Study Notes

What time is the best to take RHCE exam? Today, I’m really annoyed this problem, since I decided to get RHCE cert in Octorber. In recent two months, I insist on reading Study Guide every night, and do not finish the course now. Sometimes I feel anxious and a litter disapointed.

I call some exam companies this afternoon, who told me an exam arranged in 29th Jan, 2007 and the fee is 4300 excluding training cost. I think it’s too expensive to have such a training only for rapid passing exam(Training+Exam=8100 in Shenzhen, and 6000 in Guangzhou). If join such “rapid-training camp” and even pass RHCE very easily. is it really benifit for me? Do I only need such an paper to declair how clever I am, or just depend on it to get a better job? Do I really master the study points of Linux world?

Absolutely not. It wastes my money and violates my rule to become a Linux professioner. I perfer to take more time to perpare, read more carefully, do more experiences, and recite the key knowledges by writing them on papers. Till all is ready and I feel confident, I directiva take exam without joining training. It will save me a lot of money and make my heart more stronger.

Go ahead, with more patience.

It tooks about two days on resolving how to update kernel 2.6.19.1 in VMware5.5, because the VMware default configured disk is SCSI which need some special module setting. During this course, I learn more about kernel concepts.

1. Target
Update the lastest kernel 2.6.19.1 in VMware5.5 in order to research NFSv4.0

2. Test Environment
VMware version: 5.5.1 build -19175 for linux
Virtual Operating System: CenOS 3.5 (Kernel 2.4.21-32EL)

3. Steps
Install Virtual Operaing System CenOS3.5 which kernel is 2.4.21. Download the kernel 2.6.19.1 with related patch from www.kernel.org.
# cd /usr/src
# tar xvf /download/linux-2.6.19.1.tar
# ln linux-2.6.19.1 linux-2.6
# cd linux-2.6

Apply the patch:
# bunzip2 -dv /download/patch-2.6.19.bz2 | patch -p1

Begin to compile:
# cd /usr/src/linux-2.6
# make mrproper
# make menuconfig (make oldconfig would be ignored here)
At this point, the following items must be selected as “build in”, more explanation would be wrote in the later section.
SCSI device support <*>
SCSI device -> SCSI low-lever device -> Buslogic SCSI support <*>
Device Drivers -> Fusion MPT sevice support <*>
Device Drivers -> Fusion MPT (base+scsihost) drivers <*>
Device Drivers -> Fusion MPT (ioctl) drivers <*>
Device Drivers -> USB support <*>
Device Drivers -> Network support -> Ethernet(10/100) support <*>
File System -> EXT2, EXT3 support <*>
Commend, the vmware default SCSI controller is Buslogic.

If not add “scsi, usb, mpt” built in directly, or just select modules load [M], when issue “mkinitrd /boot/initrd-2.6.19.1.img 2.6.19.1”, there’s the following error message:
no modules mptbase found for 2.6.19.1 kernel, aborting
If not add “ext2, ext3” build in directly, or just select modules load [M], when reboot after compiling, the system will be halt:
Kernel Panic: no init found

Continue the compiling process:
# make bzImage
# make modules
# make modules-install
# cp /usr/src/2.6.19.1/arch/i386/boot/bzImage /boot/vmlinuz-2.6.19.1
# mkinitrd /boot/initrd-2.6.19.1.img 2.6.19.1
# cp /usr/src/2.6.19.1/System.map /boot/System.map-2.6.19.1
# cp /usr/src/2.6.19.1/.config /boot/config-2.6.19.1

Modify “/boot/grub/grub.conf”:
# This is Phillip’s /boot/grub/grub.conf
default=0
timeout=10
splashimage=(hd0,0)/grub/splash.xpm.gz
title CentOS-3 (2.4.21-32.EL)
root (hd0,0)
kernel /vmlinuz-2.4.21-32.EL ro root=LABEL=/
initrd /initrd-2.4.21-32.EL.img
title New-Kernel (2.6.19.1)
root (hd0,0)
kernel /vmlinuz-2.6.19.1 ro root=LABEL=/
initrd /initrd-2.6.19.1.img
Save and reboot, if all succeed, issue “uname -r” will shows: 2.6.19.1

4. Summary
If set hard disk as IDE, it would be very easy to update. But I think practise on this SCSI system is very benifit for future works. At first begining, when issue “mkinitrd /boot/initrd-2.6.19.1.img 2.6.19.1” and error “no modules mptbase found for kernel”, I just did a stupid thing, add the “–omit-scsi-modules”(ignore scsi), but this system is based on SCSI drivers! Though “mkinitrd –omit-scis-modules /boot/initrd-2.6.19.1.img 2.6.19.1” passed, the system was kernel panic when reboot:

VFS: Cannot open root device “sda1” or unknown-block(0,0)
Please append a correct “root=” boot option
Kernel panic: not syncing: VFS: unable to mount root fs on unknown block(0,0)

By reading some documents, I tried to comment all lines contains “mpt” in /etc/modules.conf, the same kernel panic happenes; Download the latest “lvm2, device-mapped, mkinitrd” rpm packages, however, these packages can not be installed. The only way fixed this problem is building mpt,scsi,ext2,ext3,usb directly when run “make menuconfig”.

menuconfig options:
[*] build-in
[M] modules
[ ] excluded

5. Fix issues in new 2.6 kernel
The network device eth0 seems to be disappeared in new kernel, when execute “#lsmod”, there’s the following error:
QM_MODULES: Function not implemented.

I fix this issue by installing new mode-init-tools(need download),
# cd mode-init-tools
# ./configure –prefix
# make moveold
# make
# make install
Generate “/etc/modprobe.conf” :
# ./generate_modprobe.conf /etc/modprobe.conf
# depmod 2.6.19
OK, reboot the OS, and issue “#lsmod” again, the eth0 module “pcnet32” is listed.(vmware default eth0 module is called pcnet32). Fixed.

In some cases, I need to log in as remote X client, for example, run ConsoleOne in localhost.

Method 1:
System1# ssh -X system2
System2# run any X command you’d like have and it’ll show up on System1
I verifies this way to open remote ConsoleOne GUI(192.168.123.33, nds server) in local(192.168.123.32).
Localhost 192.168.123.32# ssh -X 192.168.123.33
NDS sev 192.168.123.33# ./usr/ConsoleOne/bin/ConsoleOne

Note, that is that does not work it’s because you have X11 forwarding turned off in your ssh config file(perhaps in /etc/ssh/sshd_config).

Method 2:
System1# xhost -system2
System1# telnet system2
System2# export DISPLAY=system1:0
System2# run X command you’d like have and it’ll show up on System1

–display Server:0.0
Send output to the Xserver running on Server.

Xterm is an X-client application that creates a terminal windown on your X-display

Mobo: the abbreviation of MotherBoard.

In my virtual CentOS, try to apply its OpenLDAP installed. First, check “/etc/openldap/slapd.conf”, it used “ldbm” instead of Berkeley DB “bdb”, set the base DN, password and thus configuration is completed. I add a lot of entries for validation, and later delete them. Note, here the destination in “ldapdelete” command must like the following:

# ldapdelete -x -v -D “cn=root,dc=plasmon,dc=sit” -w hello123 uid=inter,ou=People,dc=plasmon,dc=sit

Before the term “uid=inter” there’s no “dn:”, if such title exists, the ldapdelete would get failed.

I want to browse Internet pages via lynx, but now lynx do not support gb2312 directly. So, I did a very interesting test, resolve this issue fairly well.

1. Test Environment
CentOS 3.5, no install X-Window
cce rpm package

2. Recompily kernel to increase the running speed(because it has PIII and only 128MB memory).

# cd /usr/src/linux-2.4.21-32.EL
# vi Makefile
Here, in the line 4, change the EXTRAVERSION to “EXTRAVERSION=-32.ELhx”
# make mrproper
# make oldconfig
# make menuconfig
remove the unuseful components
# make dep
# make bzImage
# make modules
# cp /usr/src/linux-2.4.21-32.EL/arch/i386/boot/bzImage /boot/vmlinuz-linux-2.4.21-32.ELhx
# make modules_install
# mkinitrd /boot/initrd-2.4.21-32.ELhx.img 2.4.21-32.ELhx
# cp /usr/src/linux-2.4.21-32.EL/System.map /boot/System.map-2.4.21-32.EL
# cp /usr/src/linux-2.4.21-32.EL/.config /boot/.config-2.4.21-32.ELhx

Final step, add corresponding lines in /boot/grub/grub.conf. Then reboot.

3. The new kernel starts up very quickly, That’s what I want. Download cce and install this rpm file.
# rpm -ivh cce-xxx.rpm
Then execute “cce” in the command line, and type “lynx www.tom.com”, a famous Chinese site.
Yeah!I got it, all Chinese characters display very beautifully. cce also supports Chinese input, but what types can not be recognized by human for mess code set.

PS: copy cce package from windows to my Linux, and issue “rpm -ivh”, it said the md5sum failed. Download cce in linux, and installed successfully. It seems there’s different md5 checking code in Windows and Linux. I can not confirm.

It sounds to be very annoyed to import posixAccount, shadowAccount attributes and objectclasses in last article. Now I find a easy way. Located the “rfc2307-usergroup.sch” file in “/opt/novell/eDirectory/lib/nds-schema”, issue:

# ndssch -h 192.168.123.33 -t Plasmon cn=PlasmonAdmin.o=Plasmon rfc2307-usergroup.sch

The job would be done well. and then just use ConsoleOne to import “samba-nds” as rename it to ldif file.

To get the OpenLDAP schema entries:
# ldapsearch -x -D “cn=root,dc=plasmon,dc=sit” -w hello123 -b cn=subschema -s base + -H ldap://192.168.123.33:389
In OpenLDAP slapd.conf, it was set as “cn=subschema”, while in Iplanet, it is “cn=schema”.
To get the Iplanet schema entries:
# ldapsearch -x -b cn=schema -s base+ -H ldap://192.168.123.33:389

Assume that do not know the LDAP server type, issue the following command to find it is “cn=schema” or “cn=subschema”:
# ldapsearch -x -H ldap://192.168.123.33:389 -s base -b “” “objectclass=*” subschemaSubentry

Iplanet history: Iplanet 4.0 — Iplanet 5.0 — Sun One Directory Service — Sun Java System Directory Service 5.2

To understand 100Mb/s throughout. Servial factors must be consided. With a 16-bit data bus, two byte are transmitted per bus transation. Thus to achieve a throughout of 100Mbytes/s, the data bus must be clocked at 50MHz. To minimize strobe design complexity, Ultra ATA uses a “double data rate” or double-edge clocking mechanism for all Ultra DMA transfers. Using this technology, data is registed both on the rising and falling edges of the data strobe, halving the required strobe frequency. Thus the bandwidth is:

25 MHz strobe
x 2 for double data rate clocking
x 16 bit per edge
/ 8 bits per byte
——————————–
=100 Mbytes/sec

ESD:electrostatic discharge
Shipping package, ESD protecting bag are responsibility for the users.

Controll electionics:
The driver is electronically controlled by a microprocessor, several logic modules, digital/analog modules, and various drivers and receivers. The controll electronics preforms the following major function:
1. Controls and interpres all interface signals between the host controller and driver.
2. Controls read write accessing of the disk media, including defect management and error recovery.
3. Controls staring, stopping and monitoring of the spindle.
4. Conducts a power-up sequence and calibrates the serio.
5. Analyze servo signals to provide closed loop control. These include position erre signal and estimated velocity.
6. Monitors the actuator position and determines the target track for a seek operation
7. Controls the voice coil driver to align the actuator in a desired position
8. Constantly monitors error conditions of the servo and takes corresponding action if an error occurs
9. Monitors various timers such as head settle and servo failure.
10.Perform self-checkout(diagnostics)

Actuator: The read/write heads are mounted in the actuator. The actuator is a swing-arm assembly driven by a voice coild motor. A closed-loop positioning servo controls the environment of the actuator. An embedded servo patterm supplied feedback to the positioning servo to keep the read/write heads centered over the desired track.

The actuator assembly is balanced to allow vertical or horizontal mounting without adjustment. When the driver is powered off, the actuator automatically moves the head to the actuator ramp outside of the disk where it parks.

Key: Pin position 20 has no connection pin, it is recommended to close the respective position of the cable connector in order to avoid incorrect insertion.

NDS8.0 does not support posixAccount,shadowAccount,samba schema default. I add these attributes and objectclass manually by ConsoleOne.

Before import posixAccount and shadowAccount, run ConsoleOne, “LDAP Group-Attribute Mapping”, remove the “unique ID” and “GID” firstly. This step must not be ignored.

Then import “attribute ldif”, “objectclassed ldif” and “samba.nds” in order. Restart ConsoleOne to make it activated. Through path “User-Extensions of this object”, I could add these attribute or objectclass to identied user.

attribute.ldif(posixAccount,shadowAccount,Account)
————————————————–
# Attributes for RFC2307:posixAccount
dn: cn=schema
changetype: modify
add: attributetypes
attributeTypes: ( 1.3.6.1.1.1.1.0 NAME ‘uidNumber’ DESC ‘uidNumber’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

dn: cn=schema
changetype: modify
add: attributetypes
attributeTypes: ( 1.3.6.1.1.1.1.4 NAME ‘loginShell’ DESC ‘loginShell’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

dn: cn=schema
changetype: modify
add: attributetypes
attributeTypes: ( 1.3.6.1.1.1.1.1 NAME ‘gidNumber’ DESC ‘gidNumber’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

dn: cn=schema
changetype: modify
add: attributetypes
attributeTypes: ( 1.3.6.1.1.1.1.2 NAME ‘gecos’ DESC ‘gecos’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE)

dn: cn=schema
changetype: modify
add: attributetypes
attributeTypes: ( 1.3.6.1.1.1.1.3 NAME ‘homeDirectory’ DESC ‘homeDirectory’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE)

# Attributes for shadowAccount
dn: cn=schema
changetype: modify
add: attributetypes
attributeTypes: ( 1.3.6.1.1.1.1.11 NAME ‘shadowFlag’ DESC ‘shadowFlag’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

dn: cn=schema
changetype: modify
add: attributetypes
attributeTypes: ( 1.3.6.1.1.1.1.5 NAME ‘shadowLastChange’ DESC ‘shadowLastChange’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

dn: cn=schema
changetype: modify
add: attributetypes
attributeTypes: ( 1.3.6.1.1.1.1.10 NAME ‘shadowExpire’ DESC ‘shadowExpire’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

dn: cn=schema
changetype: modify
add: attributetypes
attributeTypes: ( 1.3.6.1.1.1.1.9 NAME ‘shadowInactive’ DESC ‘shadowInactive’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

dn: cn=schema
changetype: modify
add: attributetypes
attributeTypes: ( 1.3.6.1.1.1.1.8 NAME ‘shadowWarning’ DESC ‘shadowWarning’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

dn: cn=schema
changetype: modify
add: attributetypes
attributeTypes: ( 1.3.6.1.1.1.1.7 NAME ‘shadowMax’ DESC ‘shadowMax’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

dn: cn=schema
changetype: modify
add: attributetypes
attributeTypes: ( 1.3.6.1.1.1.1.6 NAME ‘shadowMin’ DESC ‘shadowMin’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE)

# Attributes for RFC1274:Account
dn: cn=schema
changetype: modify
add: attributetypes
attributeTypes: ( 0.9.2342.19200300.100.1.9 NAME ‘host’ DESC ‘host’ SYNTAX 1.3.6.1.4.1.1466.115.121.1.15)

objectclass.ldif(posixAccount,shadowAccount,Account)
—————————————————–
# Attrbutes for RFC 2307
dn: cn=schema
changetype: modify
add: objectclasses
objectClasses: (0.9.2342.19200300.100.4.5 NAME ‘account’ DESC ‘account’ AUXILIARY MAY host)

dn: cn=schema
changetype: modify
add: objectClasses
objectClasses: (1.3.6.1.1.1.2.0 NAME ‘posixAccount’ DESC ‘posixAccount’ AUXILIARY MAY (uidNumber $ loginShell $ gecos $ gidNumber $ homeDirectory ))

dn: cn=schema
changetype: modify
add: objectClasses
objectClasses: (1.3.6.1.1.1.2.1 NAME ‘shadowAccount’ DESC ‘shadowAccount’ AUXILIARY MAY (shadowLastChange $ shadowFlag $ shadowExpire $ shadowInactive $ shadowMax $ shadowMin $ shadowWarning ))

samba-nds.schema
——————————-
/SNAZ_build/samba/example/LDAP/samba-nds.schema

Novell Directory Services (NDS) debuted in 1994, and was derived from the Xerox X.500 database scheme. Although NDS was, and still is, primarily, the facility that allowed you to create users and groups on the Netware network. Novell eDirectory has the ability to exist on many platforms, other than Netware, including Windows NT/2000, Linux and Solaris.

gettext must be installed. gettext is, according to its website, “a set of tools that provides a framework to help other GNU packages produce multi-lingual messages”.

1. Pre-Install
Before beginning the installation, you will need to check certain parameters in your Linux server/workstation :
Enable Multicasting. You will need to check your routing table for an existing specific multicasting entry. Login as root and execute the following command,

#/bin/netstat -rn

Existing routes will be printed to screen. Look for the following entry

224.0.0.00.0.0.0

If you do not see this, then you will need to add the necessary entry. Again, as root user, execute the following command, (this assumes that you have just one network card and it is recognized by your system as eth0.

#route add -net 224.0.0.0 netmask 240.0.0.0 dev eth0

If you have more than one eDirectory server on the same network. You will need to use NTP to synchronize the time on your systems. You probably should have an NTP server configured on your network, if your company is fairly large. I have encountered problems starting my eDirectory server if the NTP connection is lost or unavailable. An indication that this may be the problem is when the NDS daemon fails to start at boot time.

2. Install nds8.8
Register novell user and download nds8.8 iso for Linux.
[root@localhost /]# mount -o loop edir_88_linux.iso /mnt
[root@localhost /]# cd /mnt/setup
[root@localhost setup]# ./nds-install
%%% Welcome to the installation of Novell eDirectory.
%%% The Novell eDirectory 8.8 for Linux End User License Agreement will now be displayed.
%%% Please read the agreement carefully before accepting the terms.
%%% Press ENTER to continue.

Novell(r) eDirectory(r) 8.8
Novell Software License Agreement
PLEASE READ THIS AGREEMENT CAREFULLY, BY INSTALLING OR OTHERWISE USING THE SOFTWARE, YOU AGREE TO THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE WITH THESE TERMS, DO NOT DOWNLOAD, INSTALL OR USE THE SOFTWARE. THE SOFTWARE MAY NOT BE SOLD, TRANSFERRED, OR FURTHER DISTRIBUTED EXCEPT AS AUTHORIZED BY Novell.
This Novell Software License Agreement (“Agreement”) is a legal agreement between You (an entity or a person) and Novell, Inc. (“Novell”). The software product identified in the title of this Agreement, media (if any) and accompanying documentation (collectively the “Software”) is protected by the copyright laws and treaties of the United States (“U.S.”) and other countries and is subject to the terms of this Agreement. If You do not agree with the terms of this Agreement, do not download, install or otherwise use the Software and, if applicable, return the entire unused package to the reseller with Your receipt for a refund. The Software is licensed to You, not sold.
The Software may include or be bundled with other software programs licensed under different terms and/or licensed by a licensor other than Novell. Use of any software programs accompanied by a separate license agreement is governed by that separate license agreement. Any third party software that may be provided wit

%%% Do you accept the terms of Novell eDirectory 8.8 license agreement ‘[y/n/q] ? y

%%% List of Novell eDirectory 8.8 components available to install

%%% 1 Novell eDirectory Server
%%% 2 Novell eDirectory Administration Utilities

%%% Select the components you wish to install [?, q] : 1,2

%%% Installing NICI-2.7.0…

%%% Adding packages…

%%% Installing novell-NDSmasv… done
%%% Installing novell-NDSbase… done
%%% Installing novell-NLDAPsdk… done
%%% Installing novell-NLDAPbase… done
%%% Installing novell-NDScommon… done
%%% Installing novell-pkiserver… done
%%% Installing novell-npkiapi… done
%%% Installing novell-npkit… done
%%% Installing novell-NOVLsas… done
%%% Installing novell-ntls… done
%%% Installing novell-ncpenc… done
%%% Installing novell-NDSserv… done
%%% Installing novell-NDSrepair… done
%%% Installing novell-NOVLstlog… done
%%% Installing novell-NOVLsubag… done
%%% Installing novell-nmas… done
%%% Installing novell-NOVLxis… done
%%% Installing novell-NOVLlmgnt… done
%%% Installing novell-NOVLembox… done
%%% Installing novell-NOVLsnmp… done
%%% Installing novell-NDSimon… done
%%% Installing novell-NOVLice… done

%%% Use “ndsconfig” or “ndsmanage” to configure Novell eDirectory Server.

%%% To use eMBox you need JRE version 1.4 or above. If your default version doesn’t work then update the PATH variable as follows to use jre version 1.4
PATH=$PATH:/opt/novell/eDirectory/lib/nds-modules/embox/jre/bin

%%% WARNING: The user should install openslp or NDSslp(version-8.8) package for using SLP services.

%%% Please update the following environment variables and export them or run /opt/novell/eDirectory/bin/ndspath to set the environment for Novell eDirectory 8.8
PATH=/opt/novell/eDirectory/bin:/opt/novell/eDirectory/sbin:$PATH
LD_LIBRARY_PATH=/opt/novell/eDirectory/lib:/opt/novell/eDirectory/lib/nds-modules:/opt/novell/lib:$LD_LIBRARY_PATH
MANPATH=/opt/novell/man:/opt/novell/eDirectory/man:$MANPATH

%%% Please go through /c/setup/../readme.txt carefully before using the product.
%%% Novell eDirectory Server packages successfully installed.

%%% Novell eDirectory Administration Utilities packages successfully installed.

Then vi /root/.bash_profile, and the following items and log again.

export SHLIB_PATH=/opt/novell/eDirectory/lib:/opt/novell/eDirectory/lib/nds-modules:/opt/novell/lib:$SHLIB_PATH
export PATH=/opt/novell/eDirectory/bin:/opt/novell/eDirectory/sbin:$PATH
export MANPATH=/opt/novell/man:/opt/novell/eDirectory/man:$MANPATH
export TEXTDOMAINDIR=/opt/novell/eDirectory/share/locale:$TEXTDOMAINDIR

2. Install ConsoleOne 1.3.6f
Download ConsoleOne 1.3.6f tarball from novell site, then compress to “Linux” directory.
[root@localhost root]# tar zxvf c1_136f-linux.tar.gz
[root@localhost root]# cd Linux
[root@localhost Linux]# ./c1-install
Welcome to the installation of ConsoleOne 1.3.6f

The following is a list of languages that are available to install.
1 English
2 Chinese
3 Chinese Traditional
4 French
5 German
6 Italian
7 Japanese
8 Portuguese
9 Russian
10 Spanish
11 All
Select the languages you wish to install [?,q]: 1

The following are all the available snapins you can choose to install
0 NONE
1 ICE Snapin
2 Index Manager Snapin
3 LDAP Snapin
4 SLP Snapin
5 WAN Manager Snapin
6 PKI Snapin
7 Filtered Replica Snapin
8 All
Select the snapin(s) you wish to install [?,q]: 8

———————————————-
Linux Kernel Version installed in this system:
2.4.21-32.EL
———————————————-

Do you wish to install Java Runtime Environment [y,n,q] ? y

%% A later version of NICI (2.7.0) is already present on this system.
%% The version of NICI available with this distribution (2.6.4) was not installed.
%% Adding package NOVLc1Linuxjre …
Preparing… ########################################### [100%]
1:NOVLc1Linuxjre ########################################### [100%]
%% Adding package NDSslp …
Preparing… ########################################### [100%]
1:NDSslp ########################################### [100%]
%% Adding package NDSbase …
Preparing… ########################################### [100%]
1:NDSbase ########################################### [100%]
%% Adding package NDScommon …
Preparing… ########################################### [100%]
1:NDScommon ########################################### [100%]
%% Adding package NLDAPsdk …
Preparing… ########################################### [100%]
1:NLDAPsdk ########################################### [100%]
%% Adding package NLDAPbase …
Preparing… ########################################### [100%]
1:NLDAPbase ########################################### [100%]
%% Adding package NOVLxis …
Preparing… ########################################### [100%]
1:NOVLxis ########################################### [100%]
%% Adding package NOVLlmgnt …
Preparing… ########################################### [100%]
1:NOVLlmgnt ########################################### [100%]
%% Adding package NOVLice …
Preparing… ########################################### [100%]
1:NOVLice ########################################### [100%]
%% Adding package NOVLsas …
Preparing… ########################################### [100%]
1:NOVLsas ########################################### [100%]
%% Adding package NOVLpkia …
Preparing… ########################################### [100%]
1:NOVLpkia ########################################### [100%]
%% Adding package NOVLpkis …
Preparing… ########################################### [100%]
1:NOVLpkis ########################################### [100%]
%% Adding package NOVLc1 …
Preparing… ########################################### [100%]
1:NOVLc1 ########################################### [100%]
%% Adding package NDSsice …
Preparing… ########################################### [100%]
1:NDSsice ########################################### [100%]
%% Adding package NDSsimgr …
Preparing… ########################################### [100%]
1:NDSsimgr ########################################### [100%]
%% Adding package NDSsldap …
Preparing… ########################################### [100%]
1:NDSsldap ########################################### [100%]
%% Adding package NDSsslp …
Preparing… ########################################### [100%]
1:NDSsslp ########################################### [100%]
%% Adding package NDSswan …
Preparing… ########################################### [100%]
1:NDSswan ########################################### [100%]
%% Adding package NDSspki …
Preparing… ########################################### [100%]
1:NDSspki ########################################### [100%]
%% Adding package NDSsfrep …
Preparing… ########################################### [100%]
1:NDSsfrep ########################################### [100%]
%% Java Runtime Environment Successfully Installed.
%% ConsoleOne Successfully Installed.
%% Execute /usr/ConsoleOne/bin/ConsoleOne to run ConsoleOne
%% Snapins Successfully Installed.
NDSslp-8.7.3-13
Starting NDS SLP services…
Done

4. Set up the tree
[root@localhost root]# ndsconfig new -t Plasmon -n o=Plasmon -a cn=PlasmonAdmin.o=Plasmon
Enter the password for cn=PlasmonAdmin.o=Plasmon:
Re-enter the password for cn=PlasmonAdmin.o=Plasmon:
Please enter the absolute path for the instance [ /var/opt/novell/eDirectory ]:
Please enter absolute path of the database directory [ /var/opt/novell/eDirectory/data/dib ]:
Configuring the NDAP interfaces… Done
Configuring the LDAP interfaces… Done
Configuring the HTTP interfaces… Done
Starting the service ‘ndsd’… Done.
Configuring Novell eDirectory server with following parameters
Admin name = cn=PlasmonAdmin.o=Plasmon
Tree name = Plasmon
Server Context = o=Plasmon
DIB location = /var/opt/novell/eDirectory/data/dib
Searching for Duplicate Tree Name in the network. Please wait…
Basic configuration is successful. Proceeding with additional configuration…
Extending schema… Done
For more details view schema extension logfile: /var/opt/novell/eDirectory/log/schema.log
Configuring HTTP service… Done
Configuring LDAP service… Done
Configuring SNMP service… Done
Configuring SAS service… Done
Associating certificate with the NCP server object… Done
Configuring NMAS service… Done
Configuring SecretStore… Done
Configuring LDAP Server with default SSL CertificateDNS certificate… Done
The instance at /etc/opt/novell/eDirectory/conf/nds.conf is successfully configured.

Check the service stauts:
[root@localhost root]# ndsstat
[1] Instance at /etc/opt/novell/eDirectory/conf/nds.conf: localhost.o=Plasmon.PLASMON
Tree Name: PLASMON
Server Name: .CN=localhost.O=Plasmon.T=PLASMON.
Binary Version: 20112.91
Root Most Entry Depth: 0
Product Version: eDirectory for Linux v8.8 [DS]
5. Setting Up hosts.nds
If you are installing eDirectory on a pristine Red Hat system, you may have default firewall rules that block the Service Location Protocol (SLP). SLP functions like the “Network Neighbourhood” of Microsoft Windows, in that it broadcasts available services on the network, and enable applications like ConsoleOne to “know” what services are available. If SLP is blocked, you will not be able to “browse” for the eDirectory server.

In any case, one way to do away with SLP, or, if you don’t like to wait for ConsoleOne to browse for the eDirectory server, is to create a file hosts.nds inside /etc directory. This file is very similar to the hosts file that network engineers are so familiar with. The contents of our hosts.nds file are shown below:
# hosts.nds file for Virago
# Tree name Internet Address
Plasmon. 192.168.123.33

Note the trailing period “.” after the Tree name. This is not a typo — you need to specify it as a fully qualified tree name. If your server has a static IP address, you can specify it under “Internet Address”.
6.Configuring for LDAP With ConsoleOne
run ConsoleOne:

# cd /usr/ConsoleOne/bin
# ./ConsoleOne
ConsoleOne was not found in ./../jre/jre/bin/java

Later, I modified the /usr/ConsoleOne/bin/ConsoleOne script, add chmod line:
…
prog=”${jre}/bin/java”
chmod 777 “$prog” # grant privilege

# Run.
if [ -x “$prog” ]
then
$prog -noverify -Dapplication.home=”${APPHOME}” -classpath “$classpath” com.novell.application.console.shell.Console “$@”
else
echo >&2 “$progname was not found in ${prog}”
exit 1
fi
…

Then, run Console successfully.

7. Test LDAP server

After authenticating successfully, expand all the objects in the left pane and take a look around. Click on the oganization object in the left pane and you should see all the objects that are created for it in the right pane.

Locate the LDAP Server object and the LDAP Group object. You are going to make some changes to the properties of these objects. Right-click the LDAP Server object and select “Properties”. You will see the General Settings of your LDAP server.

Click on the SSL/TLS Configuration tab. Ensure that the checkbox for “Require TLS for All Operations” is cleared. Click Apply then Close.

Next, locate the LDAP Group object. Right click it and select “Properties”. You will see the LDAP Group General Settings. Ensure that the checkbox for “Require TLS for simple binds with password” is cleared. Click Apply then Close.

Now begin testing several LDAP operations against eDirectory.Using eDirectory’s text commands, which are very similar to those of OpenLDAP, and we will look at debugging information from DSTRACE, a very useful troubleshooting tool for eDirectory.

First, login as root, because cannot execute ndstrace as a normal user. Open a terminal window and execute the following command :
# ndstrace

The terminal window will look something like the picture above. Note the NDSTrace: prompt at the bottom of the window. Your commands will appear there. Type “set dstrace=nodebug” (without the quotes), this will clear the DSTRACE settings. Then type “set dstrace=+ldap”. This will turn on LDAP debugging. When you run any LDAP commands against this eDirectory server, informational and error messages will be displayed in this DSTRACE window. For production deployments, you will want to turn off LDAP debugging because it takes up CPU cycles.

At this point, issue the following command:
# ldapsearch -x -h localhost -b “” -s one objectclass=*
First time, I forgot to type “-x”, error displays: ldap_sasl_interactive_bind_s: Unknown authentication method”.
Add “-x”, all the entries are able to be returned.

Since 192.168.123.33 is the nds server IP address, I run the following commands on 192.168.123.33:
# ldapsearch -x -b “o=Plasmon” -H ldap://192.168.123.33
# ldapsearch -x -b “o=Plasmon” -H ldaps://192.168.123.33:636
# ldapsearch -x -b “o=Plasmon” -H ldap://127.0.0.1
# ldapsearch -x -b “o=Plasmon” -H ldaps://127.0.0.1:636
The above four run OK. But, when I log on other Linux(192.168.123.68), and try:
# ldapsearch -x -b “o=Plasmon” -H ldap://192.168.123.33
It always said cannot find LDAP server. Why? I check the ConsoleOne LDAP setting, its network configuration contains “ldap://127.0.0.1:389 ldaps://127.0.0.1:636”, and I could not modify this field. Is the disable connection caused by this setting? I scan all the open ports in 192.168.123.33, all LDAP ports display. Then run nmap in 192.168.123.68, Ah, it takes a long time to scan, but return no result. Yes, I see, The reason must be the firewall enabled in 192.168.123.33 server. Just shutdown the firewall in 192.168.123.33, and run ldapsearch again, Yeah!