Whoops, meant to send to list too :) sorry<br><br>(#) $OpenLDAP: slapd 2.3.27 (Oct&nbsp; 4 2007 23:24:38) $<br>daemon_init: &lt;null&gt;<br>daemon_init: listen on ldap:///<br>daemon_init: 1 listeners to open...<br>ldap_url_parse_ext(ldap:///)
<br>daemon: listener initialized ldap:///<br>daemon_init: 2 listeners opened<br>daemon_init: [0]DNSServiceRegister<br>slapd init: initiated server.<br>slap_sasl_init: initialized!<br>bdb_back_initialize: initialize BDB backend
<br>bdb_back_initialize: Sleepycat Software: Berkeley DB 4.2.52: (December&nbsp; 3, 2003)<br>hdb_back_initialize: initialize HDB backend<br>hdb_back_initialize: Sleepycat Software: Berkeley DB 4.2.52: (December&nbsp; 3, 2003)<br>reading config file /private/etc/openldap/slapd.conf
<br>line 5 (include&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; /private/etc/openldap/schema/core.schema)<br>reading config file /private/etc/openldap/schema/core.schema<br>line 77 (attributetype ( <a href="http://2.5.4.2">2.5.4.2</a> NAME &#39;knowledgeInformation&#39; DESC &#39;RFC2256: knowledge information&#39; EQUALITY caseIgnoreMatch SYNTAX 
1.3.6.1.4.1.1466.115.121.1.15{32768} ))<br>line 86 (attributetype ( <a href="http://2.5.4.4">2.5.4.4</a> NAME ( &#39;sn&#39; &#39;surname&#39; ) DESC &#39;RFC2256: last (family) name(s) for which the entity is known by&#39; SUP name ))
<br>line 92 (attributetype ( <a href="http://2.5.4.5">2.5.4.5</a> NAME &#39;serialNumber&#39; DESC &#39;RFC2256: serial number of the entity&#39; EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{64}
 ))<br>line 96 (attributetype ( <a href="http://2.5.4.6">2.5.4.6</a> NAME ( &#39;c&#39; &#39;countryName&#39; ) DESC &#39;RFC2256: ISO-3166 country 2-letter code&#39; SUP name SINGLE-VALUE ))<br>line 100 (attributetype ( 
<a href="http://2.5.4.7">2.5.4.7</a> NAME ( &#39;l&#39; &#39;localityName&#39; ) DESC &#39;RFC2256: locality which this object resides in&#39; SUP name ))<br>line 104 (attributetype ( <a href="http://2.5.4.8">2.5.4.8</a> NAME ( &#39;st&#39; &#39;stateOrProvinceName&#39; ) DESC &#39;RFC2256: state or province which this object resides in&#39; SUP name ))
<br>line 110 (attributetype ( <a href="http://2.5.4.9">2.5.4.9</a> NAME ( &#39;street&#39; &#39;streetAddress&#39; ) DESC &#39;RFC2256: street address of this object&#39; EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 
1.3.6.1.4.1.1466.115.121.1.15{128} ))<br>line 114 (attributetype ( <a href="http://2.5.4.10">2.5.4.10</a> NAME ( &#39;o&#39; &#39;organizationName&#39; ) DESC &#39;RFC2256: organization this object belongs to&#39; SUP name ))
<br>line 118 (attributetype ( <a href="http://2.5.4.11">2.5.4.11</a> NAME ( &#39;ou&#39; &#39;organizationalUnitName&#39; ) DESC &#39;RFC2256: organizational unit this object belongs to&#39; SUP name ))<br>line 122 (attributetype ( 
<a href="http://2.5.4.12">2.5.4.12</a> NAME &#39;title&#39; DESC &#39;RFC2256: title associated with the entity&#39; SUP name ))<br>line 134 (attributetype ( <a href="http://2.5.4.14">2.5.4.14</a> NAME &#39;searchGuide&#39; DESC &#39;RFC2256: search guide, deprecated by enhancedSearchGuide&#39; SYNTAX 
1.3.6.1.4.1.1466.115.121.1.25 ))<br>line 140 (attributetype ( <a href="http://2.5.4.15">2.5.4.15</a> NAME &#39;businessCategory&#39; DESC &#39;RFC2256: business category&#39; EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 
1.3.6.1.4.1.1466.115.121.1.15{128} ))<br>line 146 (attributetype ( <a href="http://2.5.4.16">2.5.4.16</a> NAME &#39;postalAddress&#39; DESC &#39;RFC2256: postal address&#39; EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch SYNTAX 
1.3.6.1.4.1.1466.115.121.1.41 ))<br>line 152 (attributetype ( <a href="http://2.5.4.17">2.5.4.17</a> NAME &#39;postalCode&#39; DESC &#39;RFC2256: postal code&#39; EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 
1.3.6.1.4.1.1466.115.121.1.15{40} ))<br>line 158 (attributetype ( <a href="http://2.5.4.18">2.5.4.18</a> NAME &#39;postOfficeBox&#39; DESC &#39;RFC2256: Post Office Box&#39; EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 
1.3.6.1.4.1.1466.115.121.1.15{40} ))<br>line 164 (attributetype ( <a href="http://2.5.4.19">2.5.4.19</a> NAME &#39;physicalDeliveryOfficeName&#39; DESC &#39;RFC2256: Physical Delivery Office Name&#39; EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 
1.3.6.1.4.1.1466.115.121.1.15{128} ))<br>line 170 (attributetype ( <a href="http://2.5.4.20">2.5.4.20</a> NAME &#39;telephoneNumber&#39; DESC &#39;RFC2256: Telephone Number&#39; EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 
1.3.6.1.4.1.1466.115.121.1.50{32} ))<br>line 174 (attributetype ( <a href="http://2.5.4.21">2.5.4.21</a> NAME &#39;telexNumber&#39; DESC &#39;RFC2256: Telex Number&#39; SYNTAX 1.3.6.1.4.1.1466.115.121.1.52 ))<br>line 178 (attributetype ( 
<a href="http://2.5.4.22">2.5.4.22</a> NAME &#39;teletexTerminalIdentifier&#39; DESC &#39;RFC2256: Teletex Terminal Identifier&#39; SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 ))<br>line 182 (attributetype ( <a href="http://2.5.4.23">
2.5.4.23</a> NAME ( &#39;facsimileTelephoneNumber&#39; &#39;fax&#39; ) DESC &#39;RFC2256: Facsimile (Fax) Telephone Number&#39; SYNTAX 1.3.6.1.4.1.1466.115.121.1.22 ))<br>line 188 (attributetype ( <a href="http://2.5.4.24">
2.5.4.24</a> NAME &#39;x121Address&#39; DESC &#39;RFC2256: X.121 Address&#39; EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{15} ))<br>line 194 (attributetype ( <a href="http://2.5.4.25">
2.5.4.25</a> NAME &#39;internationaliSDNNumber&#39; DESC &#39;RFC2256: international ISDN number&#39; EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{16} ))<br>line 199 (attributetype ( 
<a href="http://2.5.4.26">2.5.4.26</a> NAME &#39;registeredAddress&#39; DESC &#39;RFC2256: registered postal address&#39; SUP postalAddress SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 ))<br>line 205 (attributetype ( <a href="http://2.5.4.27">
2.5.4.27</a> NAME &#39;destinationIndicator&#39; DESC &#39;RFC2256: destination indicator&#39; EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{128} ))<br>line 210 (attributetype ( 
<a href="http://2.5.4.28">2.5.4.28</a> NAME &#39;preferredDeliveryMethod&#39; DESC &#39;RFC2256: preferred delivery method&#39; SYNTAX 1.3.6.1.4.1.1466.115.121.1.14 SINGLE-VALUE ))<br>line 216 (attributetype ( <a href="http://2.5.4.29">
2.5.4.29</a> NAME &#39;presentationAddress&#39; DESC &#39;RFC2256: presentation address&#39; EQUALITY presentationAddressMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.43 SINGLE-VALUE ))<br>line 221 (attributetype ( <a href="http://2.5.4.30">
2.5.4.30</a> NAME &#39;supportedApplicationContext&#39; DESC &#39;RFC2256: supported application context&#39; EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 ))<br>line 225 (attributetype ( <a href="http://2.5.4.31">
2.5.4.31</a> NAME &#39;member&#39; DESC &#39;RFC2256: member of a group&#39; SUP distinguishedName ))<br>line 229 (attributetype ( <a href="http://2.5.4.32">2.5.4.32</a> NAME &#39;owner&#39; DESC &#39;RFC2256: owner (of the object)&#39; SUP distinguishedName ))
<br>line 233 (attributetype ( <a href="http://2.5.4.33">2.5.4.33</a> NAME &#39;roleOccupant&#39; DESC &#39;RFC2256: occupant of role&#39; SUP distinguishedName ))<br>line 251 (attributetype ( <a href="http://2.5.4.36">2.5.4.36
</a> NAME &#39;userCertificate&#39; DESC &#39;RFC2256: X.509 user certificate, use ;binary&#39; EQUALITY certificateExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.8 ))<br>line 258 (attributetype ( <a href="http://2.5.4.37">
2.5.4.37</a> NAME &#39;cACertificate&#39; DESC &#39;RFC2256: X.509 CA certificate, use ;binary&#39; EQUALITY certificateExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.8 ))<br>line 263 (attributetype ( <a href="http://2.5.4.38">
2.5.4.38</a> NAME &#39;authorityRevocationList&#39; DESC &#39;RFC2256: X.509 authority revocation list, use ;binary&#39; SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 ))<br>line 268 (attributetype ( <a href="http://2.5.4.39">2.5.4.39
</a> NAME &#39;certificateRevocationList&#39; DESC &#39;RFC2256: X.509 certificate revocation list, use ;binary&#39; SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 ))<br>line 273 (attributetype ( <a href="http://2.5.4.40">2.5.4.40</a>
 NAME &#39;crossCertificatePair&#39; DESC &#39;RFC2256: X.509 cross certificate pair, use ;binary&#39; SYNTAX 1.3.6.1.4.1.1466.115.121.1.10 ))<br>line 283 (attributetype ( <a href="http://2.5.4.42">2.5.4.42</a> NAME ( &#39;givenName&#39; &#39;gn&#39; ) DESC &#39;RFC2256: first name(s) for which the entity is known by&#39; SUP name ))
<br>line 287 (attributetype ( <a href="http://2.5.4.43">2.5.4.43</a> NAME &#39;initials&#39; DESC &#39;RFC2256: initials of some or all of names, but not the surname(s).&#39; SUP name ))<br>line 291 (attributetype ( <a href="http://2.5.4.44">
2.5.4.44</a> NAME &#39;generationQualifier&#39; DESC &#39;RFC2256: name qualifier indicating a generation&#39; SUP name ))<br>line 296 (attributetype ( <a href="http://2.5.4.45">2.5.4.45</a> NAME &#39;x500UniqueIdentifier&#39; DESC &#39;RFC2256: 
X.500 unique identifier&#39; EQUALITY bitStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.6 ))<br>line 303 (attributetype ( <a href="http://2.5.4.46">2.5.4.46</a> NAME &#39;dnQualifier&#39; DESC &#39;RFC2256: DN qualifier&#39; EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 
1.3.6.1.4.1.1466.115.121.1.44 ))<br>line 307 (attributetype ( <a href="http://2.5.4.47">2.5.4.47</a> NAME &#39;enhancedSearchGuide&#39; DESC &#39;RFC2256: enhanced search guide&#39; SYNTAX 1.3.6.1.4.1.1466.115.121.1.21 ))
<br>line 312 (attributetype ( <a href="http://2.5.4.48">2.5.4.48</a> NAME &#39;protocolInformation&#39; DESC &#39;RFC2256: protocol information&#39; EQUALITY protocolInformationMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.42 ))
<br>line 322 (attributetype ( <a href="http://2.5.4.50">2.5.4.50</a> NAME &#39;uniqueMember&#39; DESC &#39;RFC2256: unique member of a group&#39; EQUALITY uniqueMemberMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.34 ))<br>line 328 (attributetype ( 
<a href="http://2.5.4.51">2.5.4.51</a> NAME &#39;houseIdentifier&#39; DESC &#39;RFC2256: house identifier&#39; EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} ))<br>line 333 (attributetype ( 
<a href="http://2.5.4.52">2.5.4.52</a> NAME &#39;supportedAlgorithms&#39; DESC &#39;RFC2256: supported algorithms&#39; SYNTAX 1.3.6.1.4.1.1466.115.121.1.49 ))<br>line 338 (attributetype ( <a href="http://2.5.4.53">2.5.4.53
</a> NAME &#39;deltaRevocationList&#39; DESC &#39;RFC2256: delta revocation list; use ;binary&#39; SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 ))<br>line 342 (attributetype ( <a href="http://2.5.4.54">2.5.4.54</a> NAME &#39;dmdName&#39; DESC &#39;RFC2256: name of DMD&#39; SUP name ))
<br>line 346 (attributetype ( <a href="http://2.5.4.65">2.5.4.65</a> NAME &#39;pseudonym&#39; DESC &#39;X.520(4th): pseudonym for the object&#39; SUP name ))<br>line 366 (objectclass ( <a href="http://2.5.6.2">2.5.6.2</a>
 NAME &#39;country&#39; DESC &#39;RFC2256: a country&#39; SUP top STRUCTURAL MUST c MAY ( searchGuide $ description ) ))<br>line 371 (objectclass ( <a href="http://2.5.6.3">2.5.6.3</a> NAME &#39;locality&#39; DESC &#39;RFC2256: a locality&#39; SUP top STRUCTURAL MAY ( street $ seeAlso $ searchGuide $ st $ l $ description ) ))
<br>line 382 (objectclass ( <a href="http://2.5.6.4">2.5.6.4</a> NAME &#39;organization&#39; DESC &#39;RFC2256: an organization&#39; SUP top STRUCTURAL MUST o MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ &nbsp;&nbsp;&nbsp; x121Address $ registeredAddress $ destinationIndicator $ &nbsp;&nbsp;&nbsp; preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ &nbsp;&nbsp;&nbsp; telephoneNumber $ internationaliSDNNumber $&nbsp; &nbsp;&nbsp;&nbsp; facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ &nbsp;&nbsp;&nbsp; postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) ))
<br>line 393 (objectclass ( <a href="http://2.5.6.5">2.5.6.5</a> NAME &#39;organizationalUnit&#39; DESC &#39;RFC2256: an organizational unit&#39; SUP top STRUCTURAL MUST ou MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ &nbsp;&nbsp;&nbsp; x121Address $ registeredAddress $ destinationIndicator $ &nbsp;&nbsp;&nbsp; preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ &nbsp;&nbsp;&nbsp; telephoneNumber $ internationaliSDNNumber $ &nbsp;&nbsp;&nbsp; facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ &nbsp;&nbsp;&nbsp; postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) ))
<br>line 399 (objectclass ( <a href="http://2.5.6.6">2.5.6.6</a> NAME &#39;person&#39; DESC &#39;RFC2256: a person&#39; SUP top STRUCTURAL MUST ( sn $ cn ) MAY ( userPassword $ telephoneNumber $ seeAlso $ description ) ))
<br>line 408 (objectclass ( <a href="http://2.5.6.7">2.5.6.7</a> NAME &#39;organizationalPerson&#39; DESC &#39;RFC2256: an organizational person&#39; SUP person STRUCTURAL MAY ( title $ x121Address $ registeredAddress $ destinationIndicator $ &nbsp;&nbsp;&nbsp; preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ &nbsp;&nbsp;&nbsp; telephoneNumber $ internationaliSDNNumber $&nbsp; &nbsp;&nbsp;&nbsp; facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ ou $ st $ l ) ))
<br>line 419 (objectclass ( <a href="http://2.5.6.8">2.5.6.8</a> NAME &#39;organizationalRole&#39; DESC &#39;RFC2256: an organizational role&#39; SUP top STRUCTURAL MUST cn MAY ( x121Address $ registeredAddress $ destinationIndicator $ &nbsp;&nbsp;&nbsp; preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ &nbsp;&nbsp;&nbsp; telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ &nbsp;&nbsp;&nbsp; seeAlso $ roleOccupant $ preferredDeliveryMethod $ street $ &nbsp;&nbsp;&nbsp; postOfficeBox $ postalCode $ postalAddress $ &nbsp;&nbsp;&nbsp; physicalDeliveryOfficeName $ ou $ st $ l $ description ) ))
<br>line 425 (objectclass ( <a href="http://2.5.6.9">2.5.6.9</a> NAME &#39;groupOfNames&#39; DESC &#39;RFC2256: a group of names (DNs)&#39; SUP top STRUCTURAL MUST ( member $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) ))
<br>line 436 (objectclass ( <a href="http://2.5.6.10">2.5.6.10</a> NAME &#39;residentialPerson&#39; DESC &#39;RFC2256: an residential person&#39; SUP person STRUCTURAL MUST l MAY ( businessCategory $ x121Address $ registeredAddress $ &nbsp;&nbsp;&nbsp; destinationIndicator $ preferredDeliveryMethod $ telexNumber $ &nbsp;&nbsp;&nbsp; teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ &nbsp;&nbsp;&nbsp; facsimileTelephoneNumber $ preferredDeliveryMethod $ street $ &nbsp;&nbsp;&nbsp; postOfficeBox $ postalCode $ postalAddress $ &nbsp;&nbsp;&nbsp; physicalDeliveryOfficeName $ st $ l ) ))
<br>line 442 (objectclass ( <a href="http://2.5.6.11">2.5.6.11</a> NAME &#39;applicationProcess&#39; DESC &#39;RFC2256: an application process&#39; SUP top STRUCTURAL MUST cn MAY ( seeAlso $ ou $ l $ description ) ))<br>line 449 (objectclass ( 
<a href="http://2.5.6.12">2.5.6.12</a> NAME &#39;applicationEntity&#39; DESC &#39;RFC2256: an application entity&#39; SUP top STRUCTURAL MUST ( presentationAddress $ cn ) MAY ( supportedApplicationContext $ seeAlso $ ou $ o $ l $ description ) ))
<br>line 454 (objectclass ( <a href="http://2.5.6.13">2.5.6.13</a> NAME &#39;dSA&#39; DESC &#39;RFC2256: a directory system agent (a server)&#39; SUP applicationEntity STRUCTURAL MAY knowledgeInformation ))<br>line 460 (objectclass ( 
<a href="http://2.5.6.14">2.5.6.14</a> NAME &#39;device&#39; DESC &#39;RFC2256: a device&#39; SUP top STRUCTURAL MUST cn MAY ( serialNumber $ seeAlso $ owner $ ou $ o $ l $ description ) ))<br>line 465 (objectclass ( <a href="http://2.5.6.15">
2.5.6.15</a> NAME &#39;strongAuthenticationUser&#39; DESC &#39;RFC2256: a strong authentication user&#39; SUP top AUXILIARY MUST userCertificate ))<br>line 471 (objectclass ( <a href="http://2.5.6.16">2.5.6.16</a> NAME &#39;certificationAuthority&#39; DESC &#39;RFC2256: a certificate authority&#39; SUP top AUXILIARY MUST ( authorityRevocationList $ certificateRevocationList $ &nbsp;&nbsp;&nbsp; cACertificate ) MAY crossCertificatePair ))
<br>line 477 (objectclass ( <a href="http://2.5.6.17">2.5.6.17</a> NAME &#39;groupOfUniqueNames&#39; DESC &#39;RFC2256: a group of unique names (DN and Unique Identifier)&#39; SUP top STRUCTURAL MUST ( uniqueMember $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) ))
<br>line 482 (objectclass ( <a href="http://2.5.6.18">2.5.6.18</a> NAME &#39;userSecurityInformation&#39; DESC &#39;RFC2256: a user security information&#39; SUP top AUXILIARY MAY ( supportedAlgorithms ) ))<br>line 486 (objectclass ( 
2.5.6.16.2 NAME &#39;certificationAuthority-V2&#39; SUP certificationAuthority AUXILIARY MAY ( deltaRevocationList ) ))<br>line 492 (objectclass ( <a href="http://2.5.6.19">2.5.6.19</a> NAME &#39;cRLDistributionPoint&#39; SUP top STRUCTURAL MUST ( cn ) MAY ( certificateRevocationList $ authorityRevocationList $ &nbsp;&nbsp;&nbsp; deltaRevocationList ) ))
<br>line 502 (objectclass ( <a href="http://2.5.6.20">2.5.6.20</a> NAME &#39;dmd&#39; SUP top STRUCTURAL MUST ( dmdName ) MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ &nbsp;&nbsp;&nbsp; x121Address $ registeredAddress $ destinationIndicator $ &nbsp;&nbsp;&nbsp; preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ &nbsp;&nbsp;&nbsp; telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ &nbsp;&nbsp;&nbsp; street $ postOfficeBox $ postalCode $ postalAddress $ &nbsp;&nbsp;&nbsp; physicalDeliveryOfficeName $ st $ l $ description ) ))
<br>line 510 (objectclass ( <a href="http://2.5.6.21">2.5.6.21</a> NAME &#39;pkiUser&#39; DESC &#39;RFC2587: a PKI user&#39; SUP top AUXILIARY MAY userCertificate ))<br>line 516 (objectclass ( <a href="http://2.5.6.22">2.5.6.22
</a> NAME &#39;pkiCA&#39; DESC &#39;RFC2587: PKI certificate authority&#39; SUP top AUXILIARY MAY ( authorityRevocationList $ certificateRevocationList $ &nbsp;&nbsp;&nbsp; cACertificate $ crossCertificatePair ) ))<br>line 521 (objectclass ( 
<a href="http://2.5.6.23">2.5.6.23</a> NAME &#39;deltaCRL&#39; DESC &#39;RFC2587: PKI user&#39; SUP top AUXILIARY MAY deltaRevocationList ))<br>line 534 (objectclass ( 1.3.6.1.4.1.250.3.15 NAME &#39;labeledURIObject&#39; DESC &#39;RFC2079: object that contains the URI attribute type&#39; SUP top AUXILIARY MAY ( labeledURI ) ))
<br>line 551 (attributetype ( 0.9.2342.19200300.100.1.3 NAME ( &#39;mail&#39; &#39;rfc822Mailbox&#39; ) DESC &#39;RFC1274: RFC822 Mailbox&#39; EQUALITY caseExactMatch SUBSTR caseExactSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
 ))<br>line 556 (objectclass ( 0.9.2342.19200300.100.4.19 NAME &#39;simpleSecurityObject&#39; DESC &#39;RFC1274: simple security object&#39; SUP top AUXILIARY MUST userPassword ))<br>line 564 (attributetype ( 0.9.2342.19200300.100.1.25
 NAME ( &#39;dc&#39; &#39;domainComponent&#39; ) DESC &#39;RFC1274/2247: domain component&#39; EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE ))<br>line 569 (objectclass ( 
1.3.6.1.4.1.1466.344 NAME &#39;dcObject&#39; DESC &#39;RFC2247: domain component object&#39; SUP top AUXILIARY MUST dc ))<br>line 574 (objectclass ( 1.3.6.1.1.3.1 NAME &#39;uidObject&#39; DESC &#39;RFC2377: uid object&#39; SUP top AUXILIARY MUST uid ))
<br>line 582 (attributetype ( 0.9.2342.19200300.100.1.37 NAME &#39;associatedDomain&#39; DESC &#39;RFC1274: domain associated with object&#39; EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26
 ))<br>line 590 (attributetype ( 1.2.840.113549.1.9.1 NAME ( &#39;email&#39; &#39;emailAddress&#39; &#39;pkcs9email&#39; ) DESC &#39;RFC3280: legacy attribute for email addresses in DNs&#39; EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 
1.3.6.1.4.1.1466.115.121.1.26{128} ))<br>line 13 (pidfile&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; /private/var/db/openldap/run/slapd.pid)<br>line 14 (argsfile&nbsp;&nbsp;&nbsp; /private/var/db/openldap/run/slapd.args)<br>line 17 (modulepath&nbsp;&nbsp;&nbsp; /usr/libexec/openldap)<br>
/private/etc/openldap/slapd.conf: line 17: keyword &lt;modulepath&gt; ignored<br>line 18 (moduleload&nbsp;&nbsp;&nbsp; back_bdb.la)<br>/private/etc/openldap/slapd.conf: line 18: keyword &lt;moduleload&gt; ignored<br>line 55 (database bdb)
<br>bdb_db_init: Initializing BDB database<br>line 56 (suffix &quot;dc=example,dc=com&quot;)<br>&gt;&gt;&gt; dnPrettyNormal: &lt;dc=example,dc=com&gt;<br>=&gt; ldap_bv2dn(dc=example,dc=com,0)<br>&lt;= ldap_bv2dn(dc=example,dc=com)=0 
<br>=&gt; ldap_dn2bv(272)<br>&lt;= ldap_dn2bv(dc=example,dc=com)=0 <br>=&gt; ldap_dn2bv(272)<br>&lt;= ldap_dn2bv(dc=example,dc=com)=0 <br>&lt;&lt;&lt; dnPrettyNormal: &lt;dc=example,dc=com&gt;, &lt;dc=example,dc=com&gt;<br>
line 57 (rootdn &quot;cn=Manager,dc=example,dc=com&quot;)<br>&gt;&gt;&gt; dnPrettyNormal: &lt;cn=Manager,dc=example,dc=com&gt;<br>=&gt; ldap_bv2dn(cn=Manager,dc=example,dc=com,0)<br>&lt;= ldap_bv2dn(cn=Manager,dc=example,dc=com)=0 
<br>=&gt; ldap_dn2bv(272)<br>&lt;= ldap_dn2bv(cn=Manager,dc=example,dc=com)=0 <br>=&gt; ldap_dn2bv(272)<br>&lt;= ldap_dn2bv(cn=manager,dc=example,dc=com)=0 <br>&lt;&lt;&lt; dnPrettyNormal: &lt;cn=Manager,dc=example,dc=com&gt;, &lt;cn=manager,dc=example,dc=com&gt;
<br>line 61 (rootpw ***)<br>line 65 (directory /private/var/db/openldap/openldap-data)<br>line 67 (index objectClass eq)<br>index objectClass 0x0004<br>&gt;&gt;&gt; dnNormalize: &lt;cn=Subschema&gt;<br>=&gt; ldap_bv2dn(cn=Subschema,0)
<br>&lt;= ldap_bv2dn(cn=Subschema)=0 <br>=&gt; ldap_dn2bv(272)<br>&lt;= ldap_dn2bv(cn=subschema)=0 <br>&lt;&lt;&lt; dnNormalize: &lt;cn=subschema&gt;<br>matching_rule_use_init<br>&nbsp;&nbsp;&nbsp; 1.2.840.113556.1.4.804 (integerBitOrMatch): matchingRuleUse: ( 
1.2.840.113556.1.4.804 NAME &#39;integerBitOrMatch&#39; APPLIES ( supportedLDAPVersion $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcDbCacheFree $ olcDbCacheSize $ olcDbIDLcacheSize $ olcDbMode $ olcDbSearchStack $ olcDbShmKey $ reqResult $ reqId $ reqVersion $ reqSizeLimit $ reqTimeLimit $ reqEntries $ olcProxyCacheQueries $ errCode $ errSleepTime $ olcSpSessionlog ) )
<br>&nbsp;&nbsp;&nbsp; 1.2.840.113556.1.4.803 (integerBitAndMatch): matchingRuleUse: ( 1.2.840.113556.1.4.803 NAME &#39;integerBitAndMatch&#39; APPLIES ( supportedLDAPVersion $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcDbCacheFree $ olcDbCacheSize $ olcDbIDLcacheSize $ olcDbMode $ olcDbSearchStack $ olcDbShmKey $ reqResult $ reqId $ reqVersion $ reqSizeLimit $ reqTimeLimit $ reqEntries $ olcProxyCacheQueries $ errCode $ errSleepTime $ olcSpSessionlog ) )
<br>&nbsp;&nbsp;&nbsp; 1.3.6.1.4.1.1466.109.114.2 (caseIgnoreIA5Match): matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.2 NAME &#39;caseIgnoreIA5Match&#39; APPLIES ( altServer $ krbName $ dc $ associatedDomain $ email ) )<br>&nbsp;&nbsp;&nbsp; 1.3.6.1.4.1.1466.109.114.1
 (caseExactIA5Match): matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.1 NAME &#39;caseExactIA5Match&#39; APPLIES ( altServer $ krbName $ dc $ associatedDomain $ email ) )<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.35">2.5.13.35</a> (certificateMatch): matchingRuleUse: ( 
<a href="http://2.5.13.35">2.5.13.35</a> NAME &#39;certificateMatch&#39; APPLIES ( userCertificate $ cACertificate ) )<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.34">2.5.13.34</a> (certificateExactMatch): matchingRuleUse: ( <a href="http://2.5.13.34">
2.5.13.34</a> NAME &#39;certificateExactMatch&#39; APPLIES ( userCertificate $ cACertificate ) )<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.30">2.5.13.30</a> (objectIdentifierFirstComponentMatch): matchingRuleUse: ( <a href="http://2.5.13.30">
2.5.13.30</a> NAME &#39;objectIdentifierFirstComponentMatch&#39; APPLIES ( supportedControl $ supportedExtension $ supportedFeatures $ ldapSyntaxes $ supportedApplicationContext ) )<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.29">2.5.13.29
</a> (integerFirstComponentMatch): matchingRuleUse: ( <a href="http://2.5.13.29">2.5.13.29</a> NAME &#39;integerFirstComponentMatch&#39; APPLIES ( supportedLDAPVersion $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcDbCacheFree $ olcDbCacheSize $ olcDbIDLcacheSize $ olcDbMode $ olcDbSearchStack $ olcDbShmKey $ reqResult $ reqId $ reqVersion $ reqSizeLimit $ reqTimeLimit $ reqEntries $ olcProxyCacheQueries $ errCode $ errSleepTime $ olcSpSessionlog ) )
<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.27">2.5.13.27</a> (generalizedTimeMatch): matchingRuleUse: ( <a href="http://2.5.13.27">2.5.13.27</a> NAME &#39;generalizedTimeMatch&#39; APPLIES ( createTimestamp $ modifyTimestamp $ reqStart $ reqEnd $ pwdChangedTime $ pwdAccountLockedTime $ pwdFailureTime $ pwdGraceUseTime ) )
<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.24">2.5.13.24</a> (protocolInformationMatch): matchingRuleUse: ( <a href="http://2.5.13.24">2.5.13.24</a> NAME &#39;protocolInformationMatch&#39; APPLIES protocolInformation )<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.23">
2.5.13.23</a> (uniqueMemberMatch): matchingRuleUse: ( <a href="http://2.5.13.23">2.5.13.23</a> NAME &#39;uniqueMemberMatch&#39; APPLIES uniqueMember )<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.22">2.5.13.22</a> (presentationAddressMatch): matchingRuleUse: ( 
<a href="http://2.5.13.22">2.5.13.22</a> NAME &#39;presentationAddressMatch&#39; APPLIES presentationAddress )<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.20">2.5.13.20</a> (telephoneNumberMatch): matchingRuleUse: ( <a href="http://2.5.13.20">
2.5.13.20</a> NAME &#39;telephoneNumberMatch&#39; APPLIES telephoneNumber )<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.17">2.5.13.17</a> (octetStringMatch): matchingRuleUse: ( <a href="http://2.5.13.17">2.5.13.17</a> NAME &#39;octetStringMatch&#39; APPLIES ( userPassword $ reqControls $ reqRespControls $ reqMod $ reqOld $ reqData $ pwdHistory $ queryid ) )
<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.16">2.5.13.16</a> (bitStringMatch): matchingRuleUse: ( <a href="http://2.5.13.16">2.5.13.16</a> NAME &#39;bitStringMatch&#39; APPLIES x500UniqueIdentifier )<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.14">
2.5.13.14</a> (integerMatch): matchingRuleUse: ( <a href="http://2.5.13.14">2.5.13.14</a> NAME &#39;integerMatch&#39; APPLIES ( supportedLDAPVersion $ uidNumber $ gidNumber $ olcConcurrency $ olcConnMaxPending $ olcConnMaxPendingAuth $ olcIdleTimeout $ olcIndexSubstrIfMinLen $ olcIndexSubstrIfMaxLen $ olcIndexSubstrAnyLen $ olcIndexSubstrAnyStep $ olcLocalSSF $ olcMaxDerefDepth $ olcReplicationInterval $ olcSockbufMaxIncoming $ olcSockbufMaxIncomingAuth $ olcThreads $ olcToolThreads $ olcDbCacheFree $ olcDbCacheSize $ olcDbIDLcacheSize $ olcDbMode $ olcDbSearchStack $ olcDbShmKey $ reqResult $ reqId $ reqVersion $ reqSizeLimit $ reqTimeLimit $ reqEntries $ olcProxyCacheQueries $ errCode $ errSleepTime $ olcSpSessionlog ) )
<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.13">2.5.13.13</a> (booleanMatch): matchingRuleUse: ( <a href="http://2.5.13.13">2.5.13.13</a> NAME &#39;booleanMatch&#39; APPLIES ( hasSubordinates $ olcGentleHUP $ olcLastMod $ olcReadOnly $ olcReverseLookup $ olcDbNoSync $ olcDbDirtyRead $ olcDbLinearIndex $ olcAccessLogSuccess $ reqDeleteOldRDN $ reqAttrsOnly $ pwdReset $ olcSpNoPresent $ olcSpReloadHint ) )
<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.11">2.5.13.11</a> (caseIgnoreListMatch): matchingRuleUse: ( <a href="http://2.5.13.11">2.5.13.11</a> NAME &#39;caseIgnoreListMatch&#39; APPLIES ( postalAddress $ registeredAddress ) )<br>&nbsp;&nbsp;&nbsp; 
<a href="http://2.5.13.8">2.5.13.8</a> (numericStringMatch): matchingRuleUse: ( <a href="http://2.5.13.8">2.5.13.8</a> NAME &#39;numericStringMatch&#39; APPLIES ( x121Address $ internationaliSDNNumber ) )<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.7">
2.5.13.7</a> (caseExactSubstringsMatch): matchingRuleUse: ( <a href="http://2.5.13.7">2.5.13.7</a> NAME &#39;caseExactSubstringsMatch&#39; APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) )<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.6">
2.5.13.6</a> (caseExactOrderingMatch): matchingRuleUse: ( <a href="http://2.5.13.6">2.5.13.6</a> NAME &#39;caseExactOrderingMatch&#39; APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) )<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.5">
2.5.13.5</a> (caseExactMatch): matchingRuleUse: ( <a href="http://2.5.13.5">2.5.13.5</a> NAME &#39;caseExactMatch&#39; APPLIES ( supportedSASLMechanisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ authAuthority $ dNSHostName $ description $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDitContentRules $ olcInclude $ olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ olcObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $ olcRootDSE $ olcRootPW $ olcSaslHost $ olcSaslRealm $ olcSaslSecProps $ olcSecurity $ olcSizeLimit $ olcSrvtab $ olcSubordinate $ olcSyncrepl $ olcTimeLimit $ olcTLSCACertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcUpdateRef $ olcTLSCertificatePassphraseTool $ olcDbDirectory $ olcDbCheckpoint $ olcDbConfig $ olcDbIndex $ olcDbLockDetect $ olcAccessLogOps $ olcAccessLogPurge $ olcAccessLogOld $ reqType $ reqSession $ reqMessage $ reqReferral $ reqMethod $ reqAssertion $ reqScope $ reqDerefAliases $ reqFilter $ reqAttr $ olcDIRange $ olcDIGUIDGen $ olcDIOwnerGUIDGen $ olcDIOverride $ olcExpandAttribute $ olcDLattrSet $ olcProxyCache $ olcProxyAttrset $ olcProxyTemplate $ olcProxyResponseCB $ errOp $ errText $ olcSpCheckpoint $ olcValSortAttr $ knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ title $ businessCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pseudonym $ mail ) )
<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.4">2.5.13.4</a> (caseIgnoreSubstringsMatch): matchingRuleUse: ( <a href="http://2.5.13.4">2.5.13.4</a> NAME &#39;caseIgnoreSubstringsMatch&#39; APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) )
<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.3">2.5.13.3</a> (caseIgnoreOrderingMatch): matchingRuleUse: ( <a href="http://2.5.13.3">2.5.13.3</a> NAME &#39;caseIgnoreOrderingMatch&#39; APPLIES ( serialNumber $ destinationIndicator $ dnQualifier ) )
<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.2">2.5.13.2</a> (caseIgnoreMatch): matchingRuleUse: ( <a href="http://2.5.13.2">2.5.13.2</a> NAME &#39;caseIgnoreMatch&#39; APPLIES ( supportedSASLMechanisms $ vendorName $ vendorVersion $ ref $ name $ cn $ uid $ labeledURI $ authAuthority $ dNSHostName $ description $ olcConfigFile $ olcConfigDir $ olcAccess $ olcAllows $ olcArgsFile $ olcAttributeOptions $ olcAttributeTypes $ olcAuthIDRewrite $ olcAuthzPolicy $ olcAuthzRegexp $ olcBackend $ olcDatabase $ olcDisallows $ olcDitContentRules $ olcInclude $ olcLimits $ olcLogFile $ olcLogLevel $ olcModuleLoad $ olcModulePath $ olcObjectClasses $ olcObjectIdentifier $ olcOverlay $ olcPasswordCryptSaltFormat $ olcPasswordHash $ olcPidFile $ olcPlugin $ olcPluginLogFile $ olcReferral $ olcReplica $ olcReplicaArgsFile $ olcReplicaPidFile $ olcReplogFile $ olcRequires $ olcRestrict $ olcRootDSE $ olcRootPW $ olcSaslHost $ olcSaslRealm $ olcSaslSecProps $ olcSecurity $ olcSizeLimit $ olcSrvtab $ olcSubordinate $ olcSyncrepl $ olcTimeLimit $ olcTLSCACertificateFile $ olcTLSCACertificatePath $ olcTLSCertificateFile $ olcTLSCertificateKeyFile $ olcTLSCipherSuite $ olcTLSCRLCheck $ olcTLSRandFile $ olcTLSVerifyClient $ olcTLSDHParamFile $ olcUpdateRef $ olcTLSCertificatePassphraseTool $ olcDbDirectory $ olcDbCheckpoint $ olcDbConfig $ olcDbIndex $ olcDbLockDetect $ olcAccessLogOps $ olcAccessLogPurge $ olcAccessLogOld $ reqType $ reqSession $ reqMessage $ reqReferral $ reqMethod $ reqAssertion $ reqScope $ reqDerefAliases $ reqFilter $ reqAttr $ olcDIRange $ olcDIGUIDGen $ olcDIOwnerGUIDGen $ olcDIOverride $ olcExpandAttribute $ olcDLattrSet $ olcProxyCache $ olcProxyAttrset $ olcProxyTemplate $ olcProxyResponseCB $ errOp $ errText $ olcSpCheckpoint $ olcValSortAttr $ knowledgeInformation $ sn $ serialNumber $ c $ l $ st $ street $ o $ ou $ title $ businessCategory $ postalCode $ postOfficeBox $ physicalDeliveryOfficeName $ destinationIndicator $ givenName $ initials $ generationQualifier $ dnQualifier $ houseIdentifier $ dmdName $ pseudonym $ mail ) )
<br>&nbsp;&nbsp;&nbsp; 1.2.36.79672281.1.13.3 (rdnMatch):&nbsp;&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.1">2.5.13.1</a> (distinguishedNameMatch): matchingRuleUse: ( <a href="http://2.5.13.1">2.5.13.1</a> NAME &#39;distinguishedNameMatch&#39; APPLIES ( creatorsName $ modifiersName $ subschemaSubentry $ namingContexts $ aliasedObjectName $ distinguishedName $ seeAlso $ olcDefaultSearchBase $ olcRootDN $ olcSchemaDN $ olcSuffix $ olcUpdateDN $ olcAccessLogDB $ reqDN $ reqAuthzID $ reqNewRDN $ reqNewSuperior $ pwdPolicySubentry $ errMatchedDN $ member $ owner $ roleOccupant ) )
<br>&nbsp;&nbsp;&nbsp; <a href="http://2.5.13.0">2.5.13.0</a> (objectIdentifierMatch): matchingRuleUse: ( <a href="http://2.5.13.0">2.5.13.0</a> NAME &#39;objectIdentifierMatch&#39; APPLIES ( supportedControl $ supportedExtension $ supportedFeatures $ supportedApplicationContext ) )
<br>slapd startup: initiated.<br>backend_startup_one: starting &quot;cn=config&quot;<br>config_back_db_open<br>config_build_entry: &quot;cn=config&quot;<br>config_build_entry: &quot;cn=include{0}&quot;<br>config_build_entry: &quot;cn=schema&quot;
<br>config_build_entry: &quot;cn={0}core&quot;<br>config_build_entry: &quot;olcDatabase={-1}frontend&quot;<br>config_build_entry: &quot;olcDatabase={0}config&quot;<br>config_build_entry: &quot;olcDatabase={1}bdb&quot;<br>
backend_startup_one: starting &quot;dc=example,dc=com&quot;<br>bdb_db_open: dc=example,dc=com<br>bdb_db_open: Warning - No DB_CONFIG file found in directory /private/var/db/openldap/openldap-data: (2)<br>Expect poor performance for suffix dc=example,dc=com.
<br>bdb_db_open: dbenv_open(/private/var/db/openldap/openldap-data)<br>slapd starting<br>daemon: added 4r<br>daemon: added 6r<br>daemon: added 7r<br>daemon: select: listen=6 active_threads=0 tvp=NULL<br>daemon: select: listen=7 active_threads=0 tvp=NULL
<br><br><br><div class="gmail_quote">On Dec 21, 2007 2:37 PM, Gavin Henry &lt;<a href="mailto:ghenry@suretecsystems.com">ghenry@suretecsystems.com</a>&gt; wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
The first 50 lines of startup, before you try to do anything ;-)<br><font color="#888888"><br>--<br></font><div><div></div><div class="Wj3C7c">Kind Regards,<br><br>Gavin Henry.<br>Managing Director.<br><br>T +44 (0) 1224 279484
<br>M +44 (0) 7930 323266<br>F +44 (0) 1224 824887<br>E <a href="mailto:ghenry@suretecsystems.com">ghenry@suretecsystems.com</a><br><br>Open Source. Open Solutions(tm).<br><br><a href="http://www.suretecsystems.com/" target="_blank">
http://www.suretecsystems.com/</a><br><br>&lt;quote who=&quot;Jonathan Wage&quot;&gt;<br>&gt; Starting with:<br>&gt;<br>&gt; sudo ./slapd -d -1 -f /private/etc/openldap/slapd.conf<br>&gt;<br>&gt; Produces this:<br>&gt;<br>
&gt; daemon: activity on 1 descriptor<br>&gt; daemon: listen=7, new connection on 12<br>&gt; daemon: added 12r<br>&gt; conn=1 fd=12 ACCEPT from IP=<a href="http://127.0.0.1:64694" target="_blank">127.0.0.1:64694</a> (IP=<a href="http://0.0.0.0:389" target="_blank">
0.0.0.0:389</a>)<br>&gt; daemon: select: listen=6 active_threads=0 tvp=NULL<br>&gt; daemon: select: listen=7 active_threads=0 tvp=NULL<br>&gt; daemon: activity on 1 descriptor<br>&gt; daemon: activity on: 12r<br>&gt; daemon: read activity on 12
<br>&gt; connection_get(12)<br>&gt; connection_get(12): got connid=1<br>&gt; connection_read(12): checking for input on id=1<br>&gt; ber_get_next<br>&gt; ldap_read: want=8, got=8<br>&gt; &nbsp; 0000: &nbsp;30 2e 02 01 01 60 29 02<br>
&gt; 0....`).<br>&gt; ldap_read: want=40, got=40<br>&gt; &nbsp; 0000: &nbsp;01 03 04 1c 63 6e 3d 4d &nbsp;61 6e 61 67 65 72 2c 64<br>&gt; ....cn=Manager,d<br>&gt; &nbsp; 0010: &nbsp;63 3d 65 78 61 6d 70 6c &nbsp;65 2c 64 63 3d 63 6f 6d<br>&gt; c=example,dc=com
<br>&gt; &nbsp; 0020: &nbsp;80 06 73 65 63 72 65 74<br>&gt; ..secret<br>&gt; ber_get_next: tag 0x30 len 46 contents:<br>&gt; ber_dump: buf=0x00345680 ptr=0x00345680 end=0x003456ae len=46<br>&gt; &nbsp; 0000: &nbsp;02 01 01 60 29 02 01 03 &nbsp;04 1c 63 6e 3d 4d 61 6e
<br>&gt; ...`).....cn=Man<br>&gt; &nbsp; 0010: &nbsp;61 67 65 72 2c 64 63 3d &nbsp;65 78 61 6d 70 6c 65 2c<br>&gt; ager,dc=example,<br>&gt; &nbsp; 0020: &nbsp;64 63 3d 63 6f 6d 80 06 &nbsp;73 65 63 72 65 74<br>&gt; dc=com..secret<br>&gt; ber_get_next<br>
&gt; ldap_read: want=8 error=Resource temporarily unavailable<br>&gt; ber_get_next on fd 12 failed errno=35 (Resource temporarily unavailable)<br>&gt; do_bind<br>&gt; ber_scanf fmt ({imt) ber:<br>&gt; ber_dump: buf=0x00345680 ptr=0x00345683 end=0x003456ae len=43
<br>&gt; &nbsp; 0000: &nbsp;60 29 02 01 03 04 1c 63 &nbsp;6e 3d 4d 61 6e 61 67 65<br>&gt; `).....cn=Manage<br>&gt; &nbsp; 0010: &nbsp;72 2c 64 63 3d 65 78 61 &nbsp;6d 70 6c 65 2c 64 63 3d<br>&gt; r,dc=example,dc=<br>&gt; &nbsp; 0020: &nbsp;63 6f 6d 80 06 73 65 63 &nbsp;72 65 74
<br>&gt; com..secret<br>&gt; daemon: select: listen=6 active_threads=0 tvp=NULL<br>&gt; daemon: select: listen=7 active_threads=0 tvp=NULL<br>&gt; ber_scanf fmt (m}) ber:<br>&gt; ber_dump: buf=0x00345680 ptr=0x003456a6 end=0x003456ae len=8
<br>&gt; &nbsp; 0000: &nbsp;00 06 73 65 63 72 65 74<br>&gt; ..secret<br>&gt;&gt;&gt;&gt; dnPrettyNormal: &lt;cn=Manager,dc=example,dc=com&gt;<br>&gt; =&gt; ldap_bv2dn(cn=Manager,dc=example,dc=com,0)<br>&gt; &lt;= ldap_bv2dn(cn=Manager,dc=example,dc=com)=0
<br>&gt; =&gt; ldap_dn2bv(272)<br>&gt; &lt;= ldap_dn2bv(cn=Manager,dc=example,dc=com)=0<br>&gt; =&gt; ldap_dn2bv(272)<br>&gt; &lt;= ldap_dn2bv(cn=manager,dc=example,dc=com)=0<br>&gt; &lt;&lt;&lt; dnPrettyNormal: &lt;cn=Manager,dc=example,dc=com&gt;,
<br>&gt; &lt;cn=manager,dc=example,dc=com&gt;<br>&gt; do_bind: version=3 dn=&quot;cn=Manager,dc=example,dc=com&quot; method=128<br>&gt; conn=1 op=0 BIND dn=&quot;cn=Manager,dc=example,dc=com&quot; method=128<br>&gt; ==&gt; bdb_bind: dn: cn=Manager,dc=example,dc=com
<br>&gt; bdb_dn2entry(&quot;cn=manager,dc=example,dc=com&quot;)<br>&gt; =&gt; bdb_dn2id(&quot;dc=example,dc=com&quot;)<br>&gt; &lt;= bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found<br>&gt; (-30990)<br>
&gt; send_ldap_result: conn=1 op=0 p=3<br>&gt; send_ldap_result: err=49 matched=&quot;&quot; text=&quot;&quot;<br>&gt; send_ldap_response: msgid=1 tag=97 err=49<br>&gt; ber_flush: 14 bytes to sd 12<br>&gt; &nbsp; 0000: &nbsp;30 0c 02 01 01 61 07 0a &nbsp;01 31 04 00 04 00
<br>&gt; 0....a...1....<br>&gt; ldap_write: want=14, written=14<br>&gt; &nbsp; 0000: &nbsp;30 0c 02 01 01 61 07 0a &nbsp;01 31 04 00 04 00<br>&gt; 0....a...1....<br>&gt; conn=1 op=0 RESULT tag=97 err=49 text=<br>&gt; daemon: activity on 1 descriptor
<br>&gt; daemon: activity on: 12r<br>&gt; daemon: read activity on 12<br>&gt; connection_get(12)<br>&gt; connection_get(12): got connid=1<br>&gt; connection_read(12): checking for input on id=1<br>&gt; ber_get_next<br>&gt; ldap_read: want=8, got=0
<br>&gt;<br>&gt; ber_get_next on fd 12 failed errno=0 (Undefined error: 0)<br>&gt; connection_read(12): input error=-2 id=1, closing.<br>&gt; connection_closing: readying conn=1 sd=12 for close<br>&gt; connection_close: conn=1 sd=12
<br>&gt; daemon: removing 12<br>&gt; conn=1 fd=12 closed (connection lost)<br>&gt; daemon: select: listen=6 active_threads=0 tvp=NULL<br>&gt; daemon: select: listen=7 active_threads=0 tvp=NULL<br>&gt; daemon: activity on 1 descriptor
<br>&gt; daemon: waked<br>&gt; daemon: select: listen=6 active_threads=0 tvp=NULL<br>&gt; daemon: select: listen=7 active_threads=0 tvp=NULL<br>&gt;<br>&gt;<br>&gt; On Dec 21, 2007 2:09 PM, Gavin Henry &lt;<a href="mailto:ghenry@suretecsystems.com">
ghenry@suretecsystems.com</a>&gt; wrote:<br>&gt;<br>&gt;&gt; &lt;quote who=&quot;Jonathan Wage&quot;&gt;<br>&gt;&gt; &gt; Uncommented and restarted ldap with the following command:<br>&gt;&gt; &gt;<br>&gt;&gt; &gt; sudo ./slapd -d 256 -f /private/etc/openldap/slapd.conf
<br>&gt;&gt;<br>&gt;&gt; Can you start up with -d -1 and just paste the first say 50 lines.<br>&gt;&gt;<br>&gt;&gt; and CC your reply to <a href="mailto:openldap-software@openldap.org">openldap-software@openldap.org</a><br>
&gt;&gt;<br>&gt;&gt; &gt;<br>&gt;&gt; &gt; Then when I run this command:<br>&gt;&gt; &gt;<br>&gt;&gt; &gt; sudo ldapadd -x -D &quot;cn=Manager,dc=example,dc=com&quot; -W -f example.ldif<br>&gt;&gt; &gt;<br>&gt;&gt; &gt; I get this in the screen with slapd running:
<br>&gt;&gt; &gt;<br>&gt;&gt; &gt; conn=0 fd=12 ACCEPT from IP=<a href="http://127.0.0.1:64609" target="_blank">127.0.0.1:64609</a> (IP=<a href="http://0.0.0.0:389" target="_blank">0.0.0.0:389</a>)<br>&gt;&gt; &gt; conn=0 op=0 BIND dn=&quot;cn=Manager,dc=example,dc=com&quot; method=128
<br>&gt;&gt; &gt; conn=0 op=0 RESULT tag=97 err=49 text=<br>&gt;&gt; &gt; conn=0 fd=12 closed (connection lost)<br>&gt;&gt; &gt;<br>&gt;&gt; &gt; The error code translates to incorrect DN or password.<br>&gt;&gt; &gt;<br>
&gt;&gt; &gt; - Jon<br>&gt;&gt; &gt;<br>&gt;&gt; &gt; On Dec 21, 2007 1:52 PM, Gavin Henry &lt;<a href="mailto:ghenry@suretecsystems.com">ghenry@suretecsystems.com</a>&gt;<br>&gt;&gt; wrote:<br>&gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; Uncommment:
<br>&gt;&gt; &gt;&gt;<br>&gt;&gt; &gt;&gt; # modulepath &nbsp; &nbsp;/usr/libexec/openldap<br>&gt;&gt; &gt;&gt; # moduleload &nbsp; &nbsp;back_bdb.la<br>&gt;&gt; &gt;&gt;<br>&gt;&gt; &gt;&gt; --<br>&gt;&gt; &gt;&gt; Kind Regards,<br>&gt;&gt; &gt;&gt;
<br>&gt;&gt; &gt;&gt; Gavin Henry.<br>&gt;&gt; &gt;&gt; Managing Director.<br>&gt;&gt; &gt;&gt;<br>&gt;&gt; &gt;&gt; T +44 (0) 1224 279484<br>&gt;&gt; &gt;&gt; M +44 (0) 7930 323266<br>&gt;&gt; &gt;&gt; F +44 (0) 1224 824887
<br>&gt;&gt; &gt;&gt; E <a href="mailto:ghenry@suretecsystems.com">ghenry@suretecsystems.com</a><br>&gt;&gt; &gt;&gt;<br>&gt;&gt; &gt;&gt; Open Source. Open Solutions(tm).<br>&gt;&gt; &gt;&gt;<br>&gt;&gt; &gt;&gt; <a href="http://www.suretecsystems.com/" target="_blank">
http://www.suretecsystems.com/</a><br>&gt;&gt; &gt;&gt;<br>&gt;&gt; &gt;&gt; &lt;quote who=&quot;Jonathan Wage&quot;&gt;<br>&gt;&gt; &gt;&gt; &gt; When I start slapd like you said above I am able to see the logs. I<br>&gt;&gt; &gt;&gt; then
<br>&gt;&gt; &gt;&gt; &gt; run<br>&gt;&gt; &gt;&gt; &gt; the same command where I get the invalid credentials and I get the<br>&gt;&gt; &gt;&gt; &gt; following:<br>&gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt; ------------------
<br>&gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt; daemon: activity on 1 descriptor<br>&gt;&gt; &gt;&gt; &gt; daemon: listen=7, new connection on 13<br>&gt;&gt; &gt;&gt; &gt; daemon: added 13r<br>&gt;&gt; &gt;&gt; &gt; conn=1 fd=13 ACCEPT from IP=
<a href="http://127.0.0.1:63502" target="_blank">127.0.0.1:63502</a> (IP=<a href="http://0.0.0.0:389" target="_blank">0.0.0.0:389</a>)<br>&gt;&gt; &gt;&gt; &gt; daemon: select: listen=6 active_threads=0 tvp=NULL<br>&gt;&gt; &gt;&gt; &gt; daemon: select: listen=7 active_threads=0 tvp=NULL
<br>&gt;&gt; &gt;&gt; &gt; daemon: activity on 1 descriptor<br>&gt;&gt; &gt;&gt; &gt; daemon: activity on: 13r<br>&gt;&gt; &gt;&gt; &gt; daemon: read activity on 13<br>&gt;&gt; &gt;&gt; &gt; connection_get(13)<br>&gt;&gt; &gt;&gt; &gt; connection_get(13): got connid=1
<br>&gt;&gt; &gt;&gt; &gt; connection_read(13): checking for input on id=1<br>&gt;&gt; &gt;&gt; &gt; ber_get_next<br>&gt;&gt; &gt;&gt; &gt; ldap_read: want=8, got=8<br>&gt;&gt; &gt;&gt; &gt; &nbsp; 0000: &nbsp;30 2e 02 01 01 60 29 02
<br>&gt;&gt; &gt;&gt; &gt; 0....`).<br>&gt;&gt; &gt;&gt; &gt; ldap_read: want=40, got=40<br>&gt;&gt; &gt;&gt; &gt; &nbsp; 0000: &nbsp;01 03 04 1c 63 6e 3d 4d &nbsp;61 6e 61 67 65 72 2c 64<br>&gt;&gt; &gt;&gt; &gt; ....cn=Manager,d<br>&gt;&gt; &gt;&gt; &gt; &nbsp; 0010: &nbsp;63 3d 65 78 61 6d 70 6c &nbsp;65 2c 64 63 3d 63 6f 6d
<br>&gt;&gt; &gt;&gt; &gt; c=example,dc=com<br>&gt;&gt; &gt;&gt; &gt; &nbsp; 0020: &nbsp;80 06 73 65 63 72 65 74<br>&gt;&gt; &gt;&gt; &gt; ..secret<br>&gt;&gt; &gt;&gt; &gt; ber_get_next: tag 0x30 len 46 contents:<br>&gt;&gt; &gt;&gt; &gt; ber_dump: buf=0x003451d0 ptr=0x003451d0 end=0x003451fe len=46
<br>&gt;&gt; &gt;&gt; &gt; &nbsp; 0000: &nbsp;02 01 01 60 29 02 01 03 &nbsp;04 1c 63 6e 3d 4d 61 6e<br>&gt;&gt; &gt;&gt; &gt; ...`).....cn=Man<br>&gt;&gt; &gt;&gt; &gt; &nbsp; 0010: &nbsp;61 67 65 72 2c 64 63 3d &nbsp;65 78 61 6d 70 6c 65 2c<br>&gt;&gt; &gt;&gt; &gt; ager,dc=example,
<br>&gt;&gt; &gt;&gt; &gt; &nbsp; 0020: &nbsp;64 63 3d 63 6f 6d 80 06 &nbsp;73 65 63 72 65 74<br>&gt;&gt; &gt;&gt; &gt; dc=com..secret<br>&gt;&gt; &gt;&gt; &gt; ber_get_next<br>&gt;&gt; &gt;&gt; &gt; ldap_read: want=8 error=Resource temporarily unavailable
<br>&gt;&gt; &gt;&gt; &gt; ber_get_next on fd 13 failed errno=35 (Resource temporarily<br>&gt;&gt; &gt;&gt; unavailable)<br>&gt;&gt; &gt;&gt; &gt; daemon: select: listen=6 active_threads=0 tvp=NULL<br>&gt;&gt; &gt;&gt; &gt; daemon: select: listen=7 active_threads=0 tvp=NULL
<br>&gt;&gt; &gt;&gt; &gt; do_bind<br>&gt;&gt; &gt;&gt; &gt; ber_scanf fmt ({imt) ber:<br>&gt;&gt; &gt;&gt; &gt; ber_dump: buf=0x003451d0 ptr=0x003451d3 end=0x003451fe len=43<br>&gt;&gt; &gt;&gt; &gt; &nbsp; 0000: &nbsp;60 29 02 01 03 04 1c 63 &nbsp;6e 3d 4d 61 6e 61 67 65
<br>&gt;&gt; &gt;&gt; &gt; `).....cn=Manage<br>&gt;&gt; &gt;&gt; &gt; &nbsp; 0010: &nbsp;72 2c 64 63 3d 65 78 61 &nbsp;6d 70 6c 65 2c 64 63 3d<br>&gt;&gt; &gt;&gt; &gt; r,dc=example,dc=<br>&gt;&gt; &gt;&gt; &gt; &nbsp; 0020: &nbsp;63 6f 6d 80 06 73 65 63 &nbsp;72 65 74
<br>&gt;&gt; &gt;&gt; &gt; com..secret<br>&gt;&gt; &gt;&gt; &gt; ber_scanf fmt (m}) ber:<br>&gt;&gt; &gt;&gt; &gt; ber_dump: buf=0x003451d0 ptr=0x003451f6 end=0x003451fe len=8<br>&gt;&gt; &gt;&gt; &gt; &nbsp; 0000: &nbsp;00 06 73 65 63 72 65 74
<br>&gt;&gt; &gt;&gt; &gt; ..secret<br>&gt;&gt; &gt;&gt; &gt;&gt;&gt;&gt; dnPrettyNormal: &lt;cn=Manager,dc=example,dc=com&gt;<br>&gt;&gt; &gt;&gt; &gt; =&gt; ldap_bv2dn(cn=Manager,dc=example,dc=com,0)<br>&gt;&gt; &gt;&gt; &gt; &lt;= ldap_bv2dn(cn=Manager,dc=example,dc=com)=0
<br>&gt;&gt; &gt;&gt; &gt; =&gt; ldap_dn2bv(272)<br>&gt;&gt; &gt;&gt; &gt; &lt;= ldap_dn2bv(cn=Manager,dc=example,dc=com)=0<br>&gt;&gt; &gt;&gt; &gt; =&gt; ldap_dn2bv(272)<br>&gt;&gt; &gt;&gt; &gt; &lt;= ldap_dn2bv(cn=manager,dc=example,dc=com)=0
<br>&gt;&gt; &gt;&gt; &gt; &lt;&lt;&lt; dnPrettyNormal: &lt;cn=Manager,dc=example,dc=com&gt;,<br>&gt;&gt; &gt;&gt; &gt; &lt;cn=manager,dc=example,dc=com&gt;<br>&gt;&gt; &gt;&gt; &gt; do_bind: version=3 dn=&quot;cn=Manager,dc=example,dc=com&quot; method=128
<br>&gt;&gt; &gt;&gt; &gt; conn=1 op=0 BIND dn=&quot;cn=Manager,dc=example,dc=com&quot; method=128<br>&gt;&gt; &gt;&gt; &gt; ==&gt; bdb_bind: dn: cn=Manager,dc=example,dc=com<br>&gt;&gt; &gt;&gt; &gt; bdb_dn2entry(&quot;cn=manager,dc=example,dc=com&quot;)
<br>&gt;&gt; &gt;&gt; &gt; =&gt; bdb_dn2id(&quot;dc=example,dc=com&quot;)<br>&gt;&gt; &gt;&gt; &gt; &lt;= bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair<br>&gt;&gt; found<br>&gt;&gt; &gt;&gt; &gt; (-30990)<br>
&gt;&gt; &gt;&gt; &gt; send_ldap_result: conn=1 op=0 p=3<br>&gt;&gt; &gt;&gt; &gt; send_ldap_result: err=49 matched=&quot;&quot; text=&quot;&quot;<br>&gt;&gt; &gt;&gt; &gt; send_ldap_response: msgid=1 tag=97 err=49<br>&gt;&gt; &gt;&gt; &gt; ber_flush: 14 bytes to sd 13
<br>&gt;&gt; &gt;&gt; &gt; &nbsp; 0000: &nbsp;30 0c 02 01 01 61 07 0a &nbsp;01 31 04 00 04 00<br>&gt;&gt; &gt;&gt; &gt; 0....a...1....<br>&gt;&gt; &gt;&gt; &gt; ldap_write: want=14, written=14<br>&gt;&gt; &gt;&gt; &gt; &nbsp; 0000: &nbsp;30 0c 02 01 01 61 07 0a &nbsp;01 31 04 00 04 00
<br>&gt;&gt; &gt;&gt; &gt; 0....a...1....<br>&gt;&gt; &gt;&gt; &gt; conn=1 op=0 RESULT tag=97 err=49 text=<br>&gt;&gt; &gt;&gt; &gt; daemon: activity on 1 descriptor<br>&gt;&gt; &gt;&gt; &gt; daemon: activity on: 13r<br>&gt;&gt; &gt;&gt; &gt; daemon: read activity on 13
<br>&gt;&gt; &gt;&gt; &gt; connection_get(13)<br>&gt;&gt; &gt;&gt; &gt; connection_get(13): got connid=1<br>&gt;&gt; &gt;&gt; &gt; connection_read(13): checking for input on id=1<br>&gt;&gt; &gt;&gt; &gt; ber_get_next<br>
&gt;&gt; &gt;&gt; &gt; ldap_read: want=8, got=0<br>&gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt; ber_get_next on fd 13 failed errno=0 (Undefined error: 0)<br>&gt;&gt; &gt;&gt; &gt; connection_read(13): input error=-2 id=1, closing.
<br>&gt;&gt; &gt;&gt; &gt; connection_closing: readying conn=1 sd=13 for close<br>&gt;&gt; &gt;&gt; &gt; connection_close: deferring conn=1 sd=13<br>&gt;&gt; &gt;&gt; &gt; daemon: select: listen=6 active_threads=0 tvp=NULL
<br>&gt;&gt; &gt;&gt; &gt; daemon: select: listen=7 active_threads=0 tvp=NULL<br>&gt;&gt; &gt;&gt; &gt; daemon: activity on 1 descriptor<br>&gt;&gt; &gt;&gt; &gt; daemon: waked<br>&gt;&gt; &gt;&gt; &gt; daemon: select: listen=6 active_threads=0 tvp=NULL
<br>&gt;&gt; &gt;&gt; &gt; daemon: select: listen=7 active_threads=0 tvp=NULL<br>&gt;&gt; &gt;&gt; &gt; connection_resched: attempting closing conn=1 sd=13<br>&gt;&gt; &gt;&gt; &gt; connection_close: conn=1 sd=13<br>&gt;&gt; &gt;&gt; &gt; daemon: removing 13
<br>&gt;&gt; &gt;&gt; &gt; conn=1 fd=13 closed (connection lost)<br>&gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt; - Jon<br>&gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt; On Dec 21, 2007 10:54 AM, Gavin Henry &lt;<a href="mailto:ghenry@suretecsystems.com">
ghenry@suretecsystems.com</a>&gt;<br>&gt;&gt; &gt;&gt; wrote:<br>&gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; &lt;quote who=&quot;Jonathan Wage&quot;&gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; Here is my slapd.conf<br>
&gt;&gt; &gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; #<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # See slapd.conf(5) for details on configuration options.<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # This file should NOT be world readable.
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; #<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; include &nbsp; &nbsp; &nbsp; &nbsp;/private/etc/openldap/schema/core.schema<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # Define global ACLs to disable default read access.
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # Do not enable referrals until AFTER you have a working<br>&gt;&gt; directory<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # service AND an understanding of referrals.
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; #referral &nbsp; &nbsp;ldap://root.openldap.org<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; pidfile &nbsp; &nbsp; &nbsp; &nbsp;/private/var/db/openldap/run/slapd.pid<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; argsfile &nbsp; &nbsp;/private/var/db/openldap/run/slapd.args
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # Load dynamic backend modules:<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # modulepath &nbsp; &nbsp;/usr/libexec/openldap<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # moduleload &nbsp; &nbsp;back_bdb.la
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # moduleload &nbsp; &nbsp;back_ldap.la<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # moduleload &nbsp; &nbsp;back_ldbm.la<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # moduleload &nbsp; &nbsp;back_passwd.la<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # moduleload &nbsp; &nbsp;back_shell.la
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # Sample security restrictions<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # &nbsp; &nbsp;Require integrity protection (prevent hijacking)<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # &nbsp; &nbsp;Require 112-bit (3DES or better) encryption for updates
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # &nbsp; &nbsp;Require 63-bit encryption for simple bind<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # security ssf=1 update_ssf=112 simple_bind=64<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # Sample access control policy:
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # &nbsp; &nbsp;Root DSE: allow anyone to read it<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # &nbsp; &nbsp;Subschema (sub)entry DSE: allow anyone to read it<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # &nbsp; &nbsp;Other DSEs:<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # &nbsp; &nbsp; &nbsp; &nbsp;Allow self write access
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # &nbsp; &nbsp; &nbsp; &nbsp;Allow authenticated users read access<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # &nbsp; &nbsp; &nbsp; &nbsp;Allow anonymous users to authenticate<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # &nbsp; &nbsp;Directives needed to implement policy:
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # access to dn.base=&quot;&quot; by * read<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # access to dn.base=&quot;cn=Subschema&quot; by * read<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # access to *<br>
&gt;&gt; &gt;&gt; &gt;&gt; &gt; # &nbsp; &nbsp;by self write<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # &nbsp; &nbsp;by users read<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # &nbsp; &nbsp;by anonymous auth<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; #<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # if no access controls are present, the default policy
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # allows anyone and everyone to read anything but restricts<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # updates to rootdn. &nbsp;(e.g., &quot;access to * by * read&quot;)<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; #
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # rootdn can always read and write EVERYTHING!<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; #######################################################################
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # BDB database definitions<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; #######################################################################<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt;
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; database &nbsp; &nbsp;bdb<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; suffix &nbsp; &nbsp; &nbsp; &nbsp;&quot;dc=example,dc=com&quot;<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; rootdn &nbsp; &nbsp; &nbsp; &nbsp;&quot;cn=Manager,dc=example,dc=com&quot;<br>
&gt;&gt; &gt;&gt; &gt;&gt; &gt; # Cleartext passwords, especially for the rootdn, should<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # be avoid. &nbsp;See slappasswd(8) and slapd.conf(5) for details.<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # Use of strong authentication encouraged.
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; rootpw &nbsp; &nbsp; &nbsp; &nbsp;secret<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # The database directory MUST exist prior to running slapd AND<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # should only be accessible by the slapd and slap tools.
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # Mode 700 recommended.<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; directory &nbsp; &nbsp;/private/var/db/openldap/openldap-data<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; # Indices to maintain<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; index &nbsp; &nbsp;objectClass &nbsp; &nbsp;eq
<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; &gt; Which logs are you referring to? The openldap log?<br>&gt;&gt; &gt;&gt; &gt;&gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; Start slapd by hand with -d -1
<br>&gt;&gt; &gt;&gt; &gt;&gt;<br>&gt;&gt; &gt;&gt; &gt;&gt; and then bind via ldapsearch.<br>&gt;&gt; &gt;&gt; &gt;&gt;<br>&gt;&gt; &gt;&gt; &gt;&gt;<br>&gt;&gt; &gt;&gt; &gt;&gt;<br>&gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt; &gt;
<br>&gt;&gt; &gt;&gt; &gt; --<br>&gt;&gt; &gt;&gt; &gt; Jonathan Wage<br>&gt;&gt; &gt;&gt; &gt; <a href="http://www.jwage.com" target="_blank">http://www.jwage.com</a><br>&gt;&gt; &gt;&gt; &gt; <a href="http://www.centresource.com" target="_blank">
http://www.centresource.com</a><br>&gt;&gt; &gt;&gt; &gt;<br>&gt;&gt; &gt;&gt;<br>&gt;&gt; &gt;&gt;<br>&gt;&gt; &gt;<br>&gt;&gt; &gt;<br>&gt;&gt; &gt; --<br>&gt;&gt; &gt; Jonathan Wage<br>&gt;&gt; &gt; <a href="http://www.jwage.com" target="_blank">
http://www.jwage.com</a><br>&gt;&gt; &gt; <a href="http://www.centresource.com" target="_blank">http://www.centresource.com</a><br>&gt;&gt; &gt;<br>&gt;&gt;<br>&gt;&gt;<br>&gt;<br>&gt;<br>&gt; --<br>&gt; Jonathan Wage<br>
&gt; <a href="http://www.jwage.com" target="_blank">http://www.jwage.com</a><br>&gt; <a href="http://www.centresource.com" target="_blank">http://www.centresource.com</a><br>&gt;<br><br></div></div></blockquote></div><br>
<br clear="all"><br>-- <br>Jonathan Wage<br><a href="http://www.jwage.com">http://www.jwage.com</a><br><a href="http://www.centresource.com">http://www.centresource.com</a>