Configure module: users

[cholt45]

Also having problems on lynx server. Instaled eBox from the repositories and when enabling the Users and Groups module the same error apears. Hope you are fixing this.

[J. A. Calvo]

Of course we are going to fix it, but please note that 1.5 is a development branch (unstable). Only for testing purposes (i.e. for helping us testing it), if you want to use something stable I recommned you to stick to 1.4.

Anyway, there will be new 1.5 packages available probably at the end of the week or the beggining of the next one.

Thanks for your interest in 1.5 and best regards.

[bandeeri]

Can we install the 1.4 version on a Lucid server?

[fbc]

Can we get a clear and concise fix to the problem?

something lke:
1. first run a:  /usr/share/ebox-usersandgroups/ebox-usersandgroups-reinstall
2. then run: sudo nano /usr/share/ebox/stubs/usersandgroups/slapd-master.ldif.mas and remove

Code: [Select]

# Allow querying the root DSE
dn: olcDatabase={-1}frontend,cn=config
changetype: modify
add: olcAccess
olcAccess: to dn.base="" by * read
olcAccess: to dn.base="cn=subschema" by * read

dn: cn=config
changetype: modify
add: olcTLSCACertificateFile
olcTLSCACertificateFile: /etc/ldap/ssl/ssl.cert
-
add: olcTLSCertificateFile
olcTLSCertificateFile: /etc/ldap/ssl/ssl.cert
-
add: olcTLSCertificateKeyFile
olcTLSCertificateKeyFile: /etc/ldap/ssl/ssl.key
3. open the ebox control panel in your browser and try to install the users and groups module.

something like this becuase, following the posts is a bit confusing

[ibmSysX]

It is very unfortunate that Ubuntu 10.04 is shipped with a broken eBox package. Maybe it is not eBox's fault but they are the ones that can fix it.

I have the same problem, and it cannot be fixed with any of the methods (and combined) posted here. At least, on amd64 version.

Another bug (maybe already known) is that when changing the default https port (e.g. in 8443) the standard 443 is used.

[clx81]

I have the same problem with a fresh Ubuntu Server 10.04 final version installed and ebox 1.5

The file  /usr/share/ebox/stubs/usersandgroups/slapd-master.ldif.mas has been modified as described but the error is still present.

This is the report:

A really nasty bug has occurred
Exception
Failed to enable: root command ldapadd -H 'ldapi://' -Y EXTERNAL -c -f /var/lib/ebox/tmp/slapd-master.ldif failed. Error output: SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 ldap_modify: Inappropriate matching (18) additional info: modify/add: olcTLSCACertificateFile: no equality matching rule ldap_modify: Type or value exists (20) additional info: modify/add: olcAccess: value #0 already exists ldap_add: Naming violation (64) ldap_add: Other (e.g., implementation specific) error (80) additional info: olcAttributeTypes: Duplicate attributeType: "0.9.2342.19200300.100.1.2" ldap_add: Other (e.g., implementation specific) error (80) additional info: olcAttributeTypes: Duplicate attributeType: "1.3.6.1.1.1.1.2" ldap_add: Other (e.g., implementation specific) error (80) additional info: olcAttributeTypes: Duplicate attributeType: "2.16.840.1.113730.3.1.1" ldap_modify: Type or value exists (20) additional info: modify/add: olcAccess: value #0 already exists Command output: modifying entry "cn=config" modifying entry "olcDatabase={-1}frontend,cn=config" adding new entry "cn=module{0},cn=config" adding new entry "cn=cosine,cn=schema,cn=config" adding new entry "cn=nis,cn=schema,cn=config" adding new entry "cn=inetorgperson,cn=schema,cn=config" adding new entry "olcDatabase={1}hdb,cn=config" adding new entry "olcOverlay=syncprov,olcDatabase={1}hdb,cn=config" modifying entry "olcDatabase={0}config,cn=config" . Exit value: 20
Trace
Failed to enable: root command ldapadd -H 'ldapi://' -Y EXTERNAL -c -f /var/lib/ebox/tmp/slapd-master.ldif failed.
Error output: SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
ldap_modify: Inappropriate matching (18)
additional info: modify/add: olcTLSCACertificateFile: no equality matching rule
ldap_modify: Type or value exists (20)
additional info: modify/add: olcAccess: value #0 already exists
ldap_add: Naming violation (64)
ldap_add: Other (e.g., implementation specific) error (80)
additional info: olcAttributeTypes: Duplicate attributeType: "0.9.2342.19200300.100.1.2"
ldap_add: Other (e.g., implementation specific) error (80)
additional info: olcAttributeTypes: Duplicate attributeType: "1.3.6.1.1.1.1.2"
ldap_add: Other (e.g., implementation specific) error (80)
additional info: olcAttributeTypes: Duplicate attributeType: "2.16.840.1.113730.3.1.1"
ldap_modify: Type or value exists (20)
additional info: modify/add: olcAccess: value #0 already exists

Command output: modifying entry "cn=config"

modifying entry "olcDatabase={-1}frontend,cn=config"

adding new entry "cn=module{0},cn=config"

adding new entry "cn=cosine,cn=schema,cn=config"

adding new entry "cn=nis,cn=schema,cn=config"

adding new entry "cn=inetorgperson,cn=schema,cn=config"

adding new entry "olcDatabase={1}hdb,cn=config"

adding new entry "olcOverlay=syncprov,olcDatabase={1}hdb,cn=config"

modifying entry "olcDatabase={0}config,cn=config"

.
Exit value: 20 at /usr/share/perl5/EBox/CGI/ServiceModule/ConfigureModuleController.pm line 74
EBox::CGI::ServiceModule::ConfigureModuleController::_process('EBox::CGI::ServiceModule::ConfigureModuleController=HASH(0x24...') called at /usr/share/perl5/EBox/CGI/Base.pm line 262
EBox::CGI::Base::run('EBox::CGI::ServiceModule::ConfigureModuleController=HASH(0x24...') called at /usr/share/perl5/EBox/CGI/Run.pm line 120
EBox::CGI::Run::run('EBox::CGI::Run', 'ServiceModule/ConfigureModuleController', 'EBox') called at /usr/share/ebox/cgi/ebox.cgi line 19
ModPerl::ROOT::ModPerl::Registry::usr_share_ebox_cgi_ebox_2ecgi::handler('Apache2::RequestRec=SCALAR(0x25f965f8)') called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 204
eval {...} called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 204
ModPerl::RegistryCooker::run('ModPerl::Registry=HASH(0x25fe7880)') called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 170
ModPerl::RegistryCooker::default_handler('ModPerl::Registry=HASH(0x25fe7880)') called at /usr/lib/perl5/ModPerl/Registry.pm line 31
ModPerl::Registry::handler('ModPerl::Registry', 'Apache2::RequestRec=SCALAR(0x25f965f8)') called at -e line 0
eval {...} called at -e line 0[/color][/font][/font][/font][/font][/font]

[clx81]

I have the same problem with a fresh Ubuntu Server 10.04 final version installed and ebox 1.5

The file  /usr/share/ebox/stubs/usersandgroups/slapd-master.ldif.mas has been modified as described but the error is still present.

This is the report:

A really nasty bug has occurred
Exception
Failed to enable: root command ldapadd -H 'ldapi://' -Y EXTERNAL -c -f /var/lib/ebox/tmp/slapd-master.ldif failed. Error output: SASL/EXTERNAL authentication started SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth SASL SSF: 0 ldap_modify: Inappropriate matching (18) additional info: modify/add: olcTLSCACertificateFile: no equality matching rule ldap_modify: Type or value exists (20) additional info: modify/add: olcAccess: value #0 already exists ldap_add: Naming violation (64) ldap_add: Other (e.g., implementation specific) error (80) additional info: olcAttributeTypes: Duplicate attributeType: "0.9.2342.19200300.100.1.2" ldap_add: Other (e.g., implementation specific) error (80) additional info: olcAttributeTypes: Duplicate attributeType: "1.3.6.1.1.1.1.2" ldap_add: Other (e.g., implementation specific) error (80) additional info: olcAttributeTypes: Duplicate attributeType: "2.16.840.1.113730.3.1.1" ldap_modify: Type or value exists (20) additional info: modify/add: olcAccess: value #0 already exists Command output: modifying entry "cn=config" modifying entry "olcDatabase={-1}frontend,cn=config" adding new entry "cn=module{0},cn=config" adding new entry "cn=cosine,cn=schema,cn=config" adding new entry "cn=nis,cn=schema,cn=config" adding new entry "cn=inetorgperson,cn=schema,cn=config" adding new entry "olcDatabase={1}hdb,cn=config" adding new entry "olcOverlay=syncprov,olcDatabase={1}hdb,cn=config" modifying entry "olcDatabase={0}config,cn=config" . Exit value: 20
Trace
Failed to enable: root command ldapadd -H 'ldapi://' -Y EXTERNAL -c -f /var/lib/ebox/tmp/slapd-master.ldif failed.
Error output: SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
ldap_modify: Inappropriate matching (18)
additional info: modify/add: olcTLSCACertificateFile: no equality matching rule
ldap_modify: Type or value exists (20)
additional info: modify/add: olcAccess: value #0 already exists
ldap_add: Naming violation (64)
ldap_add: Other (e.g., implementation specific) error (80)
additional info: olcAttributeTypes: Duplicate attributeType: "0.9.2342.19200300.100.1.2"
ldap_add: Other (e.g., implementation specific) error (80)
additional info: olcAttributeTypes: Duplicate attributeType: "1.3.6.1.1.1.1.2"
ldap_add: Other (e.g., implementation specific) error (80)
additional info: olcAttributeTypes: Duplicate attributeType: "2.16.840.1.113730.3.1.1"
ldap_modify: Type or value exists (20)
additional info: modify/add: olcAccess: value #0 already exists

Command output: modifying entry "cn=config"

modifying entry "olcDatabase={-1}frontend,cn=config"

adding new entry "cn=module{0},cn=config"

adding new entry "cn=cosine,cn=schema,cn=config"

adding new entry "cn=nis,cn=schema,cn=config"

adding new entry "cn=inetorgperson,cn=schema,cn=config"

adding new entry "olcDatabase={1}hdb,cn=config"

adding new entry "olcOverlay=syncprov,olcDatabase={1}hdb,cn=config"

modifying entry "olcDatabase={0}config,cn=config"

.
Exit value: 20 at /usr/share/perl5/EBox/CGI/ServiceModule/ConfigureModuleController.pm line 74
EBox::CGI::ServiceModule::ConfigureModuleController::_process('EBox::CGI::ServiceModule::ConfigureModuleController=HASH(0x24...') called at /usr/share/perl5/EBox/CGI/Base.pm line 262
EBox::CGI::Base::run('EBox::CGI::ServiceModule::ConfigureModuleController=HASH(0x24...') called at /usr/share/perl5/EBox/CGI/Run.pm line 120
EBox::CGI::Run::run('EBox::CGI::Run', 'ServiceModule/ConfigureModuleController', 'EBox') called at /usr/share/ebox/cgi/ebox.cgi line 19
ModPerl::ROOT::ModPerl::Registry::usr_share_ebox_cgi_ebox_2ecgi::handler('Apache2::RequestRec=SCALAR(0x25f965f8)') called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 204
eval {...} called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 204
ModPerl::RegistryCooker::run('ModPerl::Registry=HASH(0x25fe7880)') called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 170
ModPerl::RegistryCooker::default_handler('ModPerl::Registry=HASH(0x25fe7880)') called at /usr/lib/perl5/ModPerl/Registry.pm line 31
ModPerl::Registry::handler('ModPerl::Registry', 'Apache2::RequestRec=SCALAR(0x25f965f8)') called at -e line 0
eval {...} called at -e line 0[/color][/font][/font][/font][/font][/font]

[clx81]

Is it possible to run ebox 1.4 on Ubuntu Server 10.04 to avoid the above problem ?

[dmbminaret]

I don't think so. Ebox hasn't worked since 8.04 to the best of my knowledge. My understanding (pesumption) is that they haven't worried too much as 8.04 was an LTS and as such production environments would normally use that. With 10.04 being an LTS, I have been advised we could expect ebox 2.x around July after implementing and testing with a stable 10.04 ubuntu.

Is there any reason you want to use 1.4/10.04 right now? Mine was printers, but I have worked around that.

I'm pretty sure adding the 1.4 repos will lead to missing dependencies as with previous versions since 8.04. The only thing I can think of, and will not be bothering to try at this point, is to install 1.4 on ubuntu server 8.04 either fresh or using the ebox iso and trying to upgrade to 10.04. Let us know if it works?

[clx81]

To try to solve the problem, I have made a new install with the Ebox Bundle 1.4.

After that, I have upgraded to Ubuntu 10.04.

The Users management problem still the same again and ... also more problems with some modules.

[macho]

hi!

sorry for crossposting ..

I have the same issue on a fresh install of ubuntu lucid 64bit ..
How can I help to resolv this?

I tested the suggested options here in the forum - but nothing worked - I stell get the
"nasty bug" error ..

regards
macho

[namich]

Can we get a clear and concise solution to this problem? As someone posted, the directions are very confusing.

If Lucid 10.04LTS server is being used, what ebox version should be installed? and what should be removed / deleted ?

Thanks guys

[J. A. Calvo]

The nasty bug is fixed: http://trac.ebox-platform.com/changeset/17358

I will upload new 1.5 packages asap.

[Mo]

Ok, I got this working, how I did it was like this:

1. first run a:  /usr/share/ebox-usersandgroups/ebox-usersandgroups-reinstall
2. then run: sudo nano /usr/share/ebox/stubs/usersandgroups/slapd-master.ldif.mas
3. Remove all the red areas designated in: http://trac.ebox-platform.com/changeset/17358
4. Added all the green areas designated in: http://trac.ebox-platform.com/changeset/17358
5. Save and close.
6. Login into web interface and enable users and groups.

Hope that helps,

Mo

[jzlharvey]

Ok, I got this working, how I did it was like this:

1. first run a:  /usr/share/ebox-usersandgroups/ebox-usersandgroups-reinstall
2. then run: sudo nano /usr/share/ebox/stubs/usersandgroups/slapd-master.ldif.mas
3. Remove all the red areas designated in: http://trac.ebox-platform.com/changeset/17358
4. Added all the green areas designated in: http://trac.ebox-platform.com/changeset/17358
5. Save and close.
6. Login into web interface and enable users and groups.

Hope that helps,

Mo

Mo, Im doing the same right now.

During your first step did you get the following at all?

Code: [Select]

Setting up ebox-mailfilter (1.4.4-0ubuntu1~ppa1~hardy1) ...
root command /usr/share/ebox-mailfilter/ebox-mailfilter-ldap update failed.
Error output: Can't call method "attributes" on an undefined value at /usr/share/perl5/EBox/Ldap.pm line 254.

Command output: .
Exit value: 255 *
Im getting it everytime (4 times thus far)...