I'm trying to set up a very simply slapd that takes incoming requests locally, and forwards them on to a remote server using SASL/GSSAPI to get the information, so that a internal app that doesn't understand SASL/GSSAPI can get the information it needs.

I'm trying to configure back-ldap thusly:

# /etc/ldap/slapd.conf -- LDAP proxy slapd configuration file. # $Id$

# Global Options

modulepath /usr/lib/ldap moduleload back_ldap.la

readonly on access to * by * read

# LDAP Proxy Options

database ldap suffix "dc=stanford,dc=edu" uri "ldap://ldap-test1.stanford.edu/" idassert-bind bindmethod=sasl saslmech=GSSAPI protocol-version 3

but it keeps complaining that the DN for the suffix is invalid. I see nothing wrong with this suffix.

line 17 (suffix "dc=stanford,dc=edu")

...

...

dnPrettyNormal: <dc=stanford,dc=edu>

=> ldap_bv2dn(dc=stanford,dc=edu,0) <= ldap_bv2dn(dc=stanford,dc=edu)=0 ldap_err2string /etc/ldap/slapd.conf: line 17: <suffix> invalid DN 21 (Invalid syntax) slapd destroy: freeing system resources. slapd stopped. connections_destroy: nothing to destroy.

--Quanah

-- Quanah Gibson-Mount Principal Software Developer ITS/Shared Application Services Stanford University GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html