<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 04/07/2013 05:44 AM, Simon Williams wrote:
<blockquote
cite="mid:CAJWeEdS0RtQQFyEeR0Ce5RhVxeq72VJ=HtKQ-LaQJpxJqQmj9w@mail.gmail.com"
type="cite">
<p dir="ltr">Hi</p>
<p dir="ltr">I ran a yum update on my CentOS 6 server that runs
FreeIPA a couple of days ago and it upgraded FreeIPA to version
3. I use a couple of web applications that cannot use Kerberos,
but can use LDAP to authenticate. These stopped working. When I
investigated the issue, I discovered that the LDAP server wasn't
there any more. Google searches have proved fruitless and I
can't find any documentation for v3. Can anyone tell me how to
get my LDAP server back?</p>
<p dir="ltr">Regards</p>
<p dir="ltr">Simon</p>
<br>
</blockquote>
<br>
Hello Simon,<br>
<br>
Can you please clarify:<br>
Did you have an earlier version of the apps that used IPA via LDAP
or you had a different LDAP instance and FreeIPA now took over the
whole machine and you do not have access to those instances?<br>
I assume you had 389 DS, right? Or OpenLDAP?<br>
<br>
What is the general goal? Do you want to have the apps be able to
access IPA data via LDAP or you want to be able to use different
LDAP databases on the same machine?<br>
<br>
If the apps you mention used to work against IPA and now they do not
I would suggest checking the logs from those applications to see
what is failing. It might be that they have been using an insecure
way to authenticate and the upgraded bits enforce a higher security
standard. If this is the case you either need to lower the
authentication requirements on the server (not recommended) or
provide a more secure way to authenticate from those apps
(recommended).<br>
<br>
<br>
<blockquote
cite="mid:CAJWeEdS0RtQQFyEeR0Ce5RhVxeq72VJ=HtKQ-LaQJpxJqQmj9w@mail.gmail.com"
type="cite">
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>