir/ldap/admin/src/ds_newinst.pl.in, and srcdir/ldap/admin/src/ds_newinst.pl is not written. Platforms tested: FC6 Flag Day: no Doc impact: Yes - we need to document migration
* Resolves: 230673Noriko Hosoi2007-03-021-1/+2
| | | | | Summary: LDAPI: referral mode needs LDAPI socket? (Comment #3) Change: if ldapifilepath is not passed, LDAPI is disabled in the newly created instance.
* Resolves: bug 230498Rich Megginson2007-03-013-15/+88
| | | | | | | | | | | | | Bug Description: allow ds_newinst with ldapi and no serverport Reviewed by: nkinder, nhosoi (Thanks!) Fix Description: Two new fields have been added to the ds_newinst .inf files: ldapifilepath - the full path and file name of the server ldapi file start_server - if present and has a value of 0, this tells ds_newinst not to start the server - default is 1 The ds_newinst code has been changed to allow an empty or "0" value servport if an ldapifilepath is given (and ENABLE_LDAPI is defined). Either a valid server port or an ldapifilepath must be provided, or both. In addition, I changed ds_newinst.pl to accept a .inf file given on stdin. Platforms tested: RHEL4, FC6 Flag Day: no Doc impact: We will have to document ldapi support on the wiki.
* Add LDAPIPete Rowley2007-02-271-0/+14
|
* Resolves: bug 229825Rich Megginson2007-02-231-12/+23
| | | | | | | | | Bug Description: aci with bogus uid= dn created by ds_newinst Reviewed by: nhosoi (Thanks!) Fix Description: Unknown to me until just now, PL_strdup(NULL) will return "" - the empty string. The code in config_suitespot() expects that empty or unused fields are NULL. The solution is to create a create_instance_strdup() wrapper around PL_strdup() and use that in cases where the argument may be NULL. I checked create_instance.c. Every other place where PL_strdup is used, the argument is checked for NULL first. So these are the only places affected. Instance creation works fine after this change and does not create the offending aci. Platforms tested: RHEL4 Flag Day: no Doc impact: no
* Need to terminate dna plugin config entry with a newlineRich Megginson2007-02-231-0/+1
|
* Resolves: bug 229691Rich Megginson2007-02-221-4/+19
| | | | | | | | | Bug Description: Add enable switches for optional/experimental features Reviewed by: nkinder, nhosoi, prowley (Thanks!) Fix Description: Added --enable-pam-passthru, --enable-dna, and --enable-ldapi. They are all on by default and must be explicitly disabled (--disable-pam-passthru). These all cause ENABLE_xxx to be defined for C code so that we can enclose the code in #ifdef ENABLE_PAM_PASSTHRU blocks, for example. For the first two, these also cause the plugins to be built - so that if you specify --disable-pam-passthru, the plugin code will not be built at all. I discovered a nifty autoconf macro called AS_HELP_STRING - this nicely formats the help messages output by configure --help. I don't know if it's worth going through all of our m4 code to use this, but I went ahead and fixed configure.ac. Create instance will now add plugin configuration entries (but disabled) for pam passthru and dna if the corresponding ENABLE_ macros are defined. I also fixed a bug with passthru (not pam passthru) - the plugin configuration entry was not being added. Platforms tested: RHEL4, FC6 Flag Day: no Doc impact: no
* Resolves: 229576Noriko Hosoi2007-02-2127-6062/+0
| | | | Summary: clean up template-scriptname which is derived from template-scriptname.in
* Resolves: bug 227771Rich Megginson2007-02-121-2/+5
| | | | | | | | | Bug Description: FHS: use sysconfdir (/etc) as config file location - allow builders to set dynamic config directory location at configure time Reviewed by: nhosoi, nkinder, prowley (Thanks!) Fix Description: I've added a new configure switch: --with-instconfigdir. This switch will allow the user to specify a different location to store the dynamic instance specific config files rather than the default $sysconfdir/$package_name (e.g. /etc/fedora-ds). This is the directory which will contain the slapd-instance directories which contain the instance specific config, schema, and security files. Even though the user could override this with ds_newinst.pl ([slapd] section config_dir), we needed to be able to set the default so that the user would not have to remember to do this every time, and so that packagers could set a reasonable default value for their platform. Platforms tested: FC6, RHEL4 Flag Day: no Doc impact: no
* Resolves: bug 160235Rich Megginson2007-02-093-35/+35
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug Description: Add support for /etc/init scripts Reviewed by: nkinder (Thanks!) Fix Description: Add the new initscript. The initscript is called $PACKAGE_NAME which by default is fedora-ds. This script is created from wrappers/initscript.in, sed'd by the fixupcmd in Makefile.am during make install. The way it works is this: service fedora-ds cmd will execute the cmd on all instances (found in /etc/fedora-ds by default). service fedora-ds cmd instance will execute cmd on only that instance. So if you have /etc/fedora-ds/slapd-foo /etc/fedora-ds/slapd-bar and you do service start fedora-ds it will start up both slapd-foo and slapd-bar. If you do service start fedora-ds bar it will start up only slapd-bar. If you do service start fedora-ds biff you will get an error message. The initdir is platform specific (e.g. /etc/rc.d/init.d on linux, /etc/init.d on Solaris) so the definition was added to the platform dependent section of configure.ac. The init script is explicitly branded, including the filename. I needed to add support to the autotool files so that we could change the name of the file. Since package_name is defined when you use the AC_INIT macro in configure.ac, we don't need to define it elsewhere (e.g. #define BRAND_DS). So I added the branding and other information to the autotool files, and changed create_instance to use package_name instead of brand_ds to be consistent. Having the package_name defined in much fewer places should make it much easier to change in the future if necessary. I also fixed a compiler warning in ldaprot.h. Platforms tested: RHEL4, FC6 Flag Day: no Doc impact: Yes. We need to document how to use the initscript, and how to enable startup on boot - chkconfig fedora-ds on
* Resolves: bug 227771Rich Megginson2007-02-081-4/+10
| | | | | | | | | | | Bug Description: FHS: use sysconfdir (/etc) as config file location Reviewed by: nhosoi (Thanks!) Fix Description: After much deliberation, we have decided that it is ok that our dynamic config files are under /etc/fedora-ds/slapd-instance. So the config_dir will be /etc/fedora-ds/slapd-instance and the security and schema files will go there as well. Since the FHS is ambiguous about this issue, and it will be very confusing if the configuration files are not under /etc, and there are some agents (webmin, cfengine) that do "dynamically" modify config files under /etc, this outweighs any considerations about having the server using it's config file like an "ascii database". In addition, the presence of repl-monitor-cgi causes rpm to complain, and since we only support CGIs in the Admin Server, this file has been removed from the core fedora-ds package. Platforms tested: RHEL4, FC6 Flag Day: no Doc impact: no
* esolves: bug 227618Rich Megginson2007-02-0727-82/+89
| | | | | | | | | | | | | | | | | | | Bug Description: FHS: move exes to _bindir; move ns-slapd to _sbindir Reviewed by: many people (Thanks!) Fix Description: In order to be more FHS compliant, we need to make the following changes: 1) move files executable by end users to _bindir (e.g. /usr/bin) - this means logconv.pl, ds_newinst, dbscan, etc. 2) move the server executable ns-slapd to _sbindir (e.g. /usr/sbin) And, to be more packaging friendly, the additional changes: 3) move libback-ldbm to the plugins dir - it is a plugin 4) use the libtool -avoid-version flag with plugins - we don't need the .so.0.0.0 for plugins I had to add support for sbindir and SBINDIR to create_instance and ds_newinst. We were using serverdir for 3 things - command line programs, server specific shared libs, and the server executable itself. These are now in 3 different places. The biggest change was to the scripts. I kept serverdir and SERVER-DIR to be the location of the server shared libs to avoid changing even more stuff. I had to add SERVERBIN-DIR to the scripts - this is the location of ns-slapd and is set by sbindir in create_instance (which defaults to SBINDIR from Makefile.am which defaults to $prefix/sbin in configure - whew). I've tested instance creation with these diffs - everything seems to work fine. 5) reorder files in alphabetical order - suggested by nkinder 6) add $LDFLAGS to test in db.m4 7) touch all template/wrapper .in files to make them newer than their corresponding files Platforms tested: RHEL4, FC6 Flag Day: no Doc impact: Yes, but the docs will have to change quite a bit for all of the FHS related changes.
* Resolves: 223861Noriko Hosoi2007-02-053-4/+4
| | | | | | | | | | Summary: Nightly build uses autotools/yum (Comment #32) Changes: Makefile: moved scripts temlate dir from /etc to /usr/share template-{start,stop}-slapd: modified the pid and startpid name to slapd-<id>.pid and slapd-<id>.startpid. Note: these changes do not affect the new build using autotools. The 3 files would be eliminated when we move to the new build completely. The fix is for keeping the nightly acceptance tests healthy by the transfer is completed.
* Resolves: bug 224606Rich Megginson2007-01-301-1/+1
| | | | | | Description: Instance specific dirs should be in instance directory Fix Description: Needed to reverse rundir and ds_get_server_name() when constructing the pidfile name. Reviewed by: nhosoi (Thanks!)
* Resolves: bug 224606Rich Megginson2007-01-264-100/+37
| | | | | | | | | | | | | | | Bug Description: Instance specific dirs should be in instance directory Reviewed by: nhosoi (Thanks!) Fix Description: Fixed create instance to create these instance specific directories: /var/lock/slapd-instance -> /var/lock/fedora-ds/slapd-instance /var/lib/slapd-instance -> /var/lib/fedora-ds/slapd-instance /var/log/slapd-instance -> /var/log/fedora-ds/slapd-instance /var/run/slapd-instance -> /var/run/fedora-ds For now, I'm side-stepping the question of what to do about permissions on /var/run/fedora-ds/slapd-instance.pid - we'll address this in the RPM creation. I've also moved the migration scripts to the %{_libdir}/fedora-ds/slapd-instance directory, and I've made the default directory for the key/cert db the same as the config directory. I think the dynamic nature of their configuration warrants the move. Platforms tested: RHEL4 Flag Day: no Doc impact: no
* Resolves: bug 224291Rich Megginson2007-01-251-2/+2
| | | | | | | | | | | Bug Description: Move script-templates from sysconfdir to datadir Reviewed by: nkinder, dennis (Thanks!) Files: see diff Branch: HEAD Fix Description: Just change sysconfdir to datadir in both the Makefile.am (which controls where the files are put during installation) and in create_instance.c (which controls where instance creation looks for the templates to use them to create the real scripts). Platforms tested: RHEL4 Flag Day: no Doc impact: no
* Resolves: #202843Noriko Hosoi2006-12-121-0/+3
| | | | | Summary: referential integrity plugin does not stack with Class of Service appliance (Comment #14) Changes: Added the CoS plugin dependency to MMR.
* Resolves: #202843Noriko Hosoi2006-12-081-2/+2
| | | | | | | | Summary: referential integrity plugin does not stack with Class of Service appliance (Comment #11) Changes: 1) registered cos_post_op and roles_post_op as SLAPI_PLUGIN_INTERNAL_POST_op_FN functions. 2) changed the plugin type of CoS and Roles from "postoperation" to "object".
* Resolves: bug 217403Rich Megginson2006-11-271-5/+14
| | | | | | | | | Bug Description: Instance specific schema files should be owned by server uid Reviewed by: nkinder (Thanks!) Fix Description: Add a new function - ds_copy_group_files_using_mode_owner() - that allows you to set the file mode and owner when copying directories and files. Use that function when copying the schema files to the new instance directory. Platforms tested: RHEL4 Flag Day: no Doc impact: no
* Bug(s) fixed: 216758Rich Megginson2006-11-2115-30/+64
| | | | | | | | | Bug Description: Use @libdir@ instead of hardcoded /usr/lib in template-script.in files Reviewed by: nkinder (Thanks!) Fix Description: Just replace /usr/lib with @libdir@ in the script template .in files. Platforms tested: RHEL4 Flag Day: no Doc impact: no
* Resolves: bug 215669Rich Megginson2006-11-151-0/+22
| | | | | | | | | | | | | Bug Description: Define LIBDIR, BINDIR, etc. in Makefile Reviewed by: nkinder (Thanks!) Fix Description: The paths LIBDIR, BINDIR, et. al. are #define'd in create_instance.h to hard coded values. We should be able to set these values in configure and override the built in values. We can't simply set them via AC_DEFINE in configure.ac because we are using config.h and this would render the definition like this: #define BINDIR "${exec_prefix}/bin" instead of #define BINDIR "/usr/bin" So we instead define them in Makefile.am and add their definitions to AM_CPPFLAGS, and quote them properly to make sure the value includes the quotation marks when expanded in the C code. I tested this with both an rpmbuild and a regular developer type build. Platforms tested: RHEL4/FC5 Flag Day: no Doc impact: no
* Added -DIS_FHS; the old build only supports FHS.Noriko Hosoi2006-11-141-1/+1
|
* Resolves: #214533Noriko Hosoi2006-11-133-3/+287
| | | | | | | | | | Summary: configure needs to support --with-fhs (Comment #13) Changes: configure.ac: $prefix should have been @prefix@. $prefix is replaced with the value of --prefix, but not with AC_PREFIX_DEFAULT when --prefix is not given. create_instance.[ch]: depending upon the macro IS_FHS, change swich the LIBDIR, BINDIR, DATADIR, and DOCDIR. ds_newinst.pl.in: use @libdir@ to get the ds_newinst path.
* Resolves: #214533Noriko Hosoi2006-11-1046-0/+230
| | | | | | | | | | Summary: configure needs to support --with-fhs (Comment #6) Changes: Added the following include next to the end of the copyright block. + +#ifdef HAVE_CONFIG_H +# include <config.h> +#endif +
* Bug: 214733Rich Megginson2006-11-101-2/+1
| | | | | | | | Description: be able to pass in all configurable paths to ds_newinst Fix Description: There were a couple of other minor problems with ds_newinst.pl 1) Should only set cgi parameters for those items which have a value 2) Should not setenv NETSITE_ROOT - this overrides prefix settings 3) Should not set prefix here - it is set elsewhere
* Resolves: #214728Noriko Hosoi2006-11-103-3/+0
| | | | | Summary: Cleaning up obsolete macros in the build Changes: eliminated macro NSPR20 (Comment #9)
* Resolves: #214728Noriko Hosoi2006-11-101-2/+0
| | | | | Summary: Cleaning up obsolete macros in the build Changes: eliminated macro NET_SSL (Comment #5)
* Resolves: #214840Noriko Hosoi2006-11-091-16/+25
| | | | | | | | | | | | Summary: modify sasl_path to accept the string set in the inf file Changes: If sasl_path is set in [slapd] section in the inf file, it's put in dse.ldif like this: dn: cn=config [...] nsslapd-saslpath: /usr/local/lib If the inf file does not have the line, the default path <prefix>/usr/lib/<brand_ds>/sasl2 is put in dse.ldif on non-Linux platform.
* Bug: 214733Rich Megginson2006-11-091-0/+19
| | | | | | | | | | | | | | Description: be able to pass in all configurable paths to ds_newinst Reviewed by: nhosoi (Thanks!) Fix Description: Just add all of the paths that are set-able in create_instance.c to ds_newinst.pl. The paths will be parsed from the input .inf file e.g. config_dir= /path/to/config sysconfdir= /path/to/sysconf etc. in the [slapd] section. I also added sasl_path as suggested by Noriko: + $cgiargs{"sasl_path"} = $table{"slapd"}->{"sasl_path"}; Tested on: RHEL4
* Resolves: 214238Nathan Kinder2006-11-062-0/+7
| | | | Summary: Added new config parameter for setting the SASL plug-in path.
* Resolves: #210947Noriko Hosoi2006-11-0224-71/+70
| | | | | Summary: Processed: parameterizing the hardcoded paths (phase 3. installed binaries, change log, setup) Comment #29
* Resolves: #212098Noriko Hosoi2006-10-2713-0/+354
| | | | | | | | Summary: Use autoconf to generate task perl script templates Comment #10, #11, #14 Note: This is a generated file by autoconf. Checking this file in to support the old style build. When migrating to the autotoolized build is completed, this file is supposed to be removed from CVS.
* Resolves: #212098Noriko Hosoi2006-10-2616-603/+466
| | | | | Summary: Use autoconf to generate task perl script templates Comment #10, #11, #14
* Resolves: #212098Noriko Hosoi2006-10-2517-6/+5445
| | | | | | | | Summary: Use autoconf to generate task perl script templates Changes: 1) added template files to AC_CONFIG_FILES list 2) added db_bindir and ldapsdk_bindir to pass their tools path to the template files. The paths are hardcoded for now.
* Resolves: #210947Noriko Hosoi2006-10-2519-292/+198
| | | | | Summary: parameterizing the hardcoded paths (phase 3. installed binaries, change log, setup) Comment #23
* [208672] parameterizing the hardcoded paths (phase 2. db, log, lock, pid, ↵Noriko Hosoi2006-10-1316-514/+640
| | | | | | | | | | | | cert, and instance dir) 1) introduced these 3 new config attributes: nsslapd-lockdir, nsslapd-tmpdir, nsslapd-certdir, and eliminated: nsslapd-instancedir. 2) replaced the hardcoded paths with the corresponding attribute value in the server as well as in the create/remove instance codes. 3) moved snmp stats file to the nsslapd-tmpdir 4) moved the server instance dir to <prefix>/lib/<brand>-ds/slapd-<id>