Solved

Running Netscape LDAP Server on a Separate Machine

Posted on 2003-11-11
6
382 Views
Last Modified: 2013-12-27
I have been tasked to separate the various Netscape servers onto separate Sun machines.  Presently the Messaging (for the mail server), Enterprise (for the web server), and the Directory (for the LDAP server) are all running on the same box.  The Web server needs LDAP for the ACLs.  For mail, all mail is routed through a "relay" machine listed in the SMTP Routing Table.  Relay is set to "search by user ID" and "search using truncated domain (drop host part if local)."  I think that themail relay process uses LDAP for the "search by user ID" part.  It must be using DNS for resolving the destination server address?

This question is about moving LDAP, the Directory Server.  

We have many sites, but each has its own LDAP server.  A replication agreement keeps the user entries synchronized.  The reference is to ldap.domain.myproj.org, so for the satallite sites a simple DNS change that will make the transition to a new "Master" LDAP server.  Then the replication agreements will have to be added.  

But moving LDAP to a separate machine and turning off the LDAP process on the web/mail machine I need help with.  There is a "Referral Mode" that is used to redirect client applications to another Directory Server while the current server is unavailable: http://enterprise.netscape.com/docs/directory/61/ag/intro.htm
This will do the job but it is intended for a temporary solution and the original LDAP is still running...

Has anyone built an Netscape Server system on mulitple platforms?  How can it be done?
0
Comment
Question by:huffmana
  • 4
  • 2
6 Comments
 
LVL 38

Assisted Solution

by:yuzh
yuzh earned 500 total points
ID: 9727724
To minimize the impact of the server change on you whole network. I think it is a lot
easy to setup the Web/Mail server to a different box and make the new box as a
LDAP client. (the httpd.conf, sendmail.cf.... and the webpages, mailbox, aliases you
can easyly copy accross).

Then you change the DNS record to make the new box  as the webserver/mail server,
disable the web/mail service from the LDAP master server, and your don't have to
worry about the other clients.

0
 

Author Comment

by:huffmana
ID: 9729544
I take it that the Netscape Web/LDAP servers are designed to run on the same machine, and the same with the Mail/LDAP servers.  Is this true?  

I guess that is accomplishes the same purpose of separating the servers into specific entities (i.e., Web server machine, LDAP server machine, and Mail server machine). At least one server failure doesn't bring down the entire Web/Mail/LDAP system.

I would like to follow your recommendation and leave the LDAP in place but it is presently running on the only good Sun server that we have (Enterprise 450). Web is going to an Ultra 10 and LDAP is going to a Sun Blade 150 :-( Mail will be staying on the Enterprise 450.  
0
 
LVL 38

Assisted Solution

by:yuzh
yuzh earned 500 total points
ID: 9729855
If you want to use the Sun Blade 150 for LDAP, the Sun Blade should use the same hostname and IP as the original name of Enterprise 450, and  the Enterprise 450 had to change to use
a new name and IP, to have a seperate Web/mail server is a good idea (when you have enough
boxes!).

There is a trick in here, you need to build the Sun Blade 150 first (test it and then put it back
to the network after your shultdown the E450).  

Do you have any application software license which is depand on the hostid? if you need to
move the software to a different box, you need to contact the software vendor, to get a new
license, otherwise the app will not work.
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 38

Accepted Solution

by:
yuzh earned 500 total points
ID: 9729993
You might want to "move" the E450 to the Sun Blade 150, have a look at the following
page about how: (I wrote the procedure long time ago, and it works for me):

http://www.experts-exchange.com/Operating_Systems/Solaris/Q_20537122.html

After the "move", you can then get rid of all the unwanted services/software etc, and patch it,
test, before put it alive.

0
 

Author Comment

by:huffmana
ID: 10217788
Turns out that the attribute copiedFrom is all that distinguishes a master slapd from a slave server.  If a ns-slapd ldif2db -f slapd.conf -i an_archived_ldif_file is run with the copiedFrom attribure in the ldif file it makes a slave server.  vi the ldif file and delete the copiedFrom line then run the ns-slapd command and it makes a master ldap server.  There are configuration switches that have to be set for address completion and stuff like that.
0
 
LVL 38

Expert Comment

by:yuzh
ID: 10218417
Good to heard that you  completed the job, cheers!

yuzh
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

Let's say you need to move the data of a file system from one partition to another. This generally involves dismounting the file system, backing it up to tapes, and restoring it to a new partition. You may also copy the file system from one place to…
I have been running these systems for a few years now and I am just very happy with them.   I just wanted to share the manual that I have created for upgrades and other things.  Oooh yes! FreeBSD makes me happy (as a server), no maintenance and I al…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now