openldap-technical July 2010

openldap-technical@openldap.org

103 participants
126 discussions

Re: Subject: So I finally upgraded from slurpd...
by Sotomayor, Vicente (ITD) 09 Jul '10

09 Jul '10

>When I start slapd on the slave I get on the slave: >=================== >18:37:50 server.foo.no slapd[7971]: @(#) $OpenLDAP: slapd 2.4.23 (Jul 5 2010 18:35:50) $ ^Iroot@localhost:/home/kolla/openldap/openldap-2.4.23/debian>/build/servers/slapd >18:37:50 server.foo.no slapd[7972]: slapd starting >18:37:50 server.foo.no slapd[7972]: syncrepl_message_to_entry: rid=123 mods check (objectClass: value #0 provided more than once) >18:37:50 server.foo.no slapd[7972]: do_syncrepl: rid=123 rc 20 retrying >18:38:50 server.foo.no slapd[7972]: syncrepl_message_to_entry: rid=123 mods check (objectClass: value #0 provided more than once) >18:38:50 server.foo.no slapd[7972]: do_syncrepl: rid=123 rc 20 retrying Since you have 30 consumers, I believe each one needs a different syncrepl rid and the error string of "value #0 provided more than once" might be related to that, so maybe you need to change them on each consumer? Good luck

3 2

Segmentation Fault
by Paul Harvey 09 Jul '10

09 Jul '10

Hello all! I am currently trying to use syncrepl to maintain a set of databases around the world. I am currently doing some testing to see how things would cope over large distances, between Europe and Australia. The current set up is that there is a master provider in Europe which is being periodically modified, and two consumers: one also in Europe and one in Australia. Things were going fine - databases were in sync on both consumers - until both consumers are now segfaulting. The output even with full debugging gives no clue as to an error, simply segfault is popping up. Short of getting the c source and opening up gdb i am at a bit of a loss as to why. => access_allowed: search access to "o=grid" "entry" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) => access_allowed: search access to "Mds-Vo-name=ru-Moscow-GCRAS-LCG2,Mds-Vo-name=local,o=grid" "entry" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) => access_allowed: search access to "Mds-Vo-name=ru-Moscow-GCRAS-LCG2,Mds-Vo-name=local,o=grid" "objectClass" requested <= root access granted => access_allowed: search access granted by manage(=mwrscxd) Segmentation fault Restarting slapd does not solve the problem, the refresh phase begins and then segfaults on both machines. I (somewhat jumping the gun) wiped the consumer databases and started again and after a day things are going ok. I have been doing a bit of hunting and can't seem to find any other cases of this. Does anyone have any suggestions, and what more information do i need to provide.

2 1

getent passwd fails
by Joakim Seeberg 09 Jul '10

09 Jul '10

2 2

Repeated messages : op=0 do_bind: invalid dn (uid=,ou=...
by Frank Bonnet 09 Jul '10

09 Jul '10

Hello since few time I get those repeated messages in syslog Jul 8 10:20:18 ldap slapd[28833]: conn=312612 op=0 do_bind: invalid dn (uid=,ou=Personnes,dc=xxxxx,dc=fr) this happen exactly every minute Anyone could give me some pointers ? Thanks

4 6

dynlist attributes and search filters
by Thomas Wunder 08 Jul '10

08 Jul '10

Hey Guys, I'm currently looking for a solution for this: In my setup slapo-dynlist is being used (in conjunction with slapo-relay/slapo-rwm but that doesn't matter here i think) to add add memberOf attributes to particular posixGroup objects in my directory dynamically. On the first view that worked great, that is when i try to view these posixGroup objects they have the usernames in their memberOf attributes as expected. However as soon as I try to search for those objects which have a particular value for a memberOf attribute i.e. as soon as i do a search with the memberOf attribute included into the search filter like (&(objectClass=posixGroup)(memberOf=tom2)) I don't get any results any more though matching objects exist. After hours of googling I found out that this is due to the fact that the dynamic attributes are added when an object gets retrieved but are not present when a search operation is trying to access them... To make clear what I exactly mean, I've got this little example for you: # ldapsearch -xD cn=ldapadmin,dc=uni-bamberg,dc=de -w ldappw -b ou=ubuntu,ou=groups,dc=uni-bamberg,dc=de -LLL '(&(cn=sudo)(memberUid=*))' '*' ...doesn't return any matching objects however leaving the memberUid attribute (which is dynamically added to the object) away from the search filter i get the following: # ldapsearch -xD cn=ldapadmin,dc=uni-bamberg,dc=de -w ldappw -b ou=ubuntu,ou=groups,dc=uni-bamberg,dc=de -LLL '(cn=sudo)' '*' dn: cn=sudo,ou=ubuntu,ou=groups,dc=uni-bamberg,dc=de gidNumber: 27 objectClass: posixGroup objectClass: top objectClass: labeledURIObject userPassword:: e2NyeXB0fXg= cn: sudo labeledURI: ldap:///ou=students,dc=uni-bamberg,dc=de?uid?one?(&(objectClass=po sixAccount)(description=groups*sudo*)) uid: sdfdfdsf uid: sdsfasfsd uid: asdfasdfasdfasdf uid: tom2 uid: dsafsdfasfsd uid: asdfasdfdfdf (uid was hidden in my example for reasons of privacy and the 'uid' attributes are rewritten later on into memberUid; I also included the uid attribute into the schema-definition of posixGroup, such that there should be no problems with schemas etc...) my configuration for slapo dynlist is pretty simple: overlay dynlist dynlist-attrset labeledURIObject labeledURI This guy here seems to have pretty much the same problem as I have: http://www.mail-archive.com/openldap-software@openldap.org/msg14738.html So my question is is there any workaround for my problem? I really need to be able to have my users being put to the groups dynamically. Would plugging a caching overlay (such as pcache) in between the output of dynlist and any other processing (such as rewriting using rwm) help to get the dynamically added memberOf attribute searchable? Thanks in advance! Tom

1 0

getent passwd fails
by Joakim Seeberg 08 Jul '10

08 Jul '10

Dear list, Yet another newbie having trouble setting up openldap! On Debian Lenny with ip 10.0.2.6 I have set up my openldap server listening on port 389 . From here I can do a ldapsearch and getent passw showing ldap is working. From the client I can do ldapsearch -W -D 'cn=admin,dc=pdc,dc=com' 'objectclass=*' , telnet 10.0.2.6 389, but getent passwd shows no ldap entries. Strace gives me no clue but maybe someone here can help. I removed "files" from nsswitch.conf and restarted nscd before running: strace getent passw execve("/usr/bin/getent", ["getent", "passwd"], [/* 35 vars */]) = 0 brk(0) = 0x9aaf000 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) mmap2(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785c000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=73947, ...}) = 0 mmap2(NULL, 73947, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7849000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/lib/i686/cmov/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\320m\1\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=1327556, ...}) = 0 mmap2(NULL, 1337704, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7702000 mprotect(0xb7842000, 4096, PROT_NONE) = 0 mmap2(0xb7843000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x140) = 0xb7843000 mmap2(0xb7846000, 10600, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7846000 close(3) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7701000 set_thread_area({entry_number:-1 -> 6, base_addr:0xb77018d0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 mprotect(0xb7843000, 8192, PROT_READ) = 0 mprotect(0x804c000, 4096, PROT_READ) = 0 mprotect(0xb787a000, 4096, PROT_READ) = 0 munmap(0xb7849000, 73947) = 0 brk(0) = 0x9aaf000 brk(0x9ad0000) = 0x9ad0000 open("/usr/lib/locale/locale-archive", O_RDONLY|O_LARGEFILE) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=1527856, ...}) = 0 mmap2(NULL, 1527856, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb758b000 close(3) = 0 open("/etc/nsswitch.conf", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=513, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785b000 read(3, "# /etc/nsswitch.conf\n#\n# Example"..., 1024) = 513 read(3, "", 1024) = 0 close(3) = 0 munmap(0xb785b000, 4096) = 0 open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=73947, ...}) = 0 mmap2(NULL, 73947, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7849000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/lib/libnss_ldap.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0P*\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=76348, ...}) = 0 mmap2(NULL, 121248, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb756d000 mmap2(0xb757f000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12) = 0xb757f000 mmap2(0xb7580000, 43424, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7580000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/usr/lib/libldap_r-2.4.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\320\274\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=270296, ...}) = 0 mmap2(NULL, 277696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7529000 mmap2(0xb756a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x40) = 0xb756a000 mmap2(0xb756c000, 3264, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb756c000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/usr/lib/liblber-2.4.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0@)\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=51292, ...}) = 0 mmap2(NULL, 50020, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb751c000 mmap2(0xb7528000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc) = 0xb7528000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/usr/lib/libsasl2.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0P7\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=90212, ...}) = 0 mmap2(NULL, 93036, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7505000 mmap2(0xb751b000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x15) = 0xb751b000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/usr/lib/libkrb5.so.3", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\320\25\1\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=729204, ...}) = 0 mmap2(NULL, 728220, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7453000 mmap2(0xb74ff000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xac) = 0xb74ff000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/lib/libcom_err.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0@\17\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=9148, ...}) = 0 mmap2(NULL, 11980, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7450000 mmap2(0xb7452000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1) = 0xb7452000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/usr/lib/libgssapi_krb5.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0P\\\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=189424, ...}) = 0 mmap2(NULL, 192328, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7421000 mmap2(0xb744f000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2d) = 0xb744f000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/lib/i686/cmov/libdl.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0@\n\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=9736, ...}) = 0 mmap2(NULL, 12408, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb741d000 mmap2(0xb741f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1) = 0xb741f000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/lib/i686/cmov/libnsl.so.1", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\2201\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=79676, ...}) = 0 mmap2(NULL, 92136, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7406000 mmap2(0xb7419000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12) = 0xb7419000 mmap2(0xb741b000, 6120, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb741b000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/lib/i686/cmov/libresolv.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0000&\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=71432, ...}) = 0 mmap2(NULL, 79944, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb73f2000 mmap2(0xb7402000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10) = 0xb7402000 mmap2(0xb7404000, 6216, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7404000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/lib/i686/cmov/libpthread.so.0", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20J\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=117367, ...}) = 0 mmap2(NULL, 98784, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb73d9000 mmap2(0xb73ee000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14) = 0xb73ee000 mmap2(0xb73f0000, 4576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb73f0000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/usr/lib/libgnutls.so.26", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\357\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=622688, ...}) = 0 mmap2(NULL, 621368, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7341000 mmap2(0xb73d5000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x94) = 0xb73d5000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/usr/lib/libk5crypto.so.3", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\240-\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=143180, ...}) = 0 mmap2(NULL, 142612, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb731e000 mmap2(0xb7340000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x22) = 0xb7340000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/usr/lib/libkrb5support.so.0", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\320\32\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=24552, ...}) = 0 mmap2(NULL, 27412, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7317000 mmap2(0xb731d000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5) = 0xb731d000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/lib/libkeyutils.so.1", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\220\n\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=6560, ...}) = 0 mmap2(NULL, 9384, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7314000 mmap2(0xb7316000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1) = 0xb7316000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/usr/lib/libtasn1.so.3", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`\22\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=61228, ...}) = 0 mmap2(NULL, 64484, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7304000 mmap2(0xb7313000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe) = 0xb7313000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/usr/lib/libz.so.1", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\360\31\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=79980, ...}) = 0 mmap2(NULL, 78560, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb72f0000 mmap2(0xb7303000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13) = 0xb7303000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/usr/lib/libgcrypt.so.11", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\220L\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=469632, ...}) = 0 mmap2(NULL, 473100, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb727c000 mmap2(0xb72ed000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x70) = 0xb72ed000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/usr/lib/libgpg-error.so.0", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 \6\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=11540, ...}) = 0 mmap2(NULL, 14512, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7278000 mmap2(0xb727b000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2) = 0xb727b000 close(3) = 0 mprotect(0xb73ee000, 4096, PROT_READ) = 0 mprotect(0xb7402000, 4096, PROT_READ) = 0 mprotect(0xb7419000, 4096, PROT_READ) = 0 mprotect(0xb741f000, 4096, PROT_READ) = 0 set_tid_address(0xb7701938) = 5888 set_robust_list(0xb7701940, 0xc) = 0 futex(0xbfd482e4, FUTEX_WAKE_PRIVATE, 1) = 0 futex(0xbfd482e4, FUTEX_WAIT_BITSET_PRIVATE|FUTEX_CLOCK_REALTIME, 1, NULL, bfd482f4) = -1 EAGAIN (Resource temporarily unavailable) rt_sigaction(SIGRTMIN, {0xb73dd410, [], SA_SIGINFO}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {0xb73dd8e0, [], SA_RESTART|SA_SIGINFO}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0 uname({sys="Linux", node="vega", ...}) = 0 munmap(0xb7849000, 73947) = 0 rt_sigaction(SIGPIPE, {SIG_IGN, [], 0}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGPIPE, {SIG_DFL, [], 0}, NULL, 8) = 0 rt_sigaction(SIGPIPE, {SIG_IGN, [], 0}, {SIG_DFL, [], 0}, 8) = 0 geteuid32() = 0 futex(0xb757f564, FUTEX_WAKE_PRIVATE, 2147483647) = 0 open("/etc/libnss-ldap.conf", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0600, st_size=9733, ...}) = 0 fstat64(3, {st_mode=S_IFREG|0600, st_size=9733, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785b000 read(3, "###DEBCONF###\n# the configuratio"..., 1024) = 1024 read(3, "'/' used as directory separator\n"..., 1024) = 1024 read(3, ": reconnect to DSA with exponent"..., 1024) = 1024 read(3, " attribute, and pam_ldap is\n# co"..., 1024) = 1024 read(3, "t all; presume\n# the directory s"..., 1024) = 1024 read(3, "distinguished names in group\n# m"..., 1024) = 1024 read(3, "fc2307attribute\tmapped_attribute"..., 1024) = 1024 read(3, "ribute shadowLastChange pwdLastS"..., 1024) = 1024 read(3, "=aixgroup,?one\n#nss_map_attribut"..., 1024) = 1024 read(3, "f tls_checkpeer is \"yes\"\n#tls_ca"..., 1024) = 517 read(3, "", 1024) = 0 close(3) = 0 munmap(0xb785b000, 4096) = 0 open("/etc/libnss-ldap.secret", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0600, st_size=10, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785b000 read(3, "*******\n", 1024) = 10 close(3) = 0 munmap(0xb785b000, 4096) = 0 uname({sys="Linux", node="vega", ...}) = 0 open("/etc/resolv.conf", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=25, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785b000 read(3, "nameserver 212.242.40.3\n\n", 1024) = 25 read(3, "", 1024) = 0 close(3) = 0 munmap(0xb785b000, 4096) = 0 uname({sys="Linux", node="vega", ...}) = 0 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = 0 send(3, "\2\0\0\0\r\0\0\0\6\0\0\0hosts\0", 18, MSG_NOSIGNAL) = 18 poll([{fd=3, events=POLLIN|POLLERR|POLLHUP}], 1, 5000) = 1 ([{fd=3, revents=POLLIN|POLLHUP}]) recvmsg(3, {msg_name(0)=NULL, msg_iov(2)=[{"\0\0\0\0\0\0", 6}, {"\214\211\324\277\335\23\200\267", 8}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 0 close(3) = 0 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = 0 send(3, "\2\0\0\0\4\0\0\0\5\0\0\0vega\0", 17, MSG_NOSIGNAL) = 17 poll([{fd=3, events=POLLIN|POLLERR|POLLHUP}], 1, 5000) = 1 ([{fd=3, revents=POLLIN|POLLHUP}]) read(3, "\2\0\0\0\377\377\377\377\0\0\0\0\0\0\0\0\377\377\377\377\377\377\377\377\0\0\0\0\377\377\377\377", 32) = 32 close(3) = 0 open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=73947, ...}) = 0 mmap2(NULL, 73947, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7849000 close(3) = 0 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory) open("/lib/i686/cmov/libnss_files.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 \32\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0644, st_size=42572, ...}) = 0 mmap2(NULL, 45772, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb726c000 mmap2(0xb7276000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9) = 0xb7276000 close(3) = 0 mprotect(0xb7276000, 4096, PROT_READ) = 0 munmap(0xb7849000, 73947) = 0 open("/etc/host.conf", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=9, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785b000 read(3, "multi on\n", 1024) = 9 read(3, "", 1024) = 0 close(3) = 0 munmap(0xb785b000, 4096) = 0 futex(0xb7847b24, FUTEX_WAKE_PRIVATE, 2147483647) = 0 open("/etc/hosts", O_RDONLY|O_CLOEXEC) = 3 fcntl64(3, F_GETFD) = 0x1 (flags FD_CLOEXEC) fstat64(3, {st_mode=S_IFREG|0644, st_size=316, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785b000 read(3, "127.0.0.1\tlocalhost\n127.0.1.1\tve"..., 1024) = 316 read(3, "", 1024) = 0 close(3) = 0 munmap(0xb785b000, 4096) = 0 open("/etc/ldap/ldap.conf", O_RDONLY|O_LARGEFILE) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=121, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785b000 read(3, "URI ldap://10.0.2.6:389\nBASE dc="..., 1024) = 121 read(3, "", 1024) = 0 close(3) = 0 munmap(0xb785b000, 4096) = 0 geteuid32() = 0 getuid32() = 0 open("/root/ldaprc", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("/root/.ldaprc", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) open("ldaprc", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory) stat64("/etc/libnss-ldap.conf", {st_mode=S_IFREG|0600, st_size=9733, ...}) = 0 geteuid32() = 0 socket(PF_NETLINK, SOCK_RAW, 0) = 3 bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 getsockname(3, {sa_family=AF_NETLINK, pid=5888, groups=00000000}, [12]) = 0 time(NULL) = 1278584013 sendto(3, "\24\0\0\0\26\0\1\3\315\2445L\0\0\0\0\0\0\0\0", 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"0\0\0\0\24\0\2\0\315\2445L\0\27\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 108 recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\315\2445L\0\27\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 192 recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\315\2445L\0\27\0\0\0\0\0\0\1\0\0\0\24\0\1\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 close(3) = 0 stat64("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=25, ...}) = 0 open("/etc/resolv.conf", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=25, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785b000 read(3, "nameserver 212.242.40.3\n\n", 1024) = 25 read(3, "", 1024) = 0 close(3) = 0 munmap(0xb785b000, 4096) = 0 uname({sys="Linux", node="vega", ...}) = 0 open("/etc/hosts", O_RDONLY|O_CLOEXEC) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=316, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785b000 read(3, "127.0.0.1\tlocalhost\n127.0.1.1\tve"..., 1024) = 316 read(3, "", 1024) = 0 close(3) = 0 munmap(0xb785b000, 4096) = 0 open("/etc/gai.conf", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=2940, ...}) = 0 fstat64(3, {st_mode=S_IFREG|0644, st_size=2940, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785b000 read(3, "# Configuration for getaddrinfo("..., 1024) = 1024 read(3, "3\n#label ::ffff:0:0/96 4\n#label "..., 1024) = 1024 read(3, ":/96 20\n#precedence ::f"..., 1024) = 892 read(3, "", 1024) = 0 close(3) = 0 munmap(0xb785b000, 4096) = 0 futex(0xb7846cd0, FUTEX_WAKE_PRIVATE, 2147483647) = 0 socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 3 connect(3, {sa_family=AF_INET, sin_port=htons(389), sin_addr=inet_addr("127.0.0.1")}, 16) = 0 getsockname(3, {sa_family=AF_INET, sin_port=htons(42582), sin_addr=inet_addr("127.0.0.1")}, [16]) = 0 close(3) = 0 socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3 connect(3, {sa_family=AF_INET6, sin6_port=htons(389), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0 getsockname(3, {sa_family=AF_INET6, sin6_port=htons(42341), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0 close(3) = 0 socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 3 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 setsockopt(3, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 setsockopt(3, SOL_TCP, TCP_NODELAY, [1], 4) = 0 fcntl64(3, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(3, {sa_family=AF_INET6, sin6_port=htons(389), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 EINPROGRESS (Operation now in progress) poll([{fd=3, events=POLLOUT|POLLERR|POLLHUP}], 1, 30000) = 1 ([{fd=3, revents=POLLERR|POLLHUP}]) getpeername(3, 0xbfd479c8, [128]) = -1 ENOTCONN (Transport endpoint is not connected) read(3, 0xbfd47a57, 1) = -1 ECONNREFUSED (Connection refused) shutdown(3, 2 /* send and receive */) = -1 ENOTCONN (Transport endpoint is not connected) close(3) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 3 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 setsockopt(3, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 setsockopt(3, SOL_TCP, TCP_NODELAY, [1], 4) = 0 fcntl64(3, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(3, {sa_family=AF_INET, sin_port=htons(389), sin_addr=inet_addr("127.0.0.1")}, 16) = -1 EINPROGRESS (Operation now in progress) poll([{fd=3, events=POLLOUT|POLLERR|POLLHUP}], 1, 30000) = 1 ([{fd=3, revents=POLLERR|POLLHUP}]) getpeername(3, 0xbfd479c8, [128]) = -1 ENOTCONN (Transport endpoint is not connected) read(3, 0xbfd47a57, 1) = -1 ECONNREFUSED (Connection refused) shutdown(3, 2 /* send and receive */) = -1 ENOTCONN (Transport endpoint is not connected) close(3) = 0 time(NULL) = 1278584013 open("/etc/localtime", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=2134, ...}) = 0 fstat64(3, {st_mode=S_IFREG|0644, st_size=2134, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785b000 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\6\0\0\0\6\0\0\0\0"..., 1024) = 1024 _llseek(3, 1082, [2106], SEEK_CUR) = 0 read(3, "\nCET-1CEST,M3.5.0,M10.5.0/3\n", 1024) = 28 close(3) = 0 munmap(0xb785b000, 4096) = 0 socket(PF_FILE, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3 connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0 send(3, "<83>Jul 8 12:13:33 getent: nss_"..., 128, MSG_NOSIGNAL) = 128 time(NULL) = 1278584013 send(3, "<86>Jul 8 12:13:33 getent: nss_"..., 111, MSG_NOSIGNAL) = 111 time(NULL) = 1278584013 send(3, "<86>Jul 8 12:13:33 getent: nss_"..., 68, MSG_NOSIGNAL) = 68 stat64("/etc/libnss-ldap.conf", {st_mode=S_IFREG|0600, st_size=9733, ...}) = 0 geteuid32() = 0 socket(PF_NETLINK, SOCK_RAW, 0) = 4 bind(4, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 getsockname(4, {sa_family=AF_NETLINK, pid=5888, groups=00000000}, [12]) = 0 time(NULL) = 1278584013 sendto(4, "\24\0\0\0\26\0\1\3\315\2445L\0\0\0\0\0\0\0\0", 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"0\0\0\0\24\0\2\0\315\2445L\0\27\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 108 recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\315\2445L\0\27\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 192 recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\315\2445L\0\27\0\0\0\0\0\0\1\0\0\0\24\0\1\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 close(4) = 0 stat64("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=25, ...}) = 0 open("/etc/hosts", O_RDONLY|O_CLOEXEC) = 4 fstat64(4, {st_mode=S_IFREG|0644, st_size=316, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785b000 read(4, "127.0.0.1\tlocalhost\n127.0.1.1\tve"..., 1024) = 316 read(4, "", 1024) = 0 close(4) = 0 munmap(0xb785b000, 4096) = 0 socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 4 connect(4, {sa_family=AF_INET, sin_port=htons(389), sin_addr=inet_addr("127.0.0.1")}, 16) = 0 getsockname(4, {sa_family=AF_INET, sin_port=htons(58878), sin_addr=inet_addr("127.0.0.1")}, [16]) = 0 close(4) = 0 socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 4 connect(4, {sa_family=AF_INET6, sin6_port=htons(389), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0 getsockname(4, {sa_family=AF_INET6, sin6_port=htons(51684), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0 close(4) = 0 socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 4 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 setsockopt(4, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 setsockopt(4, SOL_TCP, TCP_NODELAY, [1], 4) = 0 fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(4, {sa_family=AF_INET6, sin6_port=htons(389), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 EINPROGRESS (Operation now in progress) poll([{fd=4, events=POLLOUT|POLLERR|POLLHUP}], 1, 30000) = 1 ([{fd=4, revents=POLLERR|POLLHUP}]) getpeername(4, 0xbfd479c8, [128]) = -1 ENOTCONN (Transport endpoint is not connected) read(4, 0xbfd47a57, 1) = -1 ECONNREFUSED (Connection refused) shutdown(4, 2 /* send and receive */) = -1 ENOTCONN (Transport endpoint is not connected) close(4) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 4 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 setsockopt(4, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 setsockopt(4, SOL_TCP, TCP_NODELAY, [1], 4) = 0 fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(4, {sa_family=AF_INET, sin_port=htons(389), sin_addr=inet_addr("127.0.0.1")}, 16) = -1 EINPROGRESS (Operation now in progress) poll([{fd=4, events=POLLOUT|POLLERR|POLLHUP}], 1, 30000) = 1 ([{fd=4, revents=POLLERR|POLLHUP}]) getpeername(4, 0xbfd479c8, [128]) = -1 ENOTCONN (Transport endpoint is not connected) read(4, 0xbfd47a57, 1) = -1 ECONNREFUSED (Connection refused) shutdown(4, 2 /* send and receive */) = -1 ENOTCONN (Transport endpoint is not connected) close(4) = 0 time(NULL) = 1278584013 send(3, "<83>Jul 8 12:13:33 getent: nss_"..., 128, MSG_NOSIGNAL) = 128 time(NULL) = 1278584013 send(3, "<86>Jul 8 12:13:33 getent: nss_"..., 111, MSG_NOSIGNAL) = 111 time(NULL) = 1278584013 send(3, "<86>Jul 8 12:13:33 getent: nss_"..., 89, MSG_NOSIGNAL) = 89 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 nanosleep({1, 0}, 0xbfd47d30) = 0 stat64("/etc/libnss-ldap.conf", {st_mode=S_IFREG|0600, st_size=9733, ...}) = 0 geteuid32() = 0 socket(PF_NETLINK, SOCK_RAW, 0) = 4 bind(4, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 getsockname(4, {sa_family=AF_NETLINK, pid=5888, groups=00000000}, [12]) = 0 time(NULL) = 1278584014 sendto(4, "\24\0\0\0\26\0\1\3\316\2445L\0\0\0\0\0\0\0\0", 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"0\0\0\0\24\0\2\0\316\2445L\0\27\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 108 recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\316\2445L\0\27\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 192 recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\316\2445L\0\27\0\0\0\0\0\0\1\0\0\0\24\0\1\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 close(4) = 0 stat64("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=25, ...}) = 0 open("/etc/hosts", O_RDONLY|O_CLOEXEC) = 4 fstat64(4, {st_mode=S_IFREG|0644, st_size=316, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb785b000 read(4, "127.0.0.1\tlocalhost\n127.0.1.1\tve"..., 1024) = 316 read(4, "", 1024) = 0 close(4) = 0 munmap(0xb785b000, 4096) = 0 socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 4 connect(4, {sa_family=AF_INET, sin_port=htons(389), sin_addr=inet_addr("127.0.0.1")}, 16) = 0 getsockname(4, {sa_family=AF_INET, sin_port=htons(60403), sin_addr=inet_addr("127.0.0.1")}, [16]) = 0 close(4) = 0 socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 4 connect(4, {sa_family=AF_INET6, sin6_port=htons(389), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0 getsockname(4, {sa_family=AF_INET6, sin6_port=htons(45837), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0 close(4) = 0 socket(PF_INET6, SOCK_STREAM, IPPROTO_IP) = 4 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 setsockopt(4, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 setsockopt(4, SOL_TCP, TCP_NODELAY, [1], 4) = 0 fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(4, {sa_family=AF_INET6, sin6_port=htons(389), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 EINPROGRESS (Operation now in progress) poll([{fd=4, events=POLLOUT|POLLERR|POLLHUP}], 1, 30000) = 1 ([{fd=4, revents=POLLERR|POLLHUP}]) getpeername(4, 0xbfd479c8, [128]) = -1 ENOTCONN (Transport endpoint is not connected) read(4, 0xbfd47a57, 1) = -1 ECONNREFUSED (Connection refused) shutdown(4, 2 /* send and receive */) = -1 ENOTCONN (Transport endpoint is not connected) close(4) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 4 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 setsockopt(4, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0 setsockopt(4, SOL_TCP, TCP_NODELAY, [1], 4) = 0 fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(4, {sa_family=AF_INET, sin_port=htons(389), sin_addr=inet_addr("127.0.0.1")}, 16) = -1 EINPROGRESS (Operation now in progress) poll([{fd=4, events=POLLOUT|POLLERR|POLLHUP}], 1, 30000) = 1 ([{fd=4, revents=POLLERR|POLLHUP}]) getpeername(4, 0xbfd479c8, [128]) = -1 ENOTCONN (Transport endpoint is not connected) read(4, 0xbfd47a57, 1) = -1 ECONNREFUSED (Connection refused) shutdown(4, 2 /* send and receive */) = -1 ENOTCONN (Transport endpoint is not connected) close(4) = 0 time(NULL) = 1278584014 send(3, "<83>Jul 8 12:13:34 getent: nss_"..., 128, MSG_NOSIGNAL) = 128 time(NULL) = 1278584014 send(3, "<86>Jul 8 12:13:34 getent: nss_"..., 111, MSG_NOSIGNAL) = 111 time(NULL) = 1278584014 send(3, "<83>Jul 8 12:13:34 getent: nss_"..., 90, MSG_NOSIGNAL) = 90 rt_sigaction(SIGPIPE, {SIG_DFL, [], 0}, NULL, 8) = 0 rt_sigaction(SIGPIPE, {SIG_IGN, [], 0}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGPIPE, {SIG_DFL, [], 0}, NULL, 8) = 0 exit_group(0) = ?

1 0

Question about LDAP and SSL.
by Bryan Boone 08 Jul '10

08 Jul '10

Hi everyone. I am kinda a noob to OpenLDAP and SSL for that matter. I am writting a web page that resides on a special piece of proprietary hardware (not a PC) that I need authentication for (running linux with apache server). I would like LDAP to be one of the authentication methods (this hardware will be a LDAP client) when a customer logs into the web page of my device. Of course I need this to support LDAP with SSL. I went to the openldap website and found the directions to create and generated the SSL certs and installed them in openLDAP (3 total). There is the server cert and key, and then the client cert. You know how when connecting to a https:// website IE, or firefox will prompt you if you want to accept the SSL certificate (if the cert is not signed by a CA)? Does openldap provide a mechanism that will accomplish the same thing (automatic client cert acceptance)? Or will I need to provide a way on my hardware where the customer can manualy upload his/her client cert to the device? Does that make sense? thanks

3 3

Re: TLS problem
by Cédric Jeanneret 07 Jul '10

07 Jul '10

Hello, Hm, using debian etch 64b - maybe a 64b story ? For now, I just cannot manage to make it work - errors have changed, but still no way to connect to the server -.-. I'll post tomorrow the new config and its error messages. Thank you for those who tried to help me. Regards, C. On Wed, Jul 7, 2010 at 9:40 PM, Bryan Boone <v_1bboon(a)yahoo.com> wrote: > Hi Cedric. I have the same problems. I am using Opensuse 11.2 64-bit > edition. Other people have the same problem. I think this must be a bug in > opensuse anyway. I wonder if you are experiencing the same issue. I > switched over to SLES 10 and I don't have any problems. > > ________________________________ > From: Cedric Jeanneret <cedric.jeanneret(a)camptocamp.com> > To: openldap-technical(a)openldap.org > Sent: Wed, July 7, 2010 3:17:27 AM > Subject: TLS problem > > Hello, > > I'm trying to configure an openldap with TLS so that all connections are > encrypted. > > Here's the revelent part of my slapd.conf: > > TLSCipherSuite HIGH:MEDIUM:+SSLv3 > TLSVerifyClient never > TLSCertificateFile /etc/ldap/ssl/server.crt > TLSCertificateKeyFile /etc/ldap/ssl/server.key > > Here's my ldap.conf: > > URI ldaps://my.server.ltd > BASE dc=my,dc=server,dc=ltd > LDAP_VERSION 3 > > #SIZELIMIT 12 > #TIMELIMIT 15 > #DEREF never > ssl start_tls > ssl on > TLS_CIPHER_SUITE HIGH:MEDIUM:+SSLv3 > > > While starting slapd with: > slapd -h 'ldaps:///' -g openldap -u openldap -d 16383 > > and trying to connect to it with: > ldapsearch -Z -d 16383 -LLL -b cn=admin,dc=my,dc=server,dc=ltd -w "foo.bar" > -S cn -h my.server.ltd -p 636 cn > > I have these logs : > [slapd] > > daemon: activity on 1 descriptor >>>> slap_listener(ldaps:///)daemon: listen=7, new connection on 11 > ldap_pvt_gethostbyname_a: host=my, r=0 > daemon: added 11r (active) listener=(nil) > conn=0 fd=11 ACCEPT from IP=xx.yy.zz.aa:38806 (IP=0.0.0.0:636) > daemon: select: listen=6 active_threads=0 tvp=NULL > daemon: select: listen=7 active_threads=0 tvp=NULL > daemon: activity on 1 descriptor > daemon: activity on: 11r > daemon: read activity on 11 > connection_get(11) > connection_get(11): got connid=0 > connection_read(11): checking for input on id=0 > TLS trace: SSL_accept:before/accept initialization > tls_read: want=11, got=11 > 0000: 30 3e 02 01 01 63 39 04 00 0a 01 0>...c9.... > TLS trace: SSL_accept:error in SSLv2/v3 read client hello A > TLS: can't accept. > TLS: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol > s23_srvr.c:562 > connection_read(11): TLS accept failure error=-1 id=0, closing > connection_closing: readying conn=0 sd=11 for close > connection_close: conn=0 sd=11 > daemon: removing 11 > conn=0 fd=11 closed (TLS negotiation failure) > daemon: select: listen=6 active_threads=0 tvp=NULL > daemon: select: listen=7 active_threads=0 tvp=NULL > daemon: activity on 1 descriptor > daemon: waked > daemon: select: listen=6 active_threads=0 tvp=NULL > daemon: select: listen=7 active_threads=0 tvp=NULL > > [ldapsearch] > > ldap_create > ldap_url_parse_ext(ldap://my.server.ltd:636) > ldap_pvt_sasl_getmech > ldap_search > put_filter: "(objectclass=*)" > put_filter: simple > put_simple_filter: "objectclass=*" > ldap_build_search_req ATTRS: supportedSASLMechanisms > ldap_send_initial_request > ldap_new_connection 1 1 0 > ldap_int_open_connection > ldap_connect_to_host: TCP my.server.ltd:636 > ldap_new_socket: 3 > ldap_prepare_socket: 3 > ldap_connect_to_host: Trying xx.yy.zz.aa:636 > ldap_pvt_connect: fd: 3 tm: -1 async: 0 > ldap_open_defconn: successful > ldap_send_server_request > ber_scanf fmt ({it) ber: > ber_dump: buf=0xb92b6d68 ptr=0xb92b6d68 end=0xb92b6da8 len=64 > 0000: 30 3e 02 01 01 63 39 04 00 0a 01 00 0a 01 00 02 0>...c9......... > 0010: 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 ..........object > 0020: 63 6c 61 73 73 30 19 04 17 73 75 70 70 6f 72 74 class0...support > 0030: 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 edSASLMechanisms > ber_scanf fmt ({) ber: > ber_dump: buf=0xb92b6d68 ptr=0xb92b6d6d end=0xb92b6da8 len=59 > 0000: 63 39 04 00 0a 01 00 0a 01 00 02 01 00 02 01 00 c9.............. > 0010: 01 01 00 87 0b 6f 62 6a 65 63 74 63 6c 61 73 73 .....objectclass > 0020: 30 19 04 17 73 75 70 70 6f 72 74 65 64 53 41 53 0...supportedSAS > 0030: 4c 4d 65 63 68 61 6e 69 73 6d 73 LMechanisms > ber_flush2: 64 bytes to sd 3 > 0000: 30 3e 02 01 01 63 39 04 00 0a 01 00 0a 01 00 02 0>...c9......... > 0010: 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 ..........object > 0020: 63 6c 61 73 73 30 19 04 17 73 75 70 70 6f 72 74 class0...support > 0030: 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 edSASLMechanisms > ldap_write: want=64, written=64 > 0000: 30 3e 02 01 01 63 39 04 00 0a 01 00 0a 01 00 02 0>...c9......... > 0010: 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 ..........object > 0020: 63 6c 61 73 73 30 19 04 17 73 75 70 70 6f 72 74 class0...support > 0030: 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 edSASLMechanisms > ldap_result ld 0xb92ae158 msgid 1 > wait4msg ld 0xb92ae158 msgid 1 (infinite timeout) > wait4msg continue ld 0xb92ae158 msgid 1 all 1 > ** ld 0xb92ae158 Connections: > * host: my.server.ltd port: 636 (default) > refcnt: 2 status: Connected > last used: Wed Jul 7 12:11:03 2010 > > > ** ld 0xb92ae158 Outstanding Requests: > * msgid 1, origid 1, status InProgress > outstanding referrals 0, parent count 0 > ld 0xb92ae158 request count 1 (abandoned 0) > ** ld 0xb92ae158 Response Queue: > Empty > ld 0xb92ae158 response count 0 > ldap_chkResponseList ld 0xb92ae158 msgid 1 all 1 > ldap_chkResponseList returns ld 0xb92ae158 NULL > ldap_int_select > read1msg: ld 0xb92ae158 msgid 1 all 1 > ber_get_next > ldap_read: want=8, got=0 > > ber_get_next failed. > ldap_err2string > ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1) > > I really don't know what to do. My certificates are correct I guess, as > we're using them in apache for https... For information, they are > self-signed. > > Any help would be great. > > Thank you! > > Best regards, > > C. > > > -- > Cédric Jeanneret | System Administrator > 021 619 10 32 | Camptocamp SA > cedric.jeanneret(a)camptocamp.com | PSE-A / EPFL > >

3 2

Re: Migratate Zimbra to Openldap
by Claudio Guzman 07 Jul '10

07 Jul '10

on a debian lenny install only zimbra LDAP, but slapadd import command is not there some other way to import accounts 2010/6/11 Quanah Gibson-Mount <quanah(a)zimbra.com>: > --On Friday, June 11, 2010 4:09 PM -0400 Claudio Guzman <cguzmana(a)gmail.com> > wrote: > >> I need not upgrade, I require the zimbra ldap export and import it >> into a machine that only has ldap > > Then you should simply install the zimbra-ldap package only on the system. > There's no need to go and do all of this yourself. I suggest you read the > multi-server install guide. > > --Quanah > > -- > > Quanah Gibson-Mount > Principal Software Engineer > Zimbra, Inc > -------------------- > Zimbra :: the leader in open source messaging and collaboration >

2 1

ACL to create a CRUD to OpenLDAP
by MrBiTs 07 Jul '10

07 Jul '10

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi, all I'm writing a little script to allow some people to manage LDAP users, as a CRUD. I created a user uid=crud,ou=Applications,dc=domain,dc=org and I need to allow this user to add, modify and delete users that only belongs to ou=FTPUsers,dc=domain,dc=org. I wrote this ACL in slapd.conf: access to dn.subtree="ou=FTPUsers,dc=domain,dc=org" by dn.exact="cn=Admin,dc=domain,dc=org" write by dn.exact="uid=crud,ou=Applications,dc=domain,dc=org" write by self write by * read Testing ACL, I had: [root@svr2021 openldap2.4]# slapacl2.4 -f /etc/openldap2.4/slapd.conf -b "uid=crud,ou=Applications,dc=domain,dc=org" -D "uid=ftppinguim,ou=FTPUsers,dc=domain,dc=org" "uid/write:" authcDN: "uid=ftppinguim,ou=ftpusers,dc=domain,dc=org" write access to uid=: DENIED So, the ACL is not working. If I ask to uid/read:, I have access allowed. Later I changed my ACL to dn.children, but the result was the same. I'm using LDAP 2.4 and I would like to know if somebody already did the same configuration or has tips or docs to read. Thanks a lot .0. MrBiTs - mrbits.dcf(a)gmail.com ..0 GnuPG - http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x6EC818FC2B3CA5AB 000 http://www.mrbits.com.br -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBCAAGBQJMNIHOAAoJEG7IGPwrPKWrkuwH/juH+H2qAyF40BB6AhpLyEN8 OxYkrtZkNYdg/8H3RPNByYyOHIr+VwKutsvp9RD6By+kFSFj1WvcvgtyDby5P4cs EgGYsYmtQuiK1VNz7EWbK5hOEzqGly8ipP5QZ+jqTa03TGbq1zWJy44ZytbArWSA iXyzFeg09H/OdWFYITieSDKSFj35WJ8fIOJOaG+qQh5Sa1p5ti45TIQRZgtM9Drv UL7GmEja2Gahal9Ka5fF3zxriLmpoCq8hOL2ZdhGdYfpG3KloBshcDkOFIXz/Z7W B80oBJI+NHG4fIr5WWKl0U28DfFWKHWr8oCqes0tttx28QBA7c2nXzy7D/pKgmU= =g3tQ -----END PGP SIGNATURE-----

3 4

← Newer
1
...
7
8
9
10
11
12
13
Older →

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical July 2010