openldap-technical November 2014

openldap-technical@openldap.org

66 participants
69 discussions

main: TLS init def ctx failed: -1
by Hydro Tium 24 Nov '14

24 Nov '14

Hello, I'm trying to configure TLS but slapd won't even start: Here's my config: ################################################################################ # dynamic config file - global configuration entry ################################################################################ dn: cn=config objectClass: olcGlobal cn: config olcPidFile: /var/run/slapd/slapd.pid olcArgsFile: /var/run/slapd/slapd.args olcIdleTimeout: 7 olcLogLevel: conns filter stats none olcReferral: ldap://root.openldap.org olcTLSCACertificateFile: /etc/ldap/tls/cacert.pem olcTLSCertificateFile: /etc/ldap/tls/servercrt.pem olcTLSCertificateKeyFile: /etc/ldap/tls/serverkey.pem olcTLSVerifyClient: demand olcTLSRandFile: /dev/urandom ################################################################################ # modules loading ################################################################################ #dn: cn=module{0},cn=config #objectClass: olcModuleList #cn: module{0} #olcModulePath: /usr/lib/ldap #olcModuleLoad: back_hdb.la ################################################################################ # schema definitions ################################################################################ dn: cn=schema,cn=config objectClass: olcSchemaConfig cn: schema ################################################################################ # include the schemas ################################################################################ include: file:///etc/ldap/schema/core.ldif include: file:///etc/ldap/schema/cosine.ldif include: file:///etc/ldap/schema/inetorgperson.ldif ################################################################################ # backend directives ################################################################################ dn: olcBackend=hdb,cn=config objectClass: olcBackendConfig olcBackend: hdb ################################################################################ # frontend database parameters ################################################################################ dn: olcDatabase=frontend,cn=config objectClass: olcDatabaseConfig objectClass: olcFrontendConfig olcDatabase: frontend olcAccess: to * by * read olcReadOnly: FALSE ################################################################################ # config database parameters ################################################################################ dn: olcDatabase={0}config,cn=config objectClass: olcDatabaseConfig olcDatabase: {0}config olcRootPW: {SSHA}nHfi6O5OcjA0LG6gj2Gb7EDzBoGFPQtB olcAccess: to * by * none When I check the /var/log/debug messages the error in this email subject appears. I'm trying to start the service via the invoke-rc.d slapd start command, but all it returns is a failed status. Any clues with this? Thanks!

4 3

slapcat ldif backup
by Jerry 23 Nov '14

23 Nov '14

FreeBSD 10.1-RELEASE I reported this problem before. I am experiencing periodic backup failure with slapcat. I run it from CRON if that makes any difference. This is the exact failure message: 5471c421 mdb_db_open: database "dc=seibercom,dc=net" cannot be opened: No such file or directory (2). Restore from backup! 5471c421 backend_startup_one (type=mdb, suffix="dc=seibercom,dc=net"): bi_db_open failed! (2) slap_startup failed LDIF Backup Failed Exit Code: 0 I ran the slapcat command under "truss" and this is the output: mmap(0x0,32768,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) = 34367242240 (0x800728000) issetugid(0x800928a20,0x7fffffffefc8,0x40,0x0,0xffff800800929a58,0x0) = 0 (0x0) lstat("/etc",{ mode=drwxr-xr-x ,inode=29614464,size=2560,blksize=32768 }) = 0 (0x0) lstat("/etc/libmap.conf",{ mode=-rw-r--r-- ,inode=29614965,size=109,blksize=32768 }) = 0 (0x0) open("/etc/libmap.conf",O_CLOEXEC,01760) = 3 (0x3) fstat(3,{ mode=-rw-r--r-- ,inode=29614965,size=109,blksize=32768 }) = 0 (0x0) mmap(0x0,109,PROT_READ,MAP_PRIVATE,3,0x0) = 34367275008 (0x800730000) close(3) = 0 (0x0) lstat("/usr",{ mode=drwxr-xr-x ,inode=37238784,size=512,blksize=32768 }) = 0 (0x0) lstat("/usr/local",{ mode=drwxr-xr-x ,inode=37238785,size=512,blksize=32768 }) = 0 (0x0) lstat("/usr/local/etc",{ mode=drwxr-xr-x ,inode=37569402,size=2560,blksize=32768 }) = 0 (0x0) lstat("/usr/local/etc/libmap.d",{ mode=drwxr-xr-x ,inode=803208,size=512,blksize=32768 }) = 0 (0x0) open("/usr/local/etc/libmap.d",O_NONBLOCK|O_DIRECTORY|O_CLOEXEC,0165) = 3 (0x3) __sysctl(0x7fffffffc948,0x2,0x80092964c,0x7fffffffc940,0x0,0x0) = 0 (0x0) fstatfs(0x3,0x7fffffffc968,0x80092964c,0x7fffffffc940,0x0,0x0) = 0 (0x0) getdirentries(0x3,0x80072e000,0x1000,0x80072d028,0x0,0x0) = 24 (0x18) getdirentries(0x3,0x80072e000,0x1000,0x80072d028,0x18,0x0) = 0 (0x0) close(3) = 0 (0x0) munmap(0x800730000,109) = 0 (0x0) mmap(0x0,36864,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) = 34367275008 (0x800730000) access("/usr/local/lib/libldap_r-2.4.so.2",0) = 0 (0x0) open("/usr/local/lib/libldap_r-2.4.so.2",O_CLOEXEC,034607770) = 3 (0x3) fstat(3,{ mode=-rw-r--r-- ,inode=37570468,size=311864,blksize=32768 }) = 0 (0x0) mmap(0x0,4096,PROT_READ,MAP_PRIVATE|MAP_PREFAULT_READ,3,0x0) = 34367311872 (0x800739000) mmap(0x0,2416640,PROT_NONE,MAP_PRIVATE|MAP_ANON|MAP_NOCORE,-1,0x0) = 34369347584 (0x80092a000) mmap(0x80092a000,303104,PROT_READ|PROT_EXEC,MAP_PRIVATE|MAP_FIXED|MAP_NOCORE|MAP_PREFAULT_READ,3,0x0) = 34369347584 (0x80092a000) mmap(0x800b73000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_PREFAULT_READ,3,0x49000) = 34371743744 (0x800b73000) mmap(0x800b76000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_ANON,-1,0x0) = 34371756032 (0x800b76000) munmap(0x800739000,4096) = 0 (0x0) close(3) = 0 (0x0) access("/usr/local/lib/liblber-2.4.so.2",0) = 0 (0x0) open("/usr/local/lib/liblber-2.4.so.2",O_CLOEXEC,034607770) = 3 (0x3) fstat(3,{ mode=-rw-r--r-- ,inode=37567810,size=58320,blksize=32768 }) = 0 (0x0) mmap(0x0,4096,PROT_READ,MAP_PRIVATE|MAP_PREFAULT_READ,3,0x0) = 34367311872 (0x800739000) mmap(0x0,2154496,PROT_NONE,MAP_PRIVATE|MAP_ANON|MAP_NOCORE,-1,0x0) = 34371764224 (0x800b78000) mmap(0x800b78000,57344,PROT_READ|PROT_EXEC,MAP_PRIVATE|MAP_FIXED|MAP_NOCORE|MAP_PREFAULT_READ,3,0x0) = 34371764224 (0x800b78000) mmap(0x800d85000,4096,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_PREFAULT_READ,3,0xd000) = 34373914624 (0x800d85000) munmap(0x800739000,4096) = 0 (0x0) close(3) = 0 (0x0) access("/usr/local/lib/libltdl.so.7",0) = 0 (0x0) open("/usr/local/lib/libltdl.so.7",O_CLOEXEC,034607770) = 3 (0x3) fstat(3,{ mode=-rwxr-xr-x ,inode=37570220,size=37304,blksize=32768 }) = 0 (0x0) mmap(0x0,4096,PROT_READ,MAP_PRIVATE|MAP_PREFAULT_READ,3,0x0) = 34367311872 (0x800739000) mmap(0x0,2134016,PROT_NONE,MAP_PRIVATE|MAP_ANON|MAP_NOCORE,-1,0x0) = 34373918720 (0x800d86000) mmap(0x800d86000,36864,PROT_READ|PROT_EXEC,MAP_PRIVATE|MAP_FIXED|MAP_NOCORE|MAP_PREFAULT_READ,3,0x0) = 34373918720 (0x800d86000) mmap(0x800f8e000,4096,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_PREFAULT_READ,3,0x8000) = 34376048640 (0x800f8e000) munmap(0x800739000,4096) = 0 (0x0) close(3) = 0 (0x0) access("/usr/local/lib/libcrypt.so.5",0) ERR#2 'No such file or directory' open("/var/run/ld-elf.so.hints",O_CLOEXEC,034607770) = 3 (0x3) read(3,"Ehnt\^A\0\0\0\M^@\0\0\0M\^A\0\0"...,128) = 128 (0x80) lseek(3,0x80,SEEK_SET) = 128 (0x80) read(3,"/lib:/usr/lib:/usr/lib/compat:/u"...,333) = 333 (0x14d) close(3) = 0 (0x0) access("/lib/libcrypt.so.5",0) = 0 (0x0) open("/lib/libcrypt.so.5",O_CLOEXEC,034607770) = 3 (0x3) fstat(3,{ mode=-r--r--r-- ,inode=9871558,size=62040,blksize=32768 }) = 0 (0x0) mmap(0x0,4096,PROT_READ,MAP_PRIVATE|MAP_PREFAULT_READ,3,0x0) = 34367311872 (0x800739000) mmap(0x0,2228224,PROT_NONE,MAP_PRIVATE|MAP_ANON|MAP_NOCORE,-1,0x0) = 34376052736 (0x800f8f000) mmap(0x800f8f000,57344,PROT_READ|PROT_EXEC,MAP_PRIVATE|MAP_FIXED|MAP_NOCORE|MAP_PREFAULT_READ,3,0x0) = 34376052736 (0x800f8f000) mmap(0x80119d000,4096,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_PREFAULT_READ,3,0xe000) = 34378207232 (0x80119d000) mmap(0x80119e000,69632,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_ANON,-1,0x0) = 34378211328 (0x80119e000) munmap(0x800739000,4096) = 0 (0x0) close(3) = 0 (0x0) access("/usr/local/lib/libssl.so.8",0) = 0 (0x0) open("/usr/local/lib/libssl.so.8",O_CLOEXEC,034607770) = 3 (0x3) fstat(3,{ mode=-rw-r--r-- ,inode=37562291,size=479367,blksize=32768 }) = 0 (0x0) mmap(0x0,4096,PROT_READ,MAP_PRIVATE|MAP_PREFAULT_READ,3,0x0) = 34367311872 (0x800739000) mmap(0x0,2527232,PROT_NONE,MAP_PRIVATE|MAP_ANON|MAP_NOCORE,-1,0x0) = 34378280960 (0x8011af000) mmap(0x8011af000,393216,PROT_READ|PROT_EXEC,MAP_PRIVATE|MAP_FIXED|MAP_NOCORE|MAP_PREFAULT_READ,3,0x0) = 34378280960 (0x8011af000) mmap(0x80140e000,40960,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_PREFAULT_READ,3,0x5f000) = 34380767232 (0x80140e000) munmap(0x800739000,4096) = 0 (0x0) close(3) = 0 (0x0) access("/usr/local/lib/libcrypto.so.8",0) = 0 (0x0) open("/usr/local/lib/libcrypto.so.8",O_CLOEXEC,034607770) = 3 (0x3) fstat(3,{ mode=-rw-r--r-- ,inode=37560373,size=2390484,blksize=32768 }) = 0 (0x0) mmap(0x0,4096,PROT_READ,MAP_PRIVATE|MAP_PREFAULT_READ,3,0x0) = 34367311872 (0x800739000) mmap(0x0,4222976,PROT_NONE,MAP_PRIVATE|MAP_ANON|MAP_NOCORE,-1,0x0) = 34380808192 (0x801418000) mmap(0x801418000,1966080,PROT_READ|PROT_EXEC,MAP_PRIVATE|MAP_FIXED|MAP_NOCORE|MAP_PREFAULT_READ,3,0x0) = 34380808192 (0x801418000) mmap(0x8017f8000,147456,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_PREFAULT_READ,3,0x1e0000) = 34384871424 (0x8017f8000) mmap(0x80181c000,12288,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_ANON,-1,0x0) = 34385018880 (0x80181c000) munmap(0x800739000,4096) = 0 (0x0) close(3) = 0 (0x0) access("/usr/local/lib/libthr.so.3",0) ERR#2 'No such file or directory' access("/lib/libthr.so.3",0) = 0 (0x0) open("/lib/libthr.so.3",O_CLOEXEC,034607770) = 3 (0x3) fstat(3,{ mode=-r--r--r-- ,inode=9871581,size=105248,blksize=32768 }) = 0 (0x0) mmap(0x0,4096,PROT_READ,MAP_PRIVATE|MAP_PREFAULT_READ,3,0x0) = 34367311872 (0x800739000) mmap(0x0,2248704,PROT_NONE,MAP_PRIVATE|MAP_ANON|MAP_NOCORE,-1,0x0) = 34385031168 (0x80181f000) mmap(0x80181f000,102400,PROT_READ|PROT_EXEC,MAP_PRIVATE|MAP_FIXED|MAP_NOCORE|MAP_PREFAULT_READ,3,0x0) = 34385031168 (0x80181f000) mmap(0x801a37000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_PREFAULT_READ,3,0x18000) = 34387226624 (0x801a37000) mmap(0x801a39000,45056,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_ANON,-1,0x0) = 34387234816 (0x801a39000) munmap(0x800739000,4096) = 0 (0x0) close(3) = 0 (0x0) access("/usr/local/lib/libc.so.7",0) ERR#2 'No such file or directory' access("/lib/libc.so.7",0) = 0 (0x0) open("/lib/libc.so.7",O_CLOEXEC,034607770) = 3 (0x3) fstat(3,{ mode=-r--r--r-- ,inode=9871556,size=1631216,blksize=32768 }) = 0 (0x0) mmap(0x0,4096,PROT_READ,MAP_PRIVATE|MAP_PREFAULT_READ,3,0x0) = 34367311872 (0x800739000) mmap(0x0,3837952,PROT_NONE,MAP_PRIVATE|MAP_ANON|MAP_NOCORE,-1,0x0) = 34387279872 (0x801a44000) mmap(0x801a44000,1523712,PROT_READ|PROT_EXEC,MAP_PRIVATE|MAP_FIXED|MAP_NOCORE|MAP_PREFAULT_READ,3,0x0) = 34387279872 (0x801a44000) mmap(0x801db7000,53248,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_PREFAULT_READ,3,0x173000) = 34390896640 (0x801db7000) mmap(0x801dc4000,167936,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_ANON,-1,0x0) = 34390949888 (0x801dc4000) munmap(0x800739000,4096) = 0 (0x0) close(3) = 0 (0x0) munmap(0x800736000,12288) = 0 (0x0) mmap(0x0,53248,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) = 34367299584 (0x800736000) munmap(0x80073f000,16384) = 0 (0x0) mmap(0x0,102400,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) = 34367336448 (0x80073f000) sysarch(0x81,0x7fffffffd8c8,0x4,0x0,0xfffffffffe97b5c0,0x8080808080808080) = 0 (0x0) __sysctl(0x7fffffffd8a8,0x2,0x7fffffffd890,0x7fffffffd888,0x0,0x0) = 0 (0x0) getrlimit(RLIMIT_STACK,{ cur=536870912,max=536870912 }) = 0 (0x0) mprotect(0x7fffdffff000,536870912,PROT_READ|PROT_WRITE|PROT_EXEC) = 0 (0x0) sigprocmask(SIG_BLOCK,SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2,0x0) = 0 (0x0) sigprocmask(SIG_SETMASK,0x0,0x0) = 0 (0x0) readlink("/etc/malloc.conf",0x7fffffffcff0,1024) ERR#2 'No such file or directory' issetugid(0x801b8f53e,0x7fffffffcff0,0xffffffffffffffff,0x2,0x40,0x0) = 0 (0x0) mmap(0x0,4194304,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) = 34391117824 (0x801ded000) munmap(0x801ded000,4194304) = 0 (0x0) mmap(0x0,8384512,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) = 34391117824 (0x801ded000) munmap(0x801ded000,2174976) = 0 (0x0) munmap(0x802400000,2015232) = 0 (0x0) sigprocmask(SIG_BLOCK,SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2,0x0) = 0 (0x0) sigprocmask(SIG_SETMASK,0x0,0x0) = 0 (0x0) getpid() = 28705 (0x7021) __sysctl(0x7fffffffd400,0x2,0x801a438a0,0x7fffffffd408,0x0,0x0) = 0 (0x0) __sysctl(0x7fffffffd320,0x2,0x7fffffffd360,0x7fffffffd358,0x801833f6d,0xd) = 0 (0x0) __sysctl(0x7fffffffd360,0x3,0x801a4232c,0x7fffffffd408,0x0,0x0) = 0 (0x0) mmap(0x0,4194304,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) = 34397487104 (0x802400000) thr_self(0x802406400,0x1,0x0,0x800733530,0x40,0x802416010) = 0 (0x0) mmap(0x7fffffbfe000,4096,PROT_NONE,MAP_ANON,-1,0x0) = 140737484152832 (0x7fffffbfe000) rtprio_thread(0x0,0x18b01,0x7fffffffd3d8,0x400000,0xffffffff,0x0) = 0 (0x0) sysarch(0x81,0x7fffffffd3e8,0x801a41f00,0x0,0xffffffff,0x0) = 0 (0x0) sigaction(32,{ 0x80182cae0 SA_SIGINFO ss_t },0x0) = 0 (0x0) sigprocmask(SIG_UNBLOCK,0x0,0x0) = 0 (0x0) _umtx_op(0x7fffffffd398,0x3,0x1,0x0,0x0,0x0) = 0 (0x0) mprotect(0x0,0,PROT_NONE) = 0 (0x0) getpid() = 28705 (0x7021) sigprocmask(SIG_BLOCK,SIGHUP|SIGINT|SIGQUIT|SIGILL|SIGTRAP|SIGABRT|SIGEMT|SIGFPE|SIGKILL|SIGBUS|SIGSEGV|SIGSYS|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2,0x0) = 0 (0x0) sigprocmask(SIG_SETMASK,0x0,0x0) = 0 (0x0) open("/usr/home/gerard/LDAP_Backup/seibercom.net.ldif",O_WRONLY|O_CREAT|O_TRUNC,0666) = 3 (0x3) madvise(0x802446000,0x4000,0x5,0xaaaaaaaaaaaaaaab,0x7fffffffc6d0,0x801debbe0) = 0 (0x0) madvise(0x80244d000,0x2000,0x5,0xaaaaaaaaaaaaaaab,0x7fffffffc6d0,0x801debbe0) = 0 (0x0) madvise(0x802453000,0x2000,0x5,0xaaaaaaaaaaaaaaab,0x7fffffffc6d0,0x801debbe0) = 0 (0x0) madvise(0x80245a000,0x2000,0x5,0xaaaaaaaaaaaaaaab,0x7fffffffc6d0,0x801debbe0) = 0 (0x0) madvise(0x80246a000,0x1000,0x5,0xaaaaaaaaaaaaaaab,0x7fffffffc6d0,0x801debbe0) = 0 (0x0) stat("/usr/local/etc/openldap/slapd.conf",{ mode=-rw------- ,inode=37883465,size=2382,blksize=32768 }) = 0 (0x0) open("/usr/local/etc/openldap/slapd.conf",O_RDONLY,0666) = 4 (0x4) fstat(4,{ mode=-rw------- ,inode=37883465,size=2382,blksize=32768 }) = 0 (0x0) read(4,"#\n# See slapd.conf(5) for detai"...,32768) = 2382 (0x94e) stat("/usr/local/etc/openldap/schema/core.schema",{ mode=-rw-r--r-- ,inode=34109613,size=20499,blksize=32768 }) = 0 (0x0) open("/usr/local/etc/openldap/schema/core.schema",O_RDONLY,0666) = 5 (0x5) fstat(5,{ mode=-rw-r--r-- ,inode=34109613,size=20499,blksize=32768 }) = 0 (0x0) read(5,"# OpenLDAP Core schema\n# $OpenL"...,32768) = 20499 (0x5013) read(5,0x802497000,32768) = 0 (0x0) close(5) = 0 (0x0) stat("/usr/local/etc/openldap/schema/cosine.schema",{ mode=-rw-r--r-- ,inode=34109614,size=73994,blksize=32768 }) = 0 (0x0) open("/usr/local/etc/openldap/schema/cosine.schema",O_RDONLY,0666) = 5 (0x5) fstat(5,{ mode=-rw-r--r-- ,inode=34109614,size=73994,blksize=32768 }) = 0 (0x0) read(5,"# RFC1274: Cosine and Internet X"...,32768) = 32768 (0x8000) read(5,"#\n# This section attempts to f"...,32768) = 32768 (0x8000) read(5,"uteType 7}\n#\n#\n# userClass"...,32768) = 8458 (0x210a) read(5,0x802495000,32768) = 0 (0x0) close(5) = 0 (0x0) stat("/usr/local/etc/openldap/schema/inetorgperson.schema",{ mode=-rw-r--r-- ,inode=34109617,size=6267,blksize=32768 }) = 0 (0x0) open("/usr/local/etc/openldap/schema/inetorgperson.schema",O_RDONLY,0666) = 5 (0x5) fstat(5,{ mode=-rw-r--r-- ,inode=34109617,size=6267,blksize=32768 }) = 0 (0x0) read(5,"# inetorgperson.schema -- InetOr"...,32768) = 6267 (0x187b) read(5,0x802495000,32768) = 0 (0x0) close(5) = 0 (0x0) stat("/usr/local/etc/openldap/schema/nis.schema",{ mode=-rw-r--r-- ,inode=34109620,size=7640,blksize=32768 }) = 0 (0x0) open("/usr/local/etc/openldap/schema/nis.schema",O_RDONLY,0666) = 5 (0x5) fstat(5,{ mode=-rw-r--r-- ,inode=34109620,size=7640,blksize=32768 }) = 0 (0x0) read(5,"# $OpenLDAP$\n## This work is pa"...,32768) = 7640 (0x1dd8) read(5,0x802495000,32768) = 0 (0x0) close(5) = 0 (0x0) open("/usr/local/libexec/openldap/back_mdb.la",O_RDONLY,0666) = 5 (0x5) fstat(5,{ mode=-rwxr-xr-x ,inode=34109609,size=827,blksize=32768 }) = 0 (0x0) read(5,"# back_mdb.la - a libtool librar"...,32768) = 827 (0x33b) read(5,0x802495000,32768) = 0 (0x0) close(5) = 0 (0x0) open("/usr/local/libexec/openldap/back_mdb-2.4.so.2",O_CLOEXEC,056) = 5 (0x5) fstat(5,{ mode=-rwxr-xr-x ,inode=34109608,size=232288,blksize=32768 }) = 0 (0x0) mmap(0x0,4096,PROT_READ,MAP_PRIVATE|MAP_PREFAULT_READ,5,0x0) = 34367438848 (0x800758000) mmap(0x0,2428928,PROT_NONE,MAP_PRIVATE|MAP_ANON|MAP_NOCORE,-1,0x0) = 34401681408 (0x802800000) mmap(0x802800000,225280,PROT_READ|PROT_EXEC,MAP_PRIVATE|MAP_FIXED|MAP_NOCORE|MAP_PREFAULT_READ,5,0x0) = 34401681408 (0x802800000) mmap(0x802a37000,8192,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_PREFAULT_READ,5,0x37000) = 34404003840 (0x802a37000) mmap(0x802a39000,98304,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_ANON,-1,0x0) = 34404012032 (0x802a39000) munmap(0x800758000,4096) = 0 (0x0) close(5) = 0 (0x0) open("/var/db/openldap-data/DUMMY",O_WRONLY|O_CREAT|O_TRUNC,0666) = 5 (0x5) close(5) = 0 (0x0) unlink("/var/db/openldap-data/DUMMY") = 0 (0x0) read(4,0x80248d000,32768) = 0 (0x0) close(4) = 0 (0x0) stat("/var/db/openldap-data",{ mode=drwx------ ,inode=22311219,size=512,blksize=32768 }) = 0 (0x0) getpid() = 28705 (0x7021) __sysctl(0x7fffffffdc38,0x2,0x7fffffffdc34,0x7fffffffdc40,0x0,0x0) = 0 (0x0) open("/var/db/openldap-data/data.mdb",O_RDONLY,00) = 4 (0x4) open("/var/db/openldap-data/lock.mdb",O_RDWR|O_CREAT|O_CLOEXEC,0600) = 5 (0x5) fcntl(5,F_SETLK,0x7fffffffd9d0) ERR#35 'Resource temporarily unavailable' fcntl(5,F_SETLKW,0x7fffffffd9d0) = 0 (0x0) lseek(5,0x0,SEEK_END) = 8192 (0x2000) mmap(0x0,8192,PROT_READ|PROT_WRITE,MAP_SHARED,5,0x0) = 34367438848 (0x800758000) open("/tmp/SEMDMDBr?Nu;oi>KeQ",O_RDWR|O_EXLOCK|O_CLOEXEC,027) ERR#2 'No such file or directory' close(4) = 0 (0x0) munmap(0x800758000,8192) = 0 (0x0) close(5) = 0 (0x0) stat("/usr/share/nls/C/libc.cat",0x7fffffffd758) ERR#2 'No such file or directory' stat("/usr/share/nls/libc/C",0x7fffffffd758) ERR#2 'No such file or directory' stat("/usr/local/share/nls/C/libc.cat",0x7fffffffd758) ERR#2 'No such file or directory' stat("/usr/local/share/nls/libc/C",0x7fffffffd758) ERR#2 'No such file or directory' clock_gettime(13,{1416741752.000000000 }) = 0 (0x0) write(2,"5471c378 mdb_db_open: database ""...,123) = 123 (0x7b) clock_gettime(13,{1416741752.000000000 }) = 0 (0x0) write(2,"5471c378 backend_startup_one (ty"...,94) = 94 (0x5e) write(2,"slap_startup failed\n",20) = 20 (0x14) process exit, rval = 1 Now, if I restart slapd, and I did check and it was running, everything will work fine, at least for awhile. I can supply the "truss" output of a successful run if desired. -- Jerry

2 1

Can't contact LDAP server (-1) additional info: error:14077410:SSL routines :SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
by wailok tam 22 Nov '14

22 Nov '14

Hi, can anyone help me with the error given in the title when entering the following command: ldapmodify -x -W -D 'cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp' Enter LDAP Password: ldap_bind: Can't contact LDAP server (-1) additional info: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure Access by the dovecot user is also blocked and all mails stop...Thanks in advace. Below is the slapd conf file: ### configuration for IER ### writeen by T.Tanaka ### edited by WL.Tam include /etc/openldap/schema/core.schema include /etc/openldap/schema/cosine.schema include /etc/openldap/schema/inetorgperson.schema include /etc/openldap/schema/nis.schema include /etc/openldap/schema/samba.schema # Allow LDAPv2 client connections. This is NOT the default. allow bind_v2 pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args ####################################################################### # ldbm and/or bdb database definitions ####################################################################### database bdb suffix "dc=ier,dc=hit-u,dc=ac,dc=jp" rootdn "cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp" rootpw ier2009 directory /var/lib/ldap overlay syncprov syncprov-checkpoint 50 10 syncprov-sessionlog 100 # Indices to maintain for this database index objectClass eq,pres index ou,cn,mail,surname,givenname eq,pres,sub index uidNumber,gidNumber,loginShell eq,pres index uid,memberUid eq,pres,sub index nisMapName,nisMapEntry eq,pres,sub index entryCSN,entryUUID eq idlcachesize 1000 access to attrs=userPassword by self write by dn="cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp" write by dn="cn=dovecot,dc=ier,dc=hit-u,dc=ac,dc=jp" read by dn.exact="cn=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp" read by anonymous auth by * none access to attrs=SambaLMPassword,SambaNTPassword by dn="cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp" write by dn="cn=dovecot,dc=ier,dc=hit-u,dc=ac,dc=jp" read by dn.exact="cn=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp" read by self read by anonymous auth by * none access to * by self write by dn="cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp" write by dn.exact="cn=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp" read by * read

3 2

slapd read_config / interface bind errors
by Jason Swank 20 Nov '14

20 Nov '14

Hi, We updated from 2.4.23 to 2.4.39 and ran into the following issues around specifying listen interfaces for slapd. We run an n-way multi-master configuration. It appears as if a specific interface needs to be specified in order to start slapd, and using a specific interface is prevented by a binding to all interfaces. Is this expected behavior, or a bug? Running slapd as below results in an error: $ /usr/sbin/slapd -d 1 -h "ldap:// ldapi://" -u ldap ... 546cfa04 read_config: no serverID / URL match found. Check slapd -h arguments. 546cfa04 slapd destroy: freeing system resources. 546cfa04 syncinfo_free: rid=001 546cfa04 syncinfo_free: rid=001 546cfa04 slapd stopped. 546cfa04 connections_destroy: nothing to destroy. Specifying the hostname of this ldap server (ldap02) addresses the error, but introduces another- the listener can't be started since it conflicts with the INADDR_ANY interface definition "ldap://": $ /usr/sbin/slapd -d 1 -h "ldap:// ldapi:// ldap://ldap02" -u ldap ... 546cfb52 slapd starting 546cfb53 daemon: listen(ldap://ldap02, 5) failed errno=98 (Address already in use) 546cfb53 slapd shutdown: initiated 546cfb53 ====> bdb_cache_release_all 546cfb53 slapd destroy: freeing system resources. 546cfb53 syncinfo_free: rid=001 546cfb53 syncinfo_free: rid=001 546cfb53 slapd stopped. Removing the binding to INADDR_ANY (ldap://) allows slapd to be started: $ /usr/sbin/slapd -d 1 -h "ldapi:// ldap://ldap02" -u ldap Thanks, Jason

4 5

any help on "ldap_sasl_bind_s failed (53)"
by wailok tam 20 Nov '14

20 Nov '14

Hi, I am new to ldap. I am following the book "Mastering Openldap" to set up replication but I am getting the error given in the title when I start the slave with "splad -d sync" . Replication does not work. ****************************************************************************************************** slapd.conf of the Master: include /etc/openldap/schema/core.schemainclude /etc/openldap/schema/cosine.schemainclude /etc/openldap/schema/inetorgperson.schemainclude /etc/openldap/schema/nis.schemainclude /etc/openldap/schema/samba.schema #modulepath /usr/lib/openldap#moduleload syncprov.la # Allow LDAPv2 client connections. This is NOT the default.allow bind_v2 # Do not enable referrals until AFTER you have a working directory# service AND an understanding of referrals.#referral ldap://root.openldap.org pidfile /var/run/openldap/slapd.pidargsfile /var/run/openldap/slapd.args #sasl-realm ier.hit-u.ac.jp#sasl-host localhost#authz-regexp uid=([^,]*),cn=ier.hit-u.ac.jp,cn=DIGEST-MD5,cn=auth cn=$1,dc=ier,dc=hit-u,dc=ac,dc=jp ######################################################################## ldbm and/or bdb database definitions####################################################################### database bdbsuffix "dc=ier,dc=hit-u,dc=ac,dc=jp"rootdn "cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp"#rootpw {MD5}x1Ktlhm0p7RPnl/G01rhTQ==rootpw secret#password-hash {MD5}directory /var/lib/ldap TLSCACertificateFile /usr/share/ssl/certs/nii-odca2.crtTLSCertificateFile /usr/share/ssl/certs/mail.ier.hit-u.ac.jp.crtTLSCertificateKeyFile /usr/share/ssl/certs/mail.ier.hit-u.ac.jp.key overlay syncprovsyncprov-checkpoint 50 10syncprov-sessionlog 100 # Indices to maintain for this databaseindex objectClass eq,presindex ou,cn,mail,surname,givenname eq,pres,subindex uidNumber,gidNumber,loginShell eq,presindex uid,memberUid eq,pres,subindex nisMapName,nisMapEntry eq,pres,subindex entryCSN,entryUUID eq idlcachesize 1000 access to attrs=userPassword by self write by dn="cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp" write by dn="cn=dovecot,dc=ier,dc=hit-u,dc=ac,dc=jp" read by dn.exact="cn=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp" read by anonymous auth by * none access to attrs=SambaLMPassword,SambaNTPassword by dn="cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp" write by dn="cn=dovecot,dc=ier,dc=hit-u,dc=ac,dc=jp" read by dn.exact="cn=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp" read by self read by anonymous auth by * none access to * by self write by dn="cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp" write by dn.exact="cn=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp" read by * read ***************************************************************************************************** sladp.conf of the slave: include /etc/openldap/schema/core.schemainclude /etc/openldap/schema/cosine.schemainclude /etc/openldap/schema/inetorgperson.schemainclude /etc/openldap/schema/nis.schemainclude /etc/openldap/schema/samba.schema # Allow LDAPv2 client connections. This is NOT the default.allow bind_v2 # Do not enable referrals until AFTER you have a working directory# service AND an understanding of referrals.#referral ldap://root.openldap.org pidfile /var/run/openldap/slapd.pidargsfile /var/run/openldap/slapd.args ######################################################################## ldbm and/or bdb database definitions####################################################################### database bdbsuffix "dc=ier,dc=hit-u,dc=ac,dc=jp"#rootdn "cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp"rootdn "cn=replicator,dc=ier,dc=hit-u,dc=ac,dc=jp"#rootpw {MD5}x1Ktlhm0p7RPnl/G01rhTQ==rootpw secretofreplicator #password-hash {MD5}directory /var/lib/ldap#TLSCACertificateFile /usr/share/ssl/certs/nii-odca2.crt#TLSCertificateFile /usr/share/ssl/certs/mail.ier.hit-u.ac.jp.crt#TLSCertificateKeyFile /usr/share/ssl/certs/mail.ier.hit-u.ac.jp.key # Replicas of this database#updatedn cn=replicator,dc=ier,dc=hit-u,dc=ac,dc=jp#updateref uri=ldap://192.168.84.22 # Indices to maintain for this databaseindex objectClass eq,presindex ou,cn,mail,surname,givenname eq,pres,subindex uidNumber,gidNumber,loginShell eq,presindex uid,memberUid eq,pres,subindex nisMapName,nisMapEntry eq,pres,subindex entryCSN,entryUUID eq idlcachesize 1000 #access to attrs=userPassword# by dn="cn=replicator,dc=ier,dc=hit-u,dc=ac,dc=jp" write# by self write# by anonymous auth# by * none #access to * # by dn="cn=replicator,dc=ier,dc=hit-u,dc=ac,dc=jp" write# by self write# by * read #loglevel stats sync syncrepl rid=001 provider=ldap://mail.ier.hit-u.ac.jp type=refreshAndPersist interval=00:00:05:00 searchbase="dc=ier,dc=hit-u,dc=ac,dc=jp" binddn="uid=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp" bindmethod=simple# bindmethod=sasl saslmech=DIGEST-MD5# authcid=replicator credentials=secretofreplicator updateref ldap://mail.ier.hit-u.ac.jp/ *****************************************************************************************what puzzles me is that: I try on the slave to access the master withldapsearch -x -H ldap://mail.ier.hit-u.ac.jp -W -D 'cn=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp' '(uid=someone)' and it works. What is wrong? I really need your help.

5 7

debugging OpenLDAP client
by Igor Shmukler 19 Nov '14

19 Nov '14

Hello, I wrote a client to make RFC 2696 (paged results) requests. My client gets results fine, yet size and cookie values are always 0, "" - this should not be the case. I tried with ldapsearch(1) and it does paging fine. Hence, it makes sense to assume that the server is OK and opaque/cookie must not be empty. At the same time, format of my ASN object is fine. I need to understand where exactly, I messed up. In order to debug this, I added a logging LDIF and set debug to -1 any. It shows quite a lot of information, but I did not notice size and cookie values being dumped into syslog(3). Is there a way to have separate values that go into the packets printed out? I see that there is an option for BER 0x10 and parse 0x800 as well as others. Thank you, Igor Shmukler

4 8

make test failure due to libsasl2.so.3 not found
by Guruprasad Kulkarni 19 Nov '14

19 Nov '14

I am using ubuntu 12.04.5 LTS I installed cyrus-sasl-2.1.26 (created symlink from /usr/lib/sasl2 to /usr/local/lib/sasl2) I used the following options for configuration: --enable-debug --enable-hdb --enable-ppolicy --enable-syncprov --with-cyrus-sasl Configuration, make depend and make were successful. I then proceeded to "make test" and I got the error: ../clients/tools/ldapsearch: error while loading shared libraries: libsasl2.so.3: cannot open shared object file: No such file or directory The file libsasl2.so.3 is present in /usr/local/lib I set LDFLAGS="-L/usr/local/lib -L/usr/local/lib/sasl2" Do I need to set some other flags to make the tests work? -Guruprasad

3 3

Re: any help on "ldap_sasl_bind_s failed (53)"
by wailok tam 19 Nov '14

19 Nov '14

thx for your reply. do i put in the slave conf file the same thing as the following command? > ldapsearch -x -H ldap://mail.ier.hit-u.ac.jp -W -D > 'cn=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp' '(uid=someone)' ------------------------------ On Wed, Nov 19, 2014 9:25 AM GMT Jephte Clain wrote: >hello, > >I would say, try to understand the meaning of what you do. The >openldap admin guide is a good place to start. > >- for instance, on the slave, you bind to the master with dn >uid=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp and password >secretofreplicator >does this objet exist *on the master*? with the right password? does >this account have the right acl to read everything on the master >(i.e., on the master, the acl is defined for cn=replicator,... which >is not the same as uid=replicator,...) >- also, why would you use the replicator dn as the rootdn for the slave? > >one last thing: I advise you change the password of both the master >and slave. posting the file with the hash password of the root dn on >the internet is not a good idea :-) > >good luck > > >2014-11-19 11:38 GMT+04:00 wailok tam <wailoktam(a)yahoo.com>: >> Hi, I am new to ldap. I am following the book "Mastering Openldap" to set up >> replication >> but I am getting the error given in the title when I start the slave with >> "splad -d sync" . Replication does >> not work. >> >> ****************************************************************************************************** >> >> slapd.conf of the Master: >> >> include /etc/openldap/schema/core.schema >> include /etc/openldap/schema/cosine.schema >> include /etc/openldap/schema/inetorgperson.schema >> include /etc/openldap/schema/nis.schema >> include /etc/openldap/schema/samba.schema >> >> >> #modulepath /usr/lib/openldap >> #moduleload syncprov.la >> >> # Allow LDAPv2 client connections. This is NOT the default. >> allow bind_v2 >> >> # Do not enable referrals until AFTER you have a working directory >> # service AND an understanding of referrals. >> #referral ldap://root.openldap.org >> >> pidfile /var/run/openldap/slapd.pid >> argsfile /var/run/openldap/slapd.args >> >> #sasl-realm ier.hit-u.ac.jp >> #sasl-host localhost >> #authz-regexp uid=([^,]*),cn=ier.hit-u.ac.jp,cn=DIGEST-MD5,cn=auth >> cn=$1,dc=ier,dc=hit-u,dc=ac,dc=jp >> >> ####################################################################### >> # ldbm and/or bdb database definitions >> ####################################################################### >> >> database bdb >> suffix "dc=ier,dc=hit-u,dc=ac,dc=jp" >> rootdn "cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp" >> #rootpw {MD5}x1Ktlhm0p7RPnl/G01rhTQ== >> rootpw secret >> #password-hash {MD5} >> directory /var/lib/ldap >> >> TLSCACertificateFile /usr/share/ssl/certs/nii-odca2.crt >> TLSCertificateFile /usr/share/ssl/certs/mail.ier.hit-u.ac.jp.crt >> TLSCertificateKeyFile /usr/share/ssl/certs/mail.ier.hit-u.ac.jp.key >> >> overlay syncprov >> syncprov-checkpoint 50 10 >> syncprov-sessionlog 100 >> >> # Indices to maintain for this database >> index objectClass eq,pres >> index ou,cn,mail,surname,givenname eq,pres,sub >> index uidNumber,gidNumber,loginShell eq,pres >> index uid,memberUid eq,pres,sub >> index nisMapName,nisMapEntry eq,pres,sub >> index entryCSN,entryUUID eq >> idlcachesize 1000 >> >> >> access to attrs=userPassword >> by self write >> by dn="cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp" write >> by dn="cn=dovecot,dc=ier,dc=hit-u,dc=ac,dc=jp" read >> by dn.exact="cn=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp" read >> by anonymous auth >> by * none >> >> >> >> access to attrs=SambaLMPassword,SambaNTPassword >> by dn="cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp" write >> by dn="cn=dovecot,dc=ier,dc=hit-u,dc=ac,dc=jp" read >> by dn.exact="cn=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp" read >> by self read >> by anonymous auth >> by * none >> >> access to * >> by self write >> by dn="cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp" write >> by dn.exact="cn=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp" read >> by * read >> >> ***************************************************************************************************** >> >> sladp.conf of the slave: >> >> include /etc/openldap/schema/core.schema >> include /etc/openldap/schema/cosine.schema >> include /etc/openldap/schema/inetorgperson.schema >> include /etc/openldap/schema/nis.schema >> include /etc/openldap/schema/samba.schema >> >> # Allow LDAPv2 client connections. This is NOT the default. >> allow bind_v2 >> >> # Do not enable referrals until AFTER you have a working directory >> # service AND an understanding of referrals. >> #referral ldap://root.openldap.org >> >> pidfile /var/run/openldap/slapd.pid >> argsfile /var/run/openldap/slapd.args >> >> ####################################################################### >> # ldbm and/or bdb database definitions >> ####################################################################### >> >> database bdb >> suffix "dc=ier,dc=hit-u,dc=ac,dc=jp" >> #rootdn "cn=root,dc=ier,dc=hit-u,dc=ac,dc=jp" >> rootdn "cn=replicator,dc=ier,dc=hit-u,dc=ac,dc=jp" >> #rootpw {MD5}x1Ktlhm0p7RPnl/G01rhTQ== >> rootpw secretofreplicator >> #password-hash {MD5} >> directory /var/lib/ldap >> #TLSCACertificateFile /usr/share/ssl/certs/nii-odca2.crt >> #TLSCertificateFile /usr/share/ssl/certs/mail.ier.hit-u.ac.jp.crt >> #TLSCertificateKeyFile /usr/share/ssl/certs/mail.ier.hit-u.ac.jp.key >> >> >> # Replicas of this database >> #updatedn cn=replicator,dc=ier,dc=hit-u,dc=ac,dc=jp >> #updateref uri=ldap://192.168.84.22 >> >> # Indices to maintain for this database >> index objectClass eq,pres >> index ou,cn,mail,surname,givenname eq,pres,sub >> index uidNumber,gidNumber,loginShell eq,pres >> index uid,memberUid eq,pres,sub >> index nisMapName,nisMapEntry eq,pres,sub >> index entryCSN,entryUUID eq >> idlcachesize 1000 >> >> >> #access to attrs=userPassword >> # by dn="cn=replicator,dc=ier,dc=hit-u,dc=ac,dc=jp" write >> # by self write >> # by anonymous auth >> # by * none >> >> >> #access to * >> # by dn="cn=replicator,dc=ier,dc=hit-u,dc=ac,dc=jp" write >> # by self write >> # by * read >> >> >> >> >> #loglevel stats sync >> >> syncrepl rid=001 >> provider=ldap://mail.ier.hit-u.ac.jp >> type=refreshAndPersist >> interval=00:00:05:00 >> searchbase="dc=ier,dc=hit-u,dc=ac,dc=jp" >> binddn="uid=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp" >> bindmethod=simple >> # bindmethod=sasl saslmech=DIGEST-MD5 >> # authcid=replicator >> credentials=secretofreplicator >> >> updateref ldap://mail.ier.hit-u.ac.jp/ >> >> >> ***************************************************************************************** >> what puzzles me is that: >> >> I try on the slave to access the master with >> ldapsearch -x -H ldap://mail.ier.hit-u.ac.jp -W -D >> 'cn=replicator,ou=Users,dc=ier,dc=hit-u,dc=ac,dc=jp' '(uid=someone)' >> >> and it works. >> >> What is wrong? I really need your help. >> >> > > > >-- >cordialement, >Jephté Clain >Direction des Systèmes d'Information >et des Usages Numériques - 2IG >Tél. 0262 93 86 31 >Fax. 0262 93 81 06 >

2 1

openldap 2.4.40 with cyrus sasl 2.1.26 on ubuntu 12.04lts
by Guruprasad Kulkarni 15 Nov '14

15 Nov '14

Hi, I am using ubuntu 12.04lts I installed cyrus sasl version 2.1.26 using the following steps: ./configure --disable-digest --without-saslauthd make make install I had to use the option without-saslauthd, otherwise it would fail. Now I tried to install openldap 2.4.40 with the following options ./configure --enable-hdb --enable-ppolicy --enable-syncprov --with-cyrus-sasl During make test, I get the error: ../clients/tools/ldapsearch: error while loading shared libraries: libsasl2.so.3: cannot open shared object file: No such file or directory Do I need to use the option --with-saslauthd while installing cyrus sasl to be able to use --with-cyrus-sasl option while installing openldap? -Guruprasad

4 5

ldapsearch and ldappasswd, one can't find user account.
by Grant Schoep 14 Nov '14

14 Nov '14

So I am trying to setup a command line script to simply changing users passwords. I know there are Perl modules and the like, but right now I just want to try to use ldapsearch and ldappasswd. >From my workstation(just a client of the LDAP server). ldapsearch is working fine. When I run ldapsearch -x -H ldaps://blah.blah:#### -W -D uid=mradmin,ou=service-accounts,ou=taco,dc=bell,dc=com -b ou=taco,dc=bell,dc=com "(&(cn=*)(uid=testuser))" This returns info. Looking at those results, it returned what I think I was looking for ... dc: uid=testuser,ou=people,ou=taco,dc=bell,dc=com ... So I then ran. ldappasswd -x -H ldaps://blah.blah:#### -D "uid=mradmin,ou=service-accounts,ou=taco,dc=bell,dc=com" -W "uid=testuser,ou=people,ou=taco,dc=bell,dc=com" And I get the following error Result: No such object (32) Additional info: Error in search for entry "oid=1.3.6.1.4.1.4203.1.11.1,cn=features,cn=config". I very new to dealing with LDAP, so I could be missing something simple from the command line. Thanks for any pointers.

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical November 2014