Solved

Running Netscape LDAP Server on a Separate Machine

Posted on 2003-11-11
6
401 Views
Last Modified: 2013-12-27
I have been tasked to separate the various Netscape servers onto separate Sun machines.  Presently the Messaging (for the mail server), Enterprise (for the web server), and the Directory (for the LDAP server) are all running on the same box.  The Web server needs LDAP for the ACLs.  For mail, all mail is routed through a "relay" machine listed in the SMTP Routing Table.  Relay is set to "search by user ID" and "search using truncated domain (drop host part if local)."  I think that themail relay process uses LDAP for the "search by user ID" part.  It must be using DNS for resolving the destination server address?

This question is about moving LDAP, the Directory Server.  

We have many sites, but each has its own LDAP server.  A replication agreement keeps the user entries synchronized.  The reference is to ldap.domain.myproj.org, so for the satallite sites a simple DNS change that will make the transition to a new "Master" LDAP server.  Then the replication agreements will have to be added.  

But moving LDAP to a separate machine and turning off the LDAP process on the web/mail machine I need help with.  There is a "Referral Mode" that is used to redirect client applications to another Directory Server while the current server is unavailable: http://enterprise.netscape.com/docs/directory/61/ag/intro.htm
This will do the job but it is intended for a temporary solution and the original LDAP is still running...

Has anyone built an Netscape Server system on mulitple platforms?  How can it be done?
0
Comment
Question by:huffmana
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 38

Assisted Solution

by:yuzh
yuzh earned 500 total points
ID: 9727724
To minimize the impact of the server change on you whole network. I think it is a lot
easy to setup the Web/Mail server to a different box and make the new box as a
LDAP client. (the httpd.conf, sendmail.cf.... and the webpages, mailbox, aliases you
can easyly copy accross).

Then you change the DNS record to make the new box  as the webserver/mail server,
disable the web/mail service from the LDAP master server, and your don't have to
worry about the other clients.

0
 

Author Comment

by:huffmana
ID: 9729544
I take it that the Netscape Web/LDAP servers are designed to run on the same machine, and the same with the Mail/LDAP servers.  Is this true?  

I guess that is accomplishes the same purpose of separating the servers into specific entities (i.e., Web server machine, LDAP server machine, and Mail server machine). At least one server failure doesn't bring down the entire Web/Mail/LDAP system.

I would like to follow your recommendation and leave the LDAP in place but it is presently running on the only good Sun server that we have (Enterprise 450). Web is going to an Ultra 10 and LDAP is going to a Sun Blade 150 :-( Mail will be staying on the Enterprise 450.  
0
 
LVL 38

Assisted Solution

by:yuzh
yuzh earned 500 total points
ID: 9729855
If you want to use the Sun Blade 150 for LDAP, the Sun Blade should use the same hostname and IP as the original name of Enterprise 450, and  the Enterprise 450 had to change to use
a new name and IP, to have a seperate Web/mail server is a good idea (when you have enough
boxes!).

There is a trick in here, you need to build the Sun Blade 150 first (test it and then put it back
to the network after your shultdown the E450).  

Do you have any application software license which is depand on the hostid? if you need to
move the software to a different box, you need to contact the software vendor, to get a new
license, otherwise the app will not work.
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 38

Accepted Solution

by:
yuzh earned 500 total points
ID: 9729993
You might want to "move" the E450 to the Sun Blade 150, have a look at the following
page about how: (I wrote the procedure long time ago, and it works for me):

http://www.experts-exchange.com/Operating_Systems/Solaris/Q_20537122.html

After the "move", you can then get rid of all the unwanted services/software etc, and patch it,
test, before put it alive.

0
 

Author Comment

by:huffmana
ID: 10217788
Turns out that the attribute copiedFrom is all that distinguishes a master slapd from a slave server.  If a ns-slapd ldif2db -f slapd.conf -i an_archived_ldif_file is run with the copiedFrom attribure in the ldif file it makes a slave server.  vi the ldif file and delete the copiedFrom line then run the ns-slapd command and it makes a master ldap server.  There are configuration switches that have to be set for address completion and stuff like that.
0
 
LVL 38

Expert Comment

by:yuzh
ID: 10218417
Good to heard that you  completed the job, cheers!

yuzh
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction Regular patching is part of a system administrator's tasks. However, many patches require that the system be in single-user mode before they can be installed. A cluster patch in particular can take quite a while to apply if the machine…
Why Shell Scripting? Shell scripting is a powerful method of accessing UNIX systems and it is very flexible. Shell scripts are required when we want to execute a sequence of commands in Unix flavored operating systems. “Shell” is the command line i…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.

631 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question