openldap-software

openldap-software@openldap.org

2719 discussions

After a db corruption LDAP (db recovered) starts, then dies.
by lauro＠npd.ufsc.br 01 Jun '07

01 Jun '07

$OpenLDAP: slapd 2.3.19 (Jul 28 2006 17:19:27) - opensuse 10.1 Hi, Yesterday my LDAP was working, today I tried to connect, no success, and after a few tries, decided to check, it was not running. I was not able to start it, logs said bdb was corrupted. I used db_recover, no success again. Then I read several documents and got the bdb working again, with the ldap service stopped I rebuilt the indexes with no error messages (slapindex -v). What I did was to remove every file from /var/lib/ldap/, except for DB_CONFIG and id2entry.bdb. The problem was after a machine reboot the ldap service started, then stopped, with no hints (at least to me) on the log files. Now I made another dumb thing, deleted the old id2entry.bdb and I can't even rebuild indexes with slapindex. Before, when LDAP was working: May 29 11:14:58 host slapd[4036]: backend_startup_one: starting "dc=sub,dc=domain,dc=xxx" May 29 11:14:58 host slapd[4036]: bdb_db_open: dc=sub,dc=domain,dc=xxx May 29 11:14:58 host slapd[4036]: bdb_db_open: dbenv_open(/var/lib/ldap) May 29 11:14:58 host slapd[4036]: slapd starting May 29 11:14:59 host slapd[4036]: connection_get(12) May 29 11:14:59 host slapd[4036]: connection_get(12): got connid=0 ---- Today, after reboot and all said above (it starts, then shuts down with no hints): Jun 1 11:31:28 host slapd[3234]: backend_startup_one: starting "dc=sub,dc=domain,dc=xxx" Jun 1 11:31:28 host slapd[3234]: bdb_db_open: dc=sub,dc=domain,dc=xxx Jun 1 11:31:28 host slapd[3234]: bdb_db_open: dbenv_open(/var/lib/ldap) Jun 1 11:31:29 host slapd[3234]: slapd starting Jun 1 11:31:29 sono slapd[3234]: daemon: added 4r Jun 1 11:31:29 sono slapd[3234]: daemon: added 7r Jun 1 11:31:29 sono slapd[3234]: daemon: added 8r ---- thanks for you time, lauro ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

2 1

OpenLDAP Server version differences?
by Mikael Bak 01 Jun '07

01 Jun '07

Hi list, I'm new here. This is my first post on this list. I'm sort of new to LDAP as well. I have searched google for an answer to my problem that really puzzles me. I'd appreciate any pointers. I have installed OpenLDAP server on two different server platforms: Server1: OS: Tinysofa classic server (Linux kernel 2.6.16) OpenLDAP version: 2.1.30 (rpm bundled with distribution) Server2: OS: FreeBSD 6.2 OpenLDAP version: 2.3.35 (installed from ports) I have made a simple address book and added the same LDIF file to both servers with the ldapadd command. Looking at the address books from Thunderbird whey look the same but still they behave a bit differently. The address book on Server1 lists all the entries in the address book when no search criteria is given (other than objectClass=*). The address book on Server2 lists NO entries for the same search criteria! When giving search criteria like (mail=*bo*) and so on gives the same results from both servers. What configurations parameters can I change on the OpenLDAP server in order to control this behavior? I can post LDIF files and configuration files on request. TIA, Mikael Bak Budapest, Hungary

1 0

error (80) - additional info: entry store failed
by Ace 01 Jun '07

01 Jun '07

Hi Experts, I am trying to add an entry to the LDAP database. But I get following error. LDAP already has around 200 or more entries. ldap_add: Internal (implementation specific) error (80) additional info: entry store failed Can database full be the reason(I have only 200 entries) ? If yes, how can I overcome this? Following is the log of ldapadd with debug option. LDAP version - OpenLDAP 2.2.13 Also, ldif file has - dn: cn=radjaik1,ou=Peoples,dc=zlemail,dc=com uid: 1099 givenName: rajanik1 objectClass: top objectClass: inetOrgPerson userPassword: rajaaik1 sn: rajnaik1 cn: radjaik1 ============================================================================ # ldapadd -x -W -v -d-1 -D "cn=root,dc=zlemail,dc=com" -f t2.ldif ldap_initialize( <DEFAULT> ) ldap_create Enter LDAP Password: ldap_bind_s ldap_simple_bind_s ldap_sasl_bind_s ldap_sasl_bind ldap_send_initial_request ldap_new_connection ldap_int_open_connection ldap_connect_to_host: TCP 127.0.0.1:389 ldap_new_socket: 4 ldap_prepare_socket: 4 ldap_connect_to_host: Trying 127.0.0.1:389 ldap_connect_timeout: fd: 4 tm: -1 async: 0 ldap_ndelay_on: 4 ldap_is_sock_ready: 4 ldap_ndelay_off: 4 ldap_open_defconn: successful ldap_send_server_request ber_flush: 45 bytes to sd 4 0000: 30 2b 02 01 01 60 26 02 01 03 04 19 63 6e 3d 72 0+...`&.....cn=r 0010: 6f 6f 74 2c 64 63 3d 7a 6c 65 6d 61 69 6c 2c 64 oot,dc=zlemail,d 0020: 63 3d 63 6f 6d 80 06 73 65 63 72 65 74 c=com..secret ldap_write: want=45, written=45 0000: 30 2b 02 01 01 60 26 02 01 03 04 19 63 6e 3d 72 0+...`&.....cn=r 0010: 6f 6f 74 2c 64 63 3d 7a 6c 65 6d 61 69 6c 2c 64 oot,dc=zlemail,d 0020: 63 3d 63 6f 6d 80 06 73 65 63 72 65 74 c=com..secret ldap_result msgid 1 ldap_chkResponseList for msgid=1, all=1 ldap_chkResponseList returns NULL wait4msg (infinite timeout), msgid 1 wait4msg continue, msgid 1, all 1 ** Connections: * host: 127.0.0.1 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 31 13:14:58 2007 ** Outstanding Requests: * msgid 1, origid 1, status InProgress outstanding referrals 0, parent count 0 ** Response Queue: Empty ldap_chkResponseList for msgid=1, all=1 ldap_chkResponseList returns NULL ldap_int_select read1msg: msgid 1, all 1 ber_get_next ldap_read: want=8, got=8 0000: 30 0c 02 01 01 61 07 0a 0....a.. ldap_read: want=6, got=6 0000: 01 00 04 00 04 00 ...... ber_get_next: tag 0x30 len 12 contents: ber_dump: buf=0x09197c48 ptr=0x09197c48 end=0x09197c54 len=12 0000: 02 01 01 61 07 0a 01 00 04 00 04 00 ...a........ ldap_read: message type bind msgid 1, original id 1 ber_scanf fmt ({iaa) ber: ber_dump: buf=0x09197c48 ptr=0x09197c4b end=0x09197c54 len=9 0000: 61 07 0a 01 00 04 00 04 00 a........ read1msg: 0 new referrals read1msg: mark request completed, id = 1 request 1 done res_errno: 0, res_error: <>, res_matched: <> ldap_free_request (origid 1, msgid 1) ldap_free_connection ldap_free_connection: refcnt 1 ldap_parse_result ber_scanf fmt ({iaa) ber: ber_dump: buf=0x09197c48 ptr=0x09197c4b end=0x09197c54 len=9 0000: 61 07 0a 01 00 04 00 04 00 a........ ber_scanf fmt (}) ber: ber_dump: buf=0x09197c48 ptr=0x09197c54 end=0x09197c54 len=0 ldap_msgfree add uid: 1099 add givenName: rajanik1 add objectClass: top inetOrgPerson add userPassword: rajaaik1 add sn: rajnaik1 add cn: radjaik1 adding new entry "cn=radjaik1,ou=Peoples,dc=zlemail,dc=com" ldap_add_ext ldap_send_initial_request ldap_send_server_request ber_flush: 195 bytes to sd 4 0000: 30 81 c0 02 01 02 68 81 ba 04 28 63 6e 3d 72 61 0.....h...(cn=ra 0010: 64 6a 61 69 6b 31 2c 6f 75 3d 50 65 6f 70 6c 65 djaik1,ou=People 0020: 73 2c 64 63 3d 7a 6c 65 6d 61 69 6c 2c 64 63 3d s,dc=zlemail,dc= 0030: 63 6f 6d 30 81 8d 30 0d 04 03 75 69 64 31 06 04 com0..0...uid1.. 0040: 04 31 30 39 39 30 17 04 09 67 69 76 65 6e 4e 61 .10990...givenNa 0050: 6d 65 31 0a 04 08 72 61 6a 61 6e 69 6b 31 30 23 me1...rajanik10# 0060: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 14 04 ..objectClass1.. 0070: 03 74 6f 70 04 0d 69 6e 65 74 4f 72 67 50 65 72 .top..inetOrgPer 0080: 73 6f 6e 30 1a 04 0c 75 73 65 72 50 61 73 73 77 son0...userPassw 0090: 6f 72 64 31 0a 04 08 72 61 6a 61 61 69 6b 31 30 ord1...rajaaik10 00a0: 10 04 02 73 6e 31 0a 04 08 72 61 6a 6e 61 69 6b ...sn1...rajnaik 00b0: 31 30 10 04 02 63 6e 31 0a 04 08 72 61 64 6a 61 10...cn1...radja 00c0: 69 6b 31 ik1 ldap_write: want=195, written=195 0000: 30 81 c0 02 01 02 68 81 ba 04 28 63 6e 3d 72 61 0.....h...(cn=ra 0010: 64 6a 61 69 6b 31 2c 6f 75 3d 50 65 6f 70 6c 65 djaik1,ou=People 0020: 73 2c 64 63 3d 7a 6c 65 6d 61 69 6c 2c 64 63 3d s,dc=zlemail,dc= 0030: 63 6f 6d 30 81 8d 30 0d 04 03 75 69 64 31 06 04 com0..0...uid1.. 0040: 04 31 30 39 39 30 17 04 09 67 69 76 65 6e 4e 61 .10990...givenNa 0050: 6d 65 31 0a 04 08 72 61 6a 61 6e 69 6b 31 30 23 me1...rajanik10# 0060: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 14 04 ..objectClass1.. 0070: 03 74 6f 70 04 0d 69 6e 65 74 4f 72 67 50 65 72 .top..inetOrgPer 0080: 73 6f 6e 30 1a 04 0c 75 73 65 72 50 61 73 73 77 son0...userPassw 0090: 6f 72 64 31 0a 04 08 72 61 6a 61 61 69 6b 31 30 ord1...rajaaik10 00a0: 10 04 02 73 6e 31 0a 04 08 72 61 6a 6e 61 69 6b ...sn1...rajnaik 00b0: 31 30 10 04 02 63 6e 31 0a 04 08 72 61 64 6a 61 10...cn1...radja 00c0: 69 6b 31 ik1 modify complete ldap_result msgid 2 ldap_chkResponseList for msgid=2, all=1 ldap_chkResponseList returns NULL wait4msg (infinite timeout), msgid 2 wait4msg continue, msgid 2, all 1 ** Connections: * host: 127.0.0.1 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 31 13:14:58 2007 ** Outstanding Requests: * msgid 2, origid 2, status InProgress outstanding referrals 0, parent count 0 ** Response Queue: Empty ldap_chkResponseList for msgid=2, all=1 ldap_chkResponseList returns NULL ldap_int_select read1msg: msgid 2, all 1 ber_get_next ldap_read: want=8, got=8 0000: 30 1e 02 01 02 69 19 0a 0....i.. ldap_read: want=24, got=24 0000: 01 50 04 00 04 12 65 6e 74 72 79 20 73 74 6f 72 .P....entry stor 0010: 65 20 66 61 69 6c 65 64 e failed ber_get_next: tag 0x30 len 30 contents: ber_dump: buf=0x09196dd0 ptr=0x09196dd0 end=0x09196dee len=30 0000: 02 01 02 69 19 0a 01 50 04 00 04 12 65 6e 74 72 ...i...P....entr 0010: 79 20 73 74 6f 72 65 20 66 61 69 6c 65 64 y store failed ldap_read: message type add msgid 2, original id 2 ber_scanf fmt ({iaa) ber: ber_dump: buf=0x09196dd0 ptr=0x09196dd3 end=0x09196dee len=27 0000: 69 19 0a 01 50 04 00 04 12 65 6e 74 72 79 20 73 i...P....entry s 0010: 74 6f 72 65 20 66 61 69 6c 65 64 tore failed read1msg: 0 new referrals read1msg: mark request completed, id = 2 request 2 done res_errno: 0, res_error: <>, res_matched: <> ldap_free_request (origid 2, msgid 2) ldap_free_connection ldap_free_connection: refcnt 1 ldap_parse_result ber_scanf fmt ({iaa) ber: ber_dump: buf=0x09196dd0 ptr=0x09196dd3 end=0x09196dee len=27 0000: 69 19 0a 01 50 04 00 04 12 65 6e 74 72 79 20 73 i...P....entry s 0010: 74 6f 72 65 20 66 61 69 6c 65 64 tore failed ber_scanf fmt (}) ber: ber_dump: buf=0x09196dd0 ptr=0x09196dee end=0x09196dee len=0 ldap_msgfree ldap_perror ldap_add: Internal (implementation specific) error (80) additional info: entry store failed ldap_free_connection ldap_send_unbind ber_flush: 7 bytes to sd 4 0000: 30 05 02 01 03 42 00 0....B. ldap_write: want=7, written=7 0000: 30 05 02 01 03 42 00 0....B. ldap_free_connection: actually freed ====================================================================================== -- Cheers, Rajan

4 4

ldap_add: Already exists (68)
by Ace 01 Jun '07

01 Jun '07

Hi Friends, I am trying to add an entry to LDAP. But I get "ldap_add: Already exists (68)". I checked with LDAP browser, entry that I am adding doesn't exists, still I got this error. Earlier the same entry was there but I had deleted and restarted LDAP. Following is the log on ldapadd with debug option - LDAP version - OpenLDAP 2.2.13 Also, ldif file has - dn: cn=ramnaik1,ou=Peoples,dc=zlemail,dc=com uid: 1099 givenName: ramnaik1 objectClass: top objectClass: inetOrgPerson userPassword: ramnaik1 sn: ramnaik1 cn: ramnaik1 =============================================================== # ldapadd -x -W -v -d-1 -D "cn=root,dc=zlemail,dc=com" -f t2.ldif ldap_initialize( <DEFAULT> ) ldap_create Enter LDAP Password: ldap_bind_s ldap_simple_bind_s ldap_sasl_bind_s ldap_sasl_bind ldap_send_initial_request ldap_new_connection ldap_int_open_connection ldap_connect_to_host: TCP 127.0.0.1:389 ldap_new_socket: 4 ldap_prepare_socket: 4 ldap_connect_to_host: Trying 127.0.0.1:389 ldap_connect_timeout: fd: 4 tm: -1 async: 0 ldap_ndelay_on: 4 ldap_is_sock_ready: 4 ldap_ndelay_off: 4 ldap_open_defconn: successful ldap_send_server_request ber_flush: 45 bytes to sd 4 0000: 30 2b 02 01 01 60 26 02 01 03 04 19 63 6e 3d 72 0+...`&.....cn=r 0010: 6f 6f 74 2c 64 63 3d 7a 6c 65 6d 61 69 6c 2c 64 oot,dc=zlemail,d 0020: 63 3d 63 6f 6d 80 06 73 65 63 72 65 74 c=com..secret ldap_write: want=45, written=45 0000: 30 2b 02 01 01 60 26 02 01 03 04 19 63 6e 3d 72 0+...`&.....cn=r 0010: 6f 6f 74 2c 64 63 3d 7a 6c 65 6d 61 69 6c 2c 64 oot,dc=zlemail,d 0020: 63 3d 63 6f 6d 80 06 73 65 63 72 65 74 c=com..secret ldap_result msgid 1 ldap_chkResponseList for msgid=1, all=1 ldap_chkResponseList returns NULL wait4msg (infinite timeout), msgid 1 wait4msg continue, msgid 1, all 1 ** Connections: * host: 127.0.0.1 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 31 13:10:47 2007 ** Outstanding Requests: * msgid 1, origid 1, status InProgress outstanding referrals 0, parent count 0 ** Response Queue: Empty ldap_chkResponseList for msgid=1, all=1 ldap_chkResponseList returns NULL ldap_int_select read1msg: msgid 1, all 1 ber_get_next ldap_read: want=8, got=8 0000: 30 0c 02 01 01 61 07 0a 0....a.. ldap_read: want=6, got=6 0000: 01 00 04 00 04 00 ...... ber_get_next: tag 0x30 len 12 contents: ber_dump: buf=0x099eec48 ptr=0x099eec48 end=0x099eec54 len=12 0000: 02 01 01 61 07 0a 01 00 04 00 04 00 ...a........ ldap_read: message type bind msgid 1, original id 1 ber_scanf fmt ({iaa) ber: ber_dump: buf=0x099eec48 ptr=0x099eec4b end=0x099eec54 len=9 0000: 61 07 0a 01 00 04 00 04 00 a........ read1msg: 0 new referrals read1msg: mark request completed, id = 1 request 1 done res_errno: 0, res_error: <>, res_matched: <> ldap_free_request (origid 1, msgid 1) ldap_free_connection ldap_free_connection: refcnt 1 ldap_parse_result ber_scanf fmt ({iaa) ber: ber_dump: buf=0x099eec48 ptr=0x099eec4b end=0x099eec54 len=9 0000: 61 07 0a 01 00 04 00 04 00 a........ ber_scanf fmt (}) ber: ber_dump: buf=0x099eec48 ptr=0x099eec54 end=0x099eec54 len=0 ldap_msgfree add uid: 1013 add givenName: ramnaik1 add objectClass: top inetOrgPerson add userPassword: ramnaik1 add sn: ramnaik1 add cn: ramnaik1 adding new entry "cn=ramnaik1,ou=Peoples,dc=zlemail,dc=com" ldap_add_ext ldap_send_initial_request ldap_send_server_request ber_flush: 195 bytes to sd 4 0000: 30 81 c0 02 01 02 68 81 ba 04 28 63 6e 3d 72 61 0.....h...(cn=ra 0010: 6d 6e 61 69 6b 31 2c 6f 75 3d 50 65 6f 70 6c 65 mnaik1,ou=People 0020: 73 2c 64 63 3d 7a 6c 65 6d 61 69 6c 2c 64 63 3d s,dc=zlemail,dc= 0030: 63 6f 6d 30 81 8d 30 0d 04 03 75 69 64 31 06 04 com0..0...uid1.. 0040: 04 31 30 31 33 30 17 04 09 67 69 76 65 6e 4e 61 .10130...givenNa 0050: 6d 65 31 0a 04 08 72 61 6d 6e 61 69 6b 31 30 23 me1...ramnaik10# 0060: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 14 04 ..objectClass1.. 0070: 03 74 6f 70 04 0d 69 6e 65 74 4f 72 67 50 65 72 .top..inetOrgPer 0080: 73 6f 6e 30 1a 04 0c 75 73 65 72 50 61 73 73 77 son0...userPassw 0090: 6f 72 64 31 0a 04 08 72 61 6d 6e 61 69 6b 31 30 ord1...ramnaik10 00a0: 10 04 02 73 6e 31 0a 04 08 72 61 6d 6e 61 69 6b ...sn1...ramnaik 00b0: 31 30 10 04 02 63 6e 31 0a 04 08 72 61 6d 6e 61 10...cn1...ramna 00c0: 69 6b 31 ik1 ldap_write: want=195, written=195 0000: 30 81 c0 02 01 02 68 81 ba 04 28 63 6e 3d 72 61 0.....h...(cn=ra 0010: 6d 6e 61 69 6b 31 2c 6f 75 3d 50 65 6f 70 6c 65 mnaik1,ou=People 0020: 73 2c 64 63 3d 7a 6c 65 6d 61 69 6c 2c 64 63 3d s,dc=zlemail,dc= 0030: 63 6f 6d 30 81 8d 30 0d 04 03 75 69 64 31 06 04 com0..0...uid1.. 0040: 04 31 30 31 33 30 17 04 09 67 69 76 65 6e 4e 61 .10130...givenNa 0050: 6d 65 31 0a 04 08 72 61 6d 6e 61 69 6b 31 30 23 me1...ramnaik10# 0060: 04 0b 6f 62 6a 65 63 74 43 6c 61 73 73 31 14 04 ..objectClass1.. 0070: 03 74 6f 70 04 0d 69 6e 65 74 4f 72 67 50 65 72 .top..inetOrgPer 0080: 73 6f 6e 30 1a 04 0c 75 73 65 72 50 61 73 73 77 son0...userPassw 0090: 6f 72 64 31 0a 04 08 72 61 6d 6e 61 69 6b 31 30 ord1...ramnaik10 00a0: 10 04 02 73 6e 31 0a 04 08 72 61 6d 6e 61 69 6b ...sn1...ramnaik 00b0: 31 30 10 04 02 63 6e 31 0a 04 08 72 61 6d 6e 61 10...cn1...ramna 00c0: 69 6b 31 ik1 modify complete ldap_result msgid 2 ldap_chkResponseList for msgid=2, all=1 ldap_chkResponseList returns NULL wait4msg (infinite timeout), msgid 2 wait4msg continue, msgid 2, all 1 ** Connections: * host: 127.0.0.1 port: 389 (default) refcnt: 2 status: Connected last used: Thu May 31 13:10:47 2007 ** Outstanding Requests: * msgid 2, origid 2, status InProgress outstanding referrals 0, parent count 0 ** Response Queue: Empty ldap_chkResponseList for msgid=2, all=1 ldap_chkResponseList returns NULL ldap_int_select read1msg: msgid 2, all 1 ber_get_next ldap_read: want=8, got=8 0000: 30 0c 02 01 02 69 07 0a 0....i.. ldap_read: want=6, got=6 0000: 01 44 04 00 04 00 .D.... ber_get_next: tag 0x30 len 12 contents: ber_dump: buf=0x099eec48 ptr=0x099eec48 end=0x099eec54 len=12 0000: 02 01 02 69 07 0a 01 44 04 00 04 00 ...i...D.... ldap_read: message type add msgid 2, original id 2 ber_scanf fmt ({iaa) ber: ber_dump: buf=0x099eec48 ptr=0x099eec4b end=0x099eec54 len=9 0000: 69 07 0a 01 44 04 00 04 00 i...D.... read1msg: 0 new referrals read1msg: mark request completed, id = 2 request 2 done res_errno: 0, res_error: <>, res_matched: <> ldap_free_request (origid 2, msgid 2) ldap_free_connection ldap_free_connection: refcnt 1 ldap_parse_result ber_scanf fmt ({iaa) ber: ber_dump: buf=0x099eec48 ptr=0x099eec4b end=0x099eec54 len=9 0000: 69 07 0a 01 44 04 00 04 00 i...D.... ber_scanf fmt (}) ber: ber_dump: buf=0x099eec48 ptr=0x099eec54 end=0x099eec54 len=0 ldap_msgfree ldap_perror ldap_add: Already exists (68) ldap_free_connection ldap_send_unbind ber_flush: 7 bytes to sd 4 0000: 30 05 02 01 03 42 00 0....B. ldap_write: want=7, written=7 0000: 30 05 02 01 03 42 00 0....B. ldap_free_connection: actually freed ========================================================================== -- Cheers, Rajan

2 1

ldapmodify(1) + postread
by Andreas Hasenack 31 May '07

31 May '07

openldap 2.3.35 (server and client) I'm trying to use the postread control together with the modify+increment extension. mod+inc works, but I get nothing back with the ldapmodify(1) command. Network sniffing shows that the server is indeed returning the new value: seems just that ldapmodify(1) is not displaying it. $ ldapmodify -x -D cn=admin,dc=example,dc=com -w pass -e postread=uidNumber << EOF dn: cn=unixidpool,dc=example,dc=com changetype: modify increment: uidNumber uidNumber: 1 EOF modifying entry "cn=unixidpool,dc=example,dc=com" uidNumber was incremented, so that part worked. Am I not using ldapmodify(1) correctly or is this a missing feature in that command?

1 0

Replication with slurpd and ssl Tunnel
by Christian Hohmann 31 May '07

31 May '07

Hi List, I set up my openldap Directory on SUSE 10. I have an LDAP Master and an LDAP Slave synchronizing with slurpd. Replication is fine, but I want to add ssl Tunneling by using ldaps:// For this I created the certification authority and the certificates. I configured the slapd.conf and the ldap.conf on server and client. Now my Problem: The slurpd is sending the Change to the ldap Slave. The slave gets the update and write it to the directory (i have proved with slapcat) Then the ldap-service on the Slave is hanging up itself. The process is still there (ps -A) but there is no further activity and the service is not reachable by ldapsearch. This occures everytime at the same place: After the bdb_add during sending the confirmation to the slurpd. The Log of the slurpd on ldap-Master says: request done: ld 0x.... Could somebody give me a hint? Regards - Christian _______________________________________________________________ SMS schreiben mit WEB.DE FreeMail - einfach, schnell und kostenguenstig. Jetzt gleich testen! http://f.web.de/?mc=021192

1 0

Help needed with replication and ldapadd on version 2.2
by Jonathan Halevy 31 May '07

31 May '07

Hello, I have a slave server that I try to run ldapadd from remote and it fails. I get the following error: ldap_add: Internal (implementation specific) error (80) additional info: no structuralObjectClass operational attribute If I remove the updatedn line from slapd.coinf / restart the ldap, the command works. Yet, now* replication does not.* Please tell me what am I doing wrong. Is it related the the schema? Is it related to access control? Any help will be appreciated. Jonathan

2 3

Re: ldap_sasl_interactive_bind_s
by Howard Chu 31 May '07

31 May '07

This doesn't belong on the -devel list. Quanah Gibson-Mount wrote: > I'm working on a patch to add LDAP SASL support to Postfix 2.4 (I made one > for 2.2/2.3 a long time ago), and this time I want it to be accepted > upstream, so I'm working on what they feel the issues are. > > Right now, they > > (a) always want LDAP_SASL_QUIET enabled (makes perfect sense to me) > and > (b) want the SASL mechanism to be a list of mechanisms the client supports, > that should be tried when connecting to the server. > > I think (b) is rather non-sensical, given the configurations are rather > different between things like DIGEST-MD5, EXTERNAL, and GSSAPI just to > start, but... > > I assume to support this I should use the ldap_sasl_interactive_bind_s > function, which takes as a parameter a list of mechanisms, if I'm reading > it right. The question to me comes up with mixing LDAP_SASL_QUIET in, > because part of the routine involved with multiple mechansisms seems to > want interaction with the client. > > My assumption is that if I use ldap_sasl_interactive_bind_s, with > LDAP_SASL_QUIET, and pass in a list of mechanisms, the client will just use > the first mechanism in its list. Is that correct? No. The list of mechanisms is passed directly to the SASL library. The SASL library will choose a mechanism from that list based on the security properties that were set. And obviously, since it is a separate library that has no knowledge of the LDAP_SASL_ flags, LDAP_SASL_QUIET doesn't affect it at all. -- -- Howard Chu Chief Architect, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

3 2

TLS/SSL problems
by Craig 31 May '07

31 May '07

I am running openldap 2.2.13. I am having a problem getting TLS to work. I have done numerous searches, but most web pages seem to deal with LDAP/kerberos issues. We do not run kerberos. I am only trying to prevent passwords from being sent in the clear. I have followed the instructions on this page: http://www.ibm.com/developerworks/linux/library/l-openldap/ I am able to run ldapsearch with simple auth: > ldapsearch -x but, am not able to do any of the following: > ldapsearch > ldapsearch -X u:myuid > ldapsearch -X dn:uid=myuid,ou=People,dc=example,dc=com The error is (with "-d 255"): ... SASL/GSSAPI authentication started ldap_perror ldap_sasl_interactive_bind_s: Local error (-2) additional info: SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (No credentials cache found) It looks like the server is running fine. But, the logs don't really indicate what the problem is. (It seems to be more of a client issue, but still the server should give some hint in the logs.) If you need more debugging info, just let me know. Any help would be greatly appreciated. TIA Craig

7 9

DB_KEYEXIST: Key/data pair already exists (-30996)
by JOYDEEP 30 May '07

30 May '07

Dear list, after modifying the ldif file ; If I try to use slapadd commend it gives errors like --------------------- DB_KEYEXIST: Key/data pair already exists (-30996) --------------------------------------- how can I delete the DB key ? thanks

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-software