openldap-technical March 2015

openldap-technical@openldap.org

51 participants
70 discussions

still can't run ldapadd command after install openldap
by Wang, Hui 28 Mar '15

28 Mar '15

Hi, All Sorry to bother everyone on this list. I am new to OPENLDAP server and also this is first time I work as a linux admin to install something by myself. My openldap 2.4.40 is up and running, and I also I found the ldapadd commend under /opt/bin, is there anything else I missed which caused the ldapadd doesn't run? Thank you all Hui Wang from CSUN [root@oldaptest01 bin]# ps auxww | grep slapd root 3094 0.0 6.7 1411584 129248 ? Ssl Mar25 0:00 /opt/libexec/slapd root 32481 0.0 0.0 103252 840 pts/0 S+ 13:40 0:00 grep slapd [root@oldaptest01 bin]# pwd /opt/bin [root@oldaptest01 bin]# ls -l total 2268 lrwxrwxrwx 1 root root 10 Mar 25 10:34 ldapadd -> ldapmodify -rwxr-xr-x 1 root root 264824 Mar 25 10:34 ldapcompare -rwxr-xr-x 1 root root 265432 Mar 25 10:34 ldapdelete -rwxr-xr-x 1 root root 265624 Mar 25 10:34 ldapexop -rwxr-xr-x 1 root root 277336 Mar 25 10:34 ldapmodify -rwxr-xr-x 1 root root 265016 Mar 25 10:34 ldapmodrdn -rwxr-xr-x 1 root root 264216 Mar 25 10:34 ldappasswd -rwxr-xr-x 1 root root 287864 Mar 25 10:34 ldapsearch -rwxr-xr-x 1 root root 155256 Mar 25 10:34 ldapurl -rwxr-xr-x 1 root root 262648 Mar 25 10:34 ldapwhoami [root@oldaptest01 bin]# [root@oldaptest01 bin]# ldapadd -x -D "cn=Directory Manager,o=csun" -W -f example.ldif -bash: ldapadd: command not found [root@oldaptest01 bin]#

4 4

From: Suneet Shah
by Suneet Shah 27 Mar '15

27 Mar '15

Hi openldap http://malicemud.com/husband.php?dead=6ysg8ks7mhbhm2 suneetshah2000(a)gmail.com Sent from my iPhone

1 0

Re: can't run ldapsearch and slapadd command after install openldap
by Igor Shmukler 25 Mar '15

25 Mar '15

Sorry. I misunderstood your message. Thought that you were missing slapd. Did you install ldap-utils? I believe that ldapsearch(1) might a part of ldap-utils package [probably depends on the distro], and it is installed separately. On Thu, Mar 26, 2015 at 12:01 AM, Wang, Hui <holly.wang(a)csun.edu> wrote: > Igor > > What file I should look for under /usr/sbin? I got this > > [root@oldaptest01 sbin]# pwd > /usr/sbin > [root@oldaptest01 sbin]# ldapsearch > -bash: ldapsearch: command not found > > [root@oldaptest01 sbin]# ps auxww | grep slapd > root 3094 0.0 24.3 1411584 468476 ? Ssl 11:10 0:00 /opt/libexec/slapd > root 7574 0.0 0.0 103252 840 pts/0 S+ 14:59 0:00 grep slapd > > > > -----Original Message----- > From: Igor Shmukler [mailto:igor.shmukler@gmail.com] > Sent: Wednesday, March 25, 2015 12:40 PM > To: Wang, Hui > Subject: Re: can't run ldapsearch and slapadd command after install openldap > > Hello, > > Try: $ ps auxww | grep slapd > > BTW, did you check /usr/sbin as to whether binaries are there? On my machine they are in the /usr/sbin directory. > > Sincerely, > > Igor Shmukler > > On Wed, Mar 25, 2015 at 9:06 PM, Wang, Hui <holly.wang(a)csun.edu> wrote: >> Hi, All >> >> I am still working on set up a new openldap server on redhat linux machine. I am following the steps offered in following site: >> >> https://urldefense.proofpoint.com/v2/url?u=http-3A__www.openldap.org_d >> oc_admin24_quickstart.html&d=AwIBaQ&c=Oo8bPJf7k7r_cPTz1JF7vEiFxvFRfQtp >> -j14fFwh71U&r=GJzNE-na5kc9aOr5JDyH43J-pL3ONUA5CuZ1SXkuaxM&m=GBtUhh13Xy >> aRZP5tODMNFbEJJAg_qvoUiAUFCjZDrSU&s=MSNLQQwkvXAf76wBrcbRiZ0QF7U2GBM-Zd >> LZjQ5LAL8&e= >> >> I am at step 9, I started the slapd, but can't do LDAP search. I can't run slapadd command either. >> >> You can see my slapd is up and running, but there are nothing installed in /usr/local/bin. What should I install and how can I make ldapsearch and slapadd command run? >> >> Thanks >> >> >> >> [root@oldaptest01 sbin]# pgrep slapd >> 3094 >> [root@oldaptest01 openldap-2.4.40]# cd /usr/local/bin >> [root@oldaptest01 bin]# ldapsearch >> -bash: ldapsearch: command not found >> [root@oldaptest01 bin]# cd /usr/local/sbin >> [root@oldaptest01 sbin]# slapadd >> -bash: slapadd: command not found >> >> >> >> >> Hui Wang >>

2 1

can't run ldapsearch and slapadd command after install openldap
by Wang, Hui 25 Mar '15

25 Mar '15

Hi, All I am still working on set up a new openldap server on redhat linux machine. I am following the steps offered in following site: http://www.openldap.org/doc/admin24/quickstart.html I am at step 9, I started the slapd, but can't do LDAP search. I can't run slapadd command either. You can see my slapd is up and running, but there are nothing installed in /usr/local/bin. What should I install and how can I make ldapsearch and slapadd command run? Thanks [root@oldaptest01 sbin]# pgrep slapd 3094 [root@oldaptest01 openldap-2.4.40]# cd /usr/local/bin [root@oldaptest01 bin]# ldapsearch -bash: ldapsearch: command not found [root@oldaptest01 bin]# cd /usr/local/sbin [root@oldaptest01 sbin]# slapadd -bash: slapadd: command not found Hui Wang

2 1

changing objectClass in 2.4
by Igor Shmukler 25 Mar '15

25 Mar '15

Hello, I would like to change the objectClass for an existing record - specifically I want to replace dcObject for a custom one, so instead of: objectClass: top objectClass: dcObject objectClass: organization I would have: objectClass: top objectClass: myDcObject objectClass: organization I found a thread where Kurt mentions that back in day, there was planned support for 2.4 to offer such functionality. [ http://www.openldap.org/lists/openldap-software/200604/msg00074.html ] Was this done? It is working now? Is there a specific issue deleting the organization object? From the same email, I know that older OpenLDAP releases did not support modifying objectClass. I tried to delete the entry so the recreate it the I want it to look. Unfortunately, it is not working. I get an error as below: $ ldapdelete -D cn=config -W -x dc=directory,dc=com I am able to delete regular entries, fine. Sincerely, Igor Shmukler

3 2

olcObjectClasses: user-defined ObjectClass has inappropriate SUPerior: "dcObject"
by Igor Shmukler 24 Mar '15

24 Mar '15

Hello, I could not find anything exactly relevant quickly. Sorry to bother you good folks, again. I am trying to extend dcObject class in order to support a couple of additional attributes. It is not working, and it appears that the problem is not syntax-related. Is what I am trying to do legal? Is dcObject a good way to go about my goal of adding a DIT-level attributes? Should I instead create another class unrelated to dcObject? If yes, why? Below is my LDIF: olcAttributeTypes: ( 1.3.6.1.4.1.4203.666.100.129 NAME ( 'serviceLevel' ) DESC 'directory service mode. valid values are: trial, standard and premium' SUP name ) olcObjectClasses: ( 1.3.6.1.4.1.4203.666.100.2 NAME 'customDcObject' DESC 'Directory Domain Description' SUP dcObject STRUCTURAL MAY ( serviceLevel ) ) I should probably replace the last MAY for MUST. My attribute should be mandatory. Yet, it is probably not the reason for the error, is it?! Please advise, Sincerely, Igor Shmukler

2 2

Re: How to use ldapsearch -Esync ?
by Thomas Cort 24 Mar '15

24 Mar '15

> I'm writing a script that acts on changes in LDAP. I've abandoned this idea. The ldapsearch utility doesn't decode SyncInfo messages which provide valuable information. Instead, it simply prints "SyncInfo Received". This is worse than printing nothing at all because it causes my LDIF parser to choke. I think either the slapd-perl or slapd-shell backends are better suited to my needs than tailing the output of ldapsearch -Esync/rp Thomas

4 3

are patches important for the openldap installation?
by Wang, Hui 23 Mar '15

23 Mar '15

Hi, all My system admin installed openldap 2.4.40 for me but the slapadd command doesn't work. It seems like the ldap package and slapd package weren't installed. I am installing openldap 2.4.40 on redhat linux server following this direction: http://www.linuxfromscratch.org/blfs/view/svn/server/openldap.html I can't install patch successfully. It only patch a few files then stops. But the make test goes fine. Will there be a problem if the patch doesn't goes fine? You are welcomed for any input. I am very new to openldap. Hui Wang (Holly) CSUN IT Department Identity and Directory Service 818-677-2031 holly.wang(a)csun.edu

3 3

Re: Re: what is wrong with my permissions?
by Igor Shmukler 23 Mar '15

23 Mar '15

Hello Ulrich, Thank you. I finally figured out my problem. I did not notice/realize that permissions were being given in stages: userPassword, dn.base then *. Once I added dn="cn=config" to the correct line, things started working. I appreciate your help. [This is already, at least, the second time.] Sincerely, Igor Shmukler On Mon, Mar 23, 2015 at 4:43 PM, Ulrich Windl <Ulrich.Windl(a)rz.uni-regensburg.de> wrote: >>>> Igor Shmukler <igor.shmukler(a)gmail.com> schrieb am 19.03.2015 um 15:03 in > Nachricht > <CAA1SNA1h-FRxM=+MHqnTVncZscj-CS5avHbT4NvqcRMnh+_zMA(a)mail.gmail.com>: >> Hi Ferenc, >> >> I am still getting the same error with both by and your versions. Please >> advise: >> >> $ cat set_config_passwd.ldif >> dn: olcDatabase={0}config,cn=config >> changetype: modify >> replace: olcAccess >> olcAccess: {0}to * by >> dn.exact=gidNumber=0+uidNumber=0,cn=peercred,cn=external >> ,cn=auth manage by * break >> olcAccess: {1}to * by dn.exact=cn=config >> >> $ sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f set_config_passwd.ldif >> SASL/EXTERNAL authentication started >> SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth >> SASL SSF: 0 >> modifying entry "olcDatabase={0}config,cn=config" > > Igor, > > you allow cn=config to manage the config database, but below you remove an entry from another database with cn=config credentials. > >> >> $ ldapdelete -x -D cn=config -W cn=john,dc=directory,dc=com >> ldap_delete: Insufficient access (50) >> additional info: no write access to parent >> >> I even tried stripping the first line, so the rule was: {0}to * by >> dn.exact=cn=config >> Still gives me the same error. > > Check the ACL in the other database! > >> >> Please advise, >> >> Igor Shmukler >> >> >> On Thu, Mar 19, 2015 at 2:54 PM, Ferenc Wagner <wferi(a)niif.hu> wrote: >>> Igor Shmukler <igor.shmukler(a)gmail.com> writes: >>> >>>> I want it to be something like: >>>> olcAccess: {1}to * by dn="cn=config" manage >>>> >>>> Basically, I want dn=cn=config to have full root access over >>>> everything. I also want this password ideally to be password >>>> protected. >>>> >>>> Does it make sense? Can it be done? >>> >>> Sure. Add this olcAccess attribute to all the databases. Or to the >>> frontend database, but check man slapd.access for the priorities and >>> defaults. For what it's worth, I use the syntax >>> >>> to * by dn.exact=cn=config >>> >>> (which should be equivalent to yours). >>> -- >>> Feri. > > > >

1 0

LMDB error
by Shu, Xinxin 23 Mar '15

23 Mar '15

Hi list, I'm now working on integrating LMDB with ceph, now I encounter the follow error when initialize transaction : MDB_BAD_RSLOT: Invalid reuse of reader locktable slot What I want to know is in which situation this error occur? thanks Cheers, xinxin

2 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical March 2015