[opensuse] Upgrade OpenSuSE 11.0 LDAP PDC to OpenSuSE 11.3
Hello all, I have to upgrade an OpenSuSE 11.0, with role of PDC with LDAP and SAMBA into an OpenSuSE 11.3. Any hint to do it? Any precaution i have to take before do the upgrade? Or, even better, is all easy and automatized and at the first boot of the new SO it works like a charm? Any experence of someone ? Thanks guys. Cordially, Claudio Prono. -- -------------------------------------------------------------------------------- Claudio Prono OPST System Developer Gsm: +39-349-54.33.258 @PSS Srl Tel: +39-011-32.72.100 Via San Bernardino, 17 Fax: +39-011-32.46.497 10141 Torino - ITALY http://atpss.net/disclaimer -------------------------------------------------------------------------------- PGP Key - http://keys.atpss.net/c_prono.asc -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Am 17.01.2011 11:31, schrieb Claudio Prono:
Hello all,
I have to upgrade an OpenSuSE 11.0, with role of PDC with LDAP and SAMBA into an OpenSuSE 11.3. Any hint to do it? Any precaution i have to take before do the upgrade? Or, even better, is all easy and automatized and at the first boot of the new SO it works like a charm? Any experence of someone ?
Ciao Claudio, I can't tell you much about Samba and PDC, but you should care about LDAP! Since Version 2.3 of OpenLDAP the "online-configuration" of LDAP is supported and installed by default. This means your slapd.conf is in your ldap-database itself. As I can tell from Debian squeeze you still can start slapd with your slapd.conf,BUT you have to configure this first! You can also convert your existing slapd.conf to the new config.ldif, but you should setup a system first and run some tests. Not all options from slapd.conf are converted "on the fly" and there are still some options not supported by the online-config. Good luck! Tanti saluti, Ivan -- AStA TU Darmstadt IT-Administration Hochschulstr. 1 64289 Darmstadt University of Technology Darmstadt Tel. +49-6151-162217 Fax. +49-6151-166026 -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Am Montag 17 Januar 2011, 14:20:08 schrieb Ivan De Masi:
Am 17.01.2011 11:31, schrieb Claudio Prono:
Hello all,
I have to upgrade an OpenSuSE 11.0, with role of PDC with LDAP and SAMBA into an OpenSuSE 11.3. Any hint to do it? Any precaution i have to take before do the upgrade? Or, even better, is all easy and automatized and at the first boot of the new SO it works like a charm? Any experence of someone ?
Ciao Claudio,
I can't tell you much about Samba and PDC, but you should care about LDAP! Since Version 2.3 of OpenLDAP the "online-configuration" of LDAP is supported and installed by default. This means your slapd.conf is in your ldap-database itself. As I can tell from Debian squeeze you still can start slapd with your slapd.conf,BUT you have to configure this first! This is wrong. Opposite to what Debian seems to do (I didn't check that myself), the packages in openSUSE will NOT automatically convert an existing slapd.conf based configuration to the back-config based configuration during the update. slapd will continue to work using slapd.conf. Converting from slapd.conf to the back-config database needs to be done manually (if wanted at all).
You can also convert your existing slapd.conf to the new config.ldif, but you should setup a system first and run some tests. Not all options from slapd.conf are converted "on the fly" and there are still some options not supported by the online-config. Care to give some details here, proably you hit a bug? Apart from back-
Note: If you setup OpenLDAP originally with YaST, the YaST LDAP Server configuartion will, when you start it on 11.3 for the first time, offer to convert your existing configuration, as YaST (as in openSUSE 11.1 and newer) does no longer support slapd.conf based setups. But as a lot has happend in OpenLDAP since the version we ship in 11.0 it might be the existing 2.3.X based slapd.conf does not work completely with the 2.4.X OpenLDAP release on 11.3. You should really verify that you configuration works as expect after your migration. Additionally as always, it is a very good idea to backup your LDAP database to a LDIF file (using slapcat) before installing 11.3 and to reload it afterwards (using slapadd), there have in changes in the on- disk database format between OpenLDAP 2.3.X and OpenLDAP 2.4.X. meta and back-sql and all relevant backends seem to have back-config support nowadays, I think. regards, Ralf -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Am 17.01.2011 17:28, schrieb Ralf Haferkamp:
Am Montag 17 Januar 2011, 14:20:08 schrieb Ivan De Masi:
Am 17.01.2011 11:31, schrieb Claudio Prono:
Hello all,
I have to upgrade an OpenSuSE 11.0, with role of PDC with LDAP and SAMBA into an OpenSuSE 11.3. Any hint to do it? Any precaution i have to take before do the upgrade? Or, even better, is all easy and automatized and at the first boot of the new SO it works like a charm? Any experence of someone ?
Ciao Claudio,
I can't tell you much about Samba and PDC, but you should care about LDAP! Since Version 2.3 of OpenLDAP the "online-configuration" of LDAP is supported and installed by default. This means your slapd.conf is in your ldap-database itself. As I can tell from Debian squeeze you still can start slapd with your slapd.conf,BUT you have to configure this first! This is wrong. Opposite to what Debian seems to do (I didn't check that myself), the packages in openSUSE will NOT automatically convert an existing slapd.conf based configuration to the back-config based configuration during the update. slapd will continue to work using slapd.conf. Converting from slapd.conf to the back-config database needs to be done manually (if wanted at all).
Hello, so maybe I wrote it in a missunderstanding way, sorry for that. What I wanted to say, is that the way OpenLDAP-configuration works is completely new and installing OpenLDAP *from the scratch* causes OpenLDAP to use directly the new online-config. Debian also doesn't convert the config when you update/upgrade (as far as I know), but when it is newly installed it works with online-config by default. I assumed that the upgrade is done on a new machine (I would recommend that) or at least tested first on a new machine... Regards, Ivan -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Am Dienstag 18 Januar 2011, 08:44:59 schrieb Ivan De Masi:
Am 17.01.2011 17:28, schrieb Ralf Haferkamp:
Am Montag 17 Januar 2011, 14:20:08 schrieb Ivan De Masi:
Am 17.01.2011 11:31, schrieb Claudio Prono:
Hello all,
I have to upgrade an OpenSuSE 11.0, with role of PDC with LDAP and SAMBA into an OpenSuSE 11.3. Any hint to do it? Any precaution i have to take before do the upgrade? Or, even better, is all easy and automatized and at the first boot of the new SO it works like a charm? Any experence of someone ?
Ciao Claudio,
I can't tell you much about Samba and PDC, but you should care about LDAP! Since Version 2.3 of OpenLDAP the "online-configuration" of LDAP is supported and installed by default. This means your slapd.conf is in your ldap-database itself. As I can tell from Debian squeeze you still can start slapd with your slapd.conf,BUT you have to configure this first!
This is wrong. Opposite to what Debian seems to do (I didn't check that myself), the packages in openSUSE will NOT automatically convert an existing slapd.conf based configuration to the back-config based configuration during the update. slapd will continue to work using slapd.conf. Converting from slapd.conf to the back-config database needs to be done manually (if wanted at all).
Hello,
so maybe I wrote it in a missunderstanding way, sorry for that.
What I wanted to say, is that the way OpenLDAP-configuration works is completely new and installing OpenLDAP *from the scratch* causes OpenLDAP to use directly the new online-config. Which is also not completely correct ;). The init script on openSUSE is checks for the presence of /etc/openldap/slapd.conf, as long as that file exists, slapd is started so that it reads its configuration from there. Our RPM contains a default slapd.conf so by default slapd will use slapd.conf. You can force it to use the configuration database by setting OPENLDAP_CONFIG_BACKEND="ldap" in /etc/sysconfig/openldap. We choosed to still use slapd.conf by default as that is what people are used to. Additionally it is a little easier to setup a slapd.conf base LDAP server for first time users than using the configuration database. (Note that we might change this at some point in the future, I am open to suggestions here.)
Debian also doesn't convert the config when you update/upgrade (as far as I know), but when it is newly installed it works with online-config by default. Ok. As I said I didn't check how Debian handles it. I just remember a recent mail on some openldap mailinglist that seemed to indicate they are migrating existing slapd.conf configurations to the back-config database upon installation of the package. (I might have missunderstood that though).
I assumed that the upgrade is done on a new machine (I would recommend that) or at least tested first on a new machine... Yes, that would definitely be a good idea.
regards, Ralf -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (3)
-
Claudio Prono -
Ivan De Masi -
Ralf Haferkamp