From 389 Directory Server
389 Windows Console 1.1.4.a1 - November 16, 2009
This is the alpha 1 (.a1) release. See Release_Procedure for information about release numbering. This release supports Windows Server 2008 in addition to 2003. 2000 is no longer supported (although it may work, we don't test it). We also have 64-bit packages in addition to the 32-bit packages.
This release uses the 389 branding. The program files folder will be named 389 Management Console.
- Download - Download
- Howto:WindowsSync - Howto:WindowsConsole
389 Windows Password Synchronization 1.1.3 - November 16, 2009
This release supports Windows Server 2008 in addition to 2003. 2000 is no longer supported (although it may work, we don't test it). We also have 64-bit packages in addition to the 32-bit packages.
This release uses the 389 branding. The program files folder will be named 389 Password Sync. If you are upgrading from Fedora PassSync, the upgrade will attempt to copy your db and log files from the Fedora folder to the new 389 folder. It will not remove the old Fedora folder. You can remove that manually after you have verified that the 389 PassSync is working correctly.
- Download - Download
- Howto:WindowsSync - Howto:WindowsSync
389 Directory Server 1.2.4 (testing release) - November 4, 2009
This has been released for testing. The packages are available from the testing repositories, not the official release repositories yet. We are seeking feedback. The new package available for testing is:
- 389-ds-base-1.2.4
Instructions for installing these from the testing repositories:
yum install --enablerepo=updates-testing 389-ds # Fedora new install yum upgrade --enablerepo=updates-testing 389-ds-base 389-admin 389-console # Fedora upgrade
or EL5
yum install --enablerepo=dirsrv-testing --enablerepo=idmcommon-testing 389-ds # new install yum upgrade --enablerepo=dirsrv-testing --enablerepo=idmcommon-testing 389-ds-base # upgrade
See Download for more information about setting up yum access.
Your Feedback is Important!
The best way to provide feedback is via the Fedora Update system. If you have an account, go here:
- https://admin.fedoraproject.org/updates/F10/FEDORA-2009-11023
- OR
- https://admin.fedoraproject.org/updates/F11/FEDORA-2009-10901
- scroll down to the bottom of the page, and click on the Add a comment >> link
- select one of the Works for me or Does not work radio buttons, add text, and click on the Add Comment button
If you are using a build on another platform, just send us an email to 389-users@redhat.com.
If you find a bug, or would like to see a new feature, you can enter it here - https://bugzilla.redhat.com/enter_bug.cgi?product=389
Notes
NOTE: If using the FC6 (EL5) packages, you must update your yum repo files - the URLs have changed. See Download for more information.
NOTE: Fedora versions below 10 are no longer supported (except for Fedora Core 6 - see below). If you are running Fedora 9 or earlier, you should upgrade.
NOTE: This release is branded as 389. All of the RPMs have been marked as obsoleting their Fedora DS counterparts. When upgrading via yum, you must use yum upgrade (not update) so that the obsoletes will be processed.
NOTE: The console now requires Java 1.6. This is available on most platforms via OpenJDK (IcedTea). If you are using some derivative of Enterprise Linux 5, and cannot find Java 1.6, Java 1.6 is available from Fedora EPEL. See the Download page for information about Enterprise Linux 5. Fedora 9 and later have Java 1.6 OpenJDK.
NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information. 1.2.3 fixed some bugs related to update - it will remove old Fedora servers from the console, and will preserve TLS/SSL configuration. For more information, see the 1.2.3 release notes below.
NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.
New features
- Support for Salted MD5 (SMD5) hashes. These are supported for migration purposes only. You should not use SMD5 for new passwords - use SSHA256
Bugs Fixed
This release contains a couple of bug fixes. The complete list of bugs fixed is found at the link below. Note that bugs marked as MODIFIED have been fixed but are still in testing.
- Tracking bug for 1.2.4 release - https://bugzilla.redhat.com/showdependencytree.cgi?id=531879&hide_resolved=0
Download, Install, Setup
The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.
389 Windows Password Synchronization 1.1.2 - November 3, 2009
This release supports Windows Server 2008 in addition to 2003. 2000 is no longer supported (although it may work, we don't test it). We also have 64-bit packages in addition to the 32-bit packages.
This release uses the 389 branding. The program files folder will be named 389 Password Sync. If you are upgrading from Fedora PassSync, the upgrade will attempt to copy your db and log files from the Fedora folder to the new 389 folder. It will not remove the old Fedora folder. You can remove that manually after you have verified that the 389 PassSync is working correctly.
- Download - Download
- Howto:WindowsSync - Howto:WindowsSync
389 Directory Server 1.2.3 (testing release) - October 7, 2009
This has been released for testing. The packages are available from the testing repositories, not the official release repositories yet. We are seeking feedback. The two new packages available for testing are:
- 389-ds-base-1.2.3
- 389-admin-1.1.9
Instructions for installing these from the testing repositories:
yum install --enablerepo=updates-testing 389-ds # Fedora new install yum upgrade --enablerepo=updates-testing 389-ds-base 389-admin 389-console # Fedora upgrade
or EL5
yum install --enablerepo=dirsrv-testing --enablerepo=idmcommon-testing 389-ds # new install yum upgrade --enablerepo=dirsrv-testing --enablerepo=idmcommon-testing 389-ds-base 389-admin 389-console # new install
See Download for more information about setting up yum access.
Notes
NOTE: If using the FC6 (EL5) packages, you must update your yum repo files - the URLs have changed. See Download for more information.
NOTE: Fedora versions below 10 are no longer supported (except for Fedora Core 6 - see below). If you are running Fedora 9 or earlier, you should upgrade.
NOTE: This release is branded as 389. All of the RPMs have been marked as obsoleting their Fedora DS counterparts. When upgrading via yum, you must use yum upgrade (not update) so that the obsoletes will be processed.
NOTE: The console now requires Java 1.6. This is available on most platforms via OpenJDK (IcedTea). If you are using some derivative of Enterprise Linux 5, and cannot find Java 1.6, Java 1.6 is available from Fedora EPEL. See the Download page for information about Enterprise Linux 5. Fedora 9 and later have Java 1.6 OpenJDK.
NOTE: If you are using the console, after installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information. 1.2.3 fixes some bugs related to update - it will remove old Fedora servers from the console, and will preserve TLS/SSL configuration. See the buglist below.
NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.
New features
- Ability to set resource limits (sizelimit, timelimit, look through limit) specifically for anonymous connections
- This is useful when you want to have different limits for regular users and anonymous users
- Set the attribute nsslapd-anonlimitsdn in cn=config to the DN of the entry that you want to use as the "template" entry. This is a dummy entry that you have to create. Then you set whatever resource limits you want to apply to anonymous to that dummy entry, and those limits will apply to anonymous users.
- Access based on the security strength of the connection
- There is a new ACI keyword - minssf - this allows you to set access control based on how secure the connection is
- There is a global server setting in cn=config - nsslapd-minssf - that allows you to reject operations based on how secure the connection is
- Ability to shut off anonymous access
- This adds a new config switch in cn=config - nsslapd-allow-anonymous-access - that allows one to restrict all anonymous access. When this is enabled, the connection dispatch code will only allow BIND operations through for an unauthenticated user. The BIND code will only allow the operation through if it's not an anonymous or unauthenticated BIND.
Bugs Fixed
This release contains several bug fixes. The complete list of bugs fixed is found at the link below. Note that bugs marked as MODIFIED have been fixed but are still in testing.
- Tracking bug for 1.2.3 release - https://bugzilla.redhat.com/showdependencytree.cgi?id=519216&hide_resolved=0
- 495073 RFE: In Place upgrade should handle configuration and schema changes
- 495522 Start script hardcodes file permissions mask to 077 (600), so the nsslapd-*log-mode configuration attributes don't work
- 501616 [RFE] Restrict access to secure sessions only (TLS and SSL)
- 501846 Running setup-ds-admin.pl -u on replica with ldaps chokes on CA cert
- 513308 empty principal name used when using server to server sasl for db chaining
- 516305 MODIFY/replace with empty values does not ignore missing or unknown attributes
- 518112 rhds 81 el53 64b ns-slapd seg fault error 4 - nspr -5956 (The device for storing the file is full.)
- 518279 logs created at startup can get wrong file mode
- 518514 Bitwise Plugin: Bitwise filter doesn't return except the first entry if its multi-valued
- 518673 entryusn: wrong lastusn value
- 519455 Should not attempt to pop SASL IO layer if not using SASL IO
- 520483 setup-ds-admin.pl: Can't call method "getErrorString" on an undefined value at /usr/lib64/dirsrv/perl/AdminUtil.pm line 405.
- 520493 Upgrade from fedora-ds-1.2.0 to 389-ds-1.2.2 breaks 389-console and the admin server
- 520921 Config schema not included in core schema
- 521523 RPM Dependencies for 389 console are incomplete
- 523476 389-ds-base/glibmm24: conflicting perl provides
- 525007 ldif2db replaces existing modify/create name and timestamps
- 525785 setup-ds-admin.pl should use correct default hostname + port
- 526141 allow empty groups
- 526319 SASL IO sometimes loops with "error: would block"
Download, Install, Setup
The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.
389 Directory Server 1.2.2 - August 26, 2009
Notes
NOTE: Fedora versions below 10 are no longer supported (except for Fedora Core 6 - see below). If you are running Fedora 9 or earlier, you should upgrade.
NOTE: This release is branded as 389. All of the RPMs have been marked as obsoleting their Fedora DS counterparts. When upgrading via yum, you must use yum upgrade (not update) so that the obsoletes will be processed.
NOTE: The console now requires Java 1.6. This is available on most platforms via OpenJDK (IcedTea). If you are using some derivative of Enterprise Linux 5, and cannot find Java 1.6, Java 1.6 is available from Fedora EPEL. See the Download page for information about Enterprise Linux 5. Fedora 9 and later have Java 1.6 OpenJDK.
NOTE: After installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information. There is a bug in setup - it will leave the old versions of the server in console - you can ignore the old versions.
NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.
New features
There are no new features in this release. This release fixes some critical bugs.
Bugs Fixed
This release contains several bug fixes. The complete list of bugs fixed is found at the link below. Note that bugs marked as MODIFIED have been fixed but are still in testing.
- https://bugzilla.redhat.com/showdependencytree.cgi?id=389_1.2.2&hide_resolved=0
- 487425 slapd crashes after changelog is moved
- 504651 Need to store additional attributes in Retro Changelog
- 509472 db2index (all) does not reindex all the db backends correctly
- 518418 Package rename shuts down server, results in unconfigured package
- 518520 pre hashed salted passwords do not work
- 518544 large entries cause server SASL responses to fail
- 519065 Fails to start if attrcrypt can't unwrap keys
Download, Install, Setup
The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.
389 Directory Server 1.2.1 - August 17, 2009
Notes
NOTE: Fedora versions below 10 are no longer supported (except for Fedora Core 6 - see below). If you are running Fedora 9 or earlier, you should upgrade.
NOTE: This is the first release that is branded as 389. All of the RPMs have been marked as obsoleting their Fedora DS counterparts. When upgrading via yum, you must use yum upgrade (not update) so that the obsoletes will be processed.
NOTE: The console now requires Java 1.6. This is available on most platforms via OpenJDK (IcedTea). If you are using some derivative of Enterprise Linux 5, and cannot find Java 1.6, Java 1.6 is available from Fedora EPEL. See the Download page for information about Enterprise Linux 5. Fedora 9 and later have Java 1.6 OpenJDK.
NOTE: After installing the updates, you must run setup-ds-admin.pl -u to refresh your console and admin server configuration with the new version information. There is a bug in setup - it will leave the old versions of the server in console - you can ignore the old versions.
NOTE: 389-console is the command to run the console. This replaces fedora-idm-console.
New features
There are several new features in this release. For more information, see New Features for 1.2.1
Bugs Fixed
This release contains several bug fixes. The complete list of bugs fixed is found at the link below. Note that bugs marked as MODIFIED have been fixed but are still in testing.
Download, Install, Setup
The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.
Fedora Directory Server 1.2.0 - April 3, 2009
Notes
NOTE: Fedora versions below 9 are no longer supported (except for Fedora Core 6 - see below). If you are running Fedora 8 or earlier, you should upgrade.
NOTE: The console now requires Java 1.6. This is available on most platforms via OpenJDK (IcedTea). If you are using some derivative of Enterprise Linux 5, and cannot find Java 1.6, Java 1.6 is available from Fedora EPEL. See the Download page for information about Enterprise Linux 5. Fedora 9 and later have Java 1.6 OpenJDK.
Bugs Fixed
This release contains over 200 bug fixes. The complete list of bugs fixed is found at the link below. Note that bugs marked as MODIFIED have been fixed but are still in testing.
New features
- Server to Server connection improvements (startTLS, SASL, Kerberos)
- 64-bit counters
- Ability to turn off anonymous BIND operations
- Access Control: dynamic group lookup
- The ACI groupdn/roledn keyword allows you to specify access based on membership
- With earlier releases, you had to specify the full DN of the group/role e.g.
groupdn="ldap:///cn=Administrators,dc=example,dc=com"
- You can now use a search specification
groupdn="ldap:///suffix??scope?(filter)"
- Example
(groupdn = "ldap:///ou=Groups, dc=example,dc=com??sub?(cn=*s_0)" or groupdn = "ldap:///ou=Groups,dc=example,dc=com??sub?(cn=*s_1)") and groupdn = "ldap:///ou=Groups, dc=example,dc=com??sub?(cn=*s_2)"
means the user must belong to the group ending with s_0 or s_1, and the group ending with s_2
- remove-ds.pl - remove a directory server instance
- remove-ds-admin.pl - wipe out everything (for use when you run setup-ds-admin.pl and get an error, and just want to start over from scratch)
- New Schema - now includes schema for autofs, samba, and many other apps
Download, Install, Setup
The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.
Fedora Directory Server 1.1.3 - September 25, 2008
This release fixes a bug in the Windows Sync code that was introduced with 1.1.2. If you are using Windows Sync or plan to use freeIPA, you should upgrade to 1.1.3.
See Fedora Directory Server 1.1.2 for additional information.
Bugs Fixed
- 457846 The Windows Sync API should have plug-in points
- A previous fix to this bug caused Windows Sync to fail under certain conditions. This bug was fixed in 1.1.3
Fedora Directory Server 1.1.2 - September 16, 2008
Notes
NOTE: If you had servers that did not show up console, or you want to update the information displayed for those servers in the console, run setup-ds-admin.pl with the new update option (-u or --update) - this will re-register all of your servers with the console. It is ok to run this even if your servers are already registered correctly and show up in the console - it will update the date and version information.
setup-ds-admin.pl -u
This will prompt for the Configuration Directory Server Admin password (i.e. the password for the admin user).
Bugs Fixed
This release contains many, many bug fixes, including some security problems and memory leaks The complete list of bugs fixed is found at the link below. Note that bugs marked as MODIFIED are considered fixed. Only bugs in the NEW or ASSIGNED state have not been fixed or resolved.
New features
- Dynamic schema file reload - you can change the schema in a running server now in two ways
- old method - add schema over LDAP
- new method - add schema files to the slapd-instance/schema directory and tell the server to reload them - see https://bugzilla.redhat.com/show_bug.cgi?id=436837 and https://bugzilla.redhat.com/show_bug.cgi?id=450753 for more details
- Get Effective Rights
- You can use the Get Effective Rights query to see what attributes a user would be allowed to edit or add to a new entry - see https://bugzilla.redhat.com/show_bug.cgi?id=437525 for more details
- other enhancements - https://bugzilla.redhat.com/show_bug.cgi?id=456296 and https://bugzilla.redhat.com/show_bug.cgi?id=456752
- Man pages for many of the command line utilities
- Windows Sync plug-in API - see the new include file winsync-plugin.h for details
- Indexing improvements - you can now index attributes to do fast searches for one character initial substring searches e.g. (uid=a*)
- MemberOf plugin improvements - MemberOf_Plugin
- DNA plugin improvements - DNA_Plugin
Download, Install, Setup
The Download page has information about how to get the binaries. The Install_Guide has information about installation and setup.
Fedora Directory Server 1.1.1 - June 6, 2008
This is primarily a bug fix update. New features:
- Improved slapi task interface - Slapi_Task_API
- Improved ldapi support, with support for SASL/EXTERNAL bind - LDAPI_and_AutoBind
- MemberOf plugin - MemberOf_Plugin
- Bugs Fixed
- 429793 - Fixed crash in replication during bulk import
- 182621 - Allow larger regex buffer to enable long substring filters
- 439829 - simple password auth fails using NSS 3.11.99 or later
- 428764 - memory leaks in extensible filter code
- 440333 - Fixed valrgind errors about use of unitialized values
- 428163 - SASL IO functions set/get: argument mismatch
- 429799 - Allow import fifo to clear out all finished entries
Fedora Directory Server 1.1.0 - January 4, 2008
WARNING: Following the instructions below will upgrade your 1.0 installation to 1.1. If you want to do this, run /usr/sbin/migrate-ds-admin.pl after installation. If you do not want to do this, use a clean machine or a VM to install Fedora DS 1.1.
Known Issues
- Migration to Fedora 8 and later requires LDIF files - binary database migration from an earlier release to Fedora 8 or later does not work. This is because Fedora 8 and later use Berkeley DB 4.6 and the binary database format used in earlier releases is not compatible. If you are upgrading or migrating to Fedora DS 1.1 on Fedora 8 or later, you must first export (db2ldif) your databases to LDIF format. See DS_Admin_Migration for more information.
What's new
- Auto UID and GID number generation with the libdna plugin - Distributed Numeric Assignment - that works even with multi-master replication environments - see http://cvs.fedora.redhat.com/viewcvs/ldapserver/ldap/servers/plugins/dna/?root=dirsec for more information
- Separate packages - each main component is in its own package - see Discrete_Packaging
- Filesystem Hierarchy Standard file/path layout (e.g. log files are under /var/log/dirsrv) - see FHS_Packaging
- Many of the components are now built into Fedora - see FDS_Into_FedoraCore
- The setup command is now /usr/sbin/setup-ds-admin.pl - see FDS_Setup for more information
- startconsole is gone - use /usr/bin/fedora-idm-console instead
- Migration from version 1.0 and earlier is fully supported by the /usr/sbin/migrate-ds-admin.pl script provided with the package - see FDS_Setup and Migration_From_10 for more information - see note above about migration to Fedora DS 1.1 on Fedora 8 and later.
- Binary packages are provided only for Fedora 6, 7, 8 and 9 - The Fedora 6 packages should run on Red Hat EL5.1 (not 5.0)
- Version 1.1 does not include the phonebook, gateway, or org chart web apps - those will be provided in a following release
- Init scripts!
service dirsrv {start|stop|restart} [instance name]
service dirsrv-admin {start|stop|restart}
edit /etc/sysconfig/dirsrv or /etc/sysconfig/dirsrv-admin to set environment
- Bug Fixes - This link lists all of the Fedora Directory Server bugs fixed since 1.0.4
- See the Red Hat Directory Server 8.0 documents for more information:
- Install Guide - http://www.redhat.com/docs/manuals/dir-server/install/8.0/index.html
- Admin Guide - http://www.redhat.com/docs/manuals/dir-server/ag/8.0/index.html
- Config, Command, and File Reference - http://www.redhat.com/docs/manuals/dir-server/cli/8.0/index.html
- Release Notes - http://www.redhat.com/docs/manuals/dir-server/release-notes/8.0/index.html
Installation
- Installation uses yum
- If you are already using fedora-ds-base from Fedora, you must first upgrade it
rpm -qi fedora-ds-base
If that returns an error, skip to the next bullet, otherwise
yum upgrade fedora-ds-base
- Set up your Fedora DS yum repo - as root
cd /etc/yum.repos.d wget http://directory.fedoraproject.org/sources/idmcommon.repo wget http://directory.fedoraproject.org/sources/dirsrv.repo
- Full install
yum install fedora-ds
This will install many dependencies too. NOTE: On Fedora 8, the IcedTea Java can run the console. On Fedora 7 and earlier, you will still need to install a proprietary JRE in order to run - see Install_Guide for information about how to install Java.
- First time users can use /usr/sbin/setup-ds-admin.pl to set up the new directory server and admin server
- Fedora DS 1.0.x users can use /usr/sbin/migrate-ds-admin.pl to migrate existing directory and admin server data
NOTE: If you are upgrading from 1.0, DO NOT USE setup-ds-admin.pl - use migrate-ds-admin.pl instead
- Console - the console command is /usr/bin/fedora-idm-console - startconsole has been removed
Console only Installation
Follow the above steps to set up the yum repositories, then just install the fedora-idm-console package:
yum install fedora-idm-console
Then use /usr/bin/fedora-idm-console
Base DS only Installation
Follow the above steps to set up the yum repositories, then just install the fedora-ds-base package:
yum install fedora-ds-base
- First time users can use /usr/sbin/setup-ds.pl to set up the new directory server
- If you already have a directory server installation, use /usr/sbin/migrate-ds.pl instead of setup-ds.pl
Windows Console for Fedora DS 1.1 - December 14, 2007
FedoraConsole.msi is a Windows Installer file for the Console for Fedora Directory Server 1.1. Go to Download to download the file.
- Tested with Sun Java 1.4 and 1.5 on Windows 2003 Server
- You will need to install Java 1.4 or 1.5. Java must be available in your PATH, or you can edit the batch file provided to set JAVA to the correct path to java.exe
- This might work with Fedora DS 1.0.4 but it has not been tested.
Fedora Directory Server 1.1 Beta - November 26, 2007
WARNING: Following the instructions below will upgrade your 1.0 installation to 1.1. If you want to do this, run /usr/sbin/migrate-ds-admin.pl after installation. If you do not want to do this, use a clean machine or a VM to install Fedora DS 1.1.
What's new?
- Auto UID and GID number generation with the libdna plugin - Distributed Numeric Assignment - that works even with multi-master replication environments - see http://cvs.fedora.redhat.com/viewcvs/ldapserver/ldap/servers/plugins/dna/?root=dirsec for more information
- Separate packages - each main component is in its own package - see Discrete_Packaging
- Filesystem Hierarchy Standard file/path layout (e.g. log files are under /var/log/dirsrv) - see FHS_Packaging
- Many of the components are now built into Fedora - see FDS_Into_FedoraCore
- The setup command is now /usr/sbin/setup-ds-admin.pl - see FDS_Setup for more information
- startconsole is gone - use /usr/bin/fedora-idm-console instead
- Migration from version 1.0 and earlier is fully supported by the /usr/sbin/migrate-ds-admin.pl script provided with the package - see FDS_Setup and Migration_From_10 for more information
- The beta only provides binary packages for Fedora 6, 7, 8 - The Fedora 6 packages should run on Red Hat EL5.1 (not 5.0)
- RHEL5 or CentOS 5 (or derivatives)
- Upgrade to 5.1 and install the packages svrcore, mozldap, and perl-Mozilla-LDAP
- You will also have to install the following packages from FC6 - jss, fedora-ds-base, and adminutil - for example, for 32-bit:
- GPG key for yum - http://mirrors.kernel.org/fedora/core/6/i386/os/RPM-GPG-KEY-fedora
- http://mirrors.kernel.org/fedora/extras/6/i386/adminutil-1.1.5-1.fc6.i386.rpm
- http://mirrors.kernel.org/fedora/extras/6/i386/jss-4.2.5-1.fc6.i386.rpm
- http://mirrors.kernel.org/fedora/extras/6/i386/fedora-ds-base-1.1.0-2.0.fc6.i386.rpm
- For 64-bit, just replace i386 above with x86_64
- RHEL5 or CentOS 5 (or derivatives)
- Version 1.1 does not include the phonebook, gateway, or org chart web apps - those will be provided in a following release
- Init scripts!
service dirsrv {start|stop|restart} [instance name]
service dirsrv-admin {start|stop|restart}
edit /etc/sysconfig/dirsrv or /etc/sysconfig/dirsrv-admin to set environment
- Many, many bug fixes
- See the Red Hat Directory Server 8.0 Beta documents for more information:
Installation
- Installation uses yum
- If you are already using fedora-ds-base from Fedora, you must first upgrade it
rpm -qi fedora-ds-base
If that returns an error, skip to the next bullet, otherwise
yum upgrade fedora-ds-base
- Set up your Fedora DS yum repo - as root
cd /etc/yum.repos.d wget http://directory.fedoraproject.org/sources/idmcommon.repo wget http://directory.fedoraproject.org/sources/dirsrv.repo
- Install
yum install fedora-ds
This will install many dependencies too. NOTE: On Fedora 8, the IcedTea Java can run the console. On Fedora 7 and earlier, you will still need to install a proprietary JRE in order to run - see Install_Guide for information about how to install Java.
- First time users can use /usr/sbin/setup-ds-admin.pl to set up the new directory server and admin server
- Fedora DS 1.0.x users can use /usr/sbin/migrate-ds-admin.pl to migrate existing directory and admin server data
NOTE: If you are upgrading from 1.0, DO NOT USE setup-ds-admin.pl - use migrate-ds-admin.pl instead
- Console - the console command is /usr/bin/fedora-idm-console - startconsole has been removed
Fedora Directory Server 1.0.4 - November 9, 2006
What's new?
- Bug fixes - follow this link to see the bugzilla report
- The main bug fixed is in setup - it would change file ownership and break the server
- Known issues
- You may get a Constraint Violation error during setup after doing an upgrade - disable password syntax checking before running setup, and re-enable it afterwards if you are using password syntax checking
- After doing an upgrade install (rpm -U), make sure the directory server and admin server are running:
- /opt/fedora-ds/slapd-instance/start-slapd
- /opt/fedora-ds/start-admin
- See also What's New with FDS 1.0.3 below
Installation
First, Download the binaries. Next, if you are upgrading from an earlier release, use rpm -Uvh to install, otherwise, use rpm -ivh. If upgrading, make sure your slapd and admin server are running:
cd /opt/fedora-ds ./slapd-yourhost/start-slapd ./start-admin
Next, if you are using password syntax checking, disable it before running setup:
ldapmodify -x -D "cn=directory manager" -w password dn: cn=config changetype: modify replace: passwordCheckSyntax passwordCheckSyntax: off
Finally, run setup as follows:
cd /opt/fedora-ds ; ./setup/setup
Then, if you are using password syntax checking, enable it again:
ldapmodify -x -D "cn=directory manager" -w password dn: cn=config changetype: modify replace: passwordCheckSyntax passwordCheckSyntax: on
Please refer to the Install_Guide for more information.
Fedora Directory Server 1.0.3 - 10/31/2006
What's new?
- Password modify extended operation can generate new passwords
- New versions of NSPR (4.6.3) NSS (3.11.3) Mozldap (6.0.0)
- These new components address bugs and memory leaks in earlier versions, and adds client support for SASL to the bundled ldap command line tools
- Uses system sasl and snmp instead of bundled versions
- The PAM passthru auth plug-in is included (disabled by default)
- Bug fixes - follow this link to see the bugzilla report
- Known issues
- After doing an upgrade install (rpm -U), make sure the directory server and admin server are running:
- /opt/fedora-ds/slapd-instance/start-slapd
- /opt/fedora-ds/start-admin
- Using password syntax checking to restrict passwords less than 9 characters in length doesn't work with new password generation
- After doing an upgrade install (rpm -U), make sure the directory server and admin server are running:
Installation
First, Download the binaries. Next, if you are upgrading from an earlier release, use rpm -Uvh to install, otherwise, use rpm -ivh. If upgrading, make sure your slapd and admin server are running:
cd /opt/fedora-ds ./slapd-yourhost/start-slapd ./start-admin
Finally, run setup as follows:
cd /opt/fedora-ds ; ./setup/setup
Please refer to the Install_Guide for more information.
Fedora Directory Server 1.0.2 - 03/02/2006
What's new?
- Extended Password Syntax checking - passwords can be checked to see if they conform to the following:
- minimum password character length (old feature, but now the default is 8 characters)
- minimum number of digit characters (0-9)
- minimum number of ASCII alpha characters (a-z, A-Z)
- minimum number of uppercase ASCII alpha characters (A-Z)
- minimum number of lowercase ASCII alpha characters (a-z)
- minimum number of special ASCII characters (!@#$, etc.)
- minimum number of 8-bit characters
- maximum number of times the same char can be immediately repeated (aaabbb)
- minimum number of character categories that are represented (categories are lower, upper, digit, special, and 8-bit)
- More information, including screen shots, can be found here.
- Support for Linux x86_64 - RPMs for Fedora Core 4 and 5 and RHEL4 x86_64 are on the Download page.
- Bug fixes - follow this link to see the bugzilla report
Installation
First, Download the binaries. Next, if you are upgrading from an earlier release, use rpm -Uvh to install, otherwise, use rpm -ivh. Finally, run setup as follows:
cd /opt/fedora-ds ; ./setup/setup
If upgrading, you may need to restart your slapd and/or admin server after running setup:
cd /opt/fedora-ds ./slapd-yourhost/start-slapd ./start-admin
Please refer to the Install_Guide for more information.
Fedora Directory Server 1.0.1 - 12/08/2005
This is a patch release to address the following problems:
- Fedora DS 1.0 was built with the build bomb ON - this means the binary will quit working after 120 days - 175053
- The Admin Server in Fedora DS 1.0 can allow unauthorized access to sensitive information - 174837
- The console required the mozilla-nspr and mozilla-nss packages. This dependency has been removed - 174981
- Other bugs: 174843 175187 175098
Installation
First, Download the binaries.
Upgrade from Fedora DS 1.0
If you are upgrading from Fedora DS 1.0, DO NOT RUN SETUP after doing the rpm -Uvh. Instead, just restart your directory servers, followed by restarting your admin server. e.g.
cd /opt/fedora-ds ./slapd-name/start-slapd ./slapd-name2/start-slapd ... ./slapd-nameN/start-slapd ./start-admin
First time Fedora DS Install
If you are installing the software for the first time, please refer to Install_Guide for more information.
