[Fedora-directory-users] Migrating OpenLDAP with Samba to FDS

[Craig White]

On Tue, 2005-12-13 at 12:32 -0500, Marcus White wrote:
> On Tue, 2005-12-13 at 08:45 -0700, Craig White wrote:
> > On Tue, 2005-12-13 at 09:33 -0500, Marcus O. White wrote:
> > > G'day All,
> > > 
> > > Has anyone used the OpenLDAP to FDS migration script to migrate OpenLDAP
> > > with the Samba schema already included into FDS? If so, did you have to
> > > get the Samba schema installed first in FDS?
> > ----
> > presuming that you are talking about...
> > http://directory.fedora.redhat.com/wiki/Howto:Samba
> > 
> > and specifically the ol-schema.migrate.pl script 
> > 
> > then, yes, that was enough to load the samba.schema supplied with samba.
> > In fact, I used it to convert some other schema's that I use (authzldap
> > and rfc2739.schema for Horde/IMP).
> > 
> > I also noted that the one entry in my case...
> > 
> > dn: sambaDomainName=AZAPPLE,dc=azapple,dc=com
> > objectClass: sambaDomain
> > sambaDomainName: AZAPPLE
> > sambaSID: S-1-5-21-XXXXX etc.
> > sambaAlgorithmicRidBase: 1000
> > 
> > didn't migrate but undoubtedly would have migrated if I had manually
> > added...
> > 
> > objectClass: top
> > objectClass: organizationalUnit
> > 
> > to this dn
> > 
> > Craig
> > 
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users at redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> 
> Yes that is the script and thanks for the info... Are you using the
> multiple master feature? If so, how has the worked out? We have OpenLDAP
> configured with a single master and multiple slave servers. Being able
> to use the multiple master configuration would probably be the only
> reason to switch...
----
I think that you can have multi-master with openldap now too.

I don't use it and don't have customers which would demand it.

I find that if I have to go through the pain of installing one or the
other on a RHEL 4 or clone system, fedora directory server would seem to
be easier to install initially and upgrade. I think the password policy
is more mature on fedora directory server (though I haven't used it and
I do intend to get around to playing with it).

Craig