openldap-technical July 2025

openldap-technical@openldap.org

16 participants
14 discussions

Q: "monitor_back_register_entry("cn=Consumer 112,cn=Database 1,cn=Databases,cn=Monitor"): entry exists"
by Windl, Ulrich 04 Jul '25

04 Jul '25

Hi! For openldap-2.5 and an MMR configuration I see the message monitor_back_register_entry("cn=Consumer 112,cn=Database 1,cn=Databases,cn=Monitor"): entry exists during startup. I'm wondering what the messages actually says, and what causes it. Could it be some bug in OpenLDAP? The machine in question is real hardware (no VM) and it has a *lot* of RAM (500G) and CPUs (64). If I query the monitoring database, I see no such connection. Kind regards, Ulrich Windl

2 5

many connections in proxy setup
by Bergmann, Clemens 04 Jul '25

04 Jul '25

Hi, we have two openLDAP Servers configured with back_ldap. Each server has one non-OpenLDAP-Server as “target”. I passed a redacted copy of my configuration below. At any given time we have around 100 connections from clients to the openLDAP Server. I noticed that there are a lot more connections open from the ldap Server to the “target” Servers. Sometimes close to 1000. As this is a temporary setup I did not investigate any more. In the last days we sometimes see the following errors in log: “daemon: accept(10) failed errno=24 (Too many open files)” “connection_input: conn=1799 deferring operation: too many executing” “connection_read(446): no connection!” I suspect that this is because there are more than 1024 connections open and the OS is preventing opening more FDs. I am not sure why we have so many open connections to the “target” servers. Maybe someone can spot my config error. Thanks in advance. dn: cn=config objectClass: olcGlobal cn: config olcArgsFile: /var/lib/openldap/slapd.args olcIdleTimeout: 15 olcLocalSSF: 256 olcLogLevel: none olcPidFile: /var/lib/openldap/slapd.pid olcRootDSE: /etc/openldap/rootDSE.ldif olcSaslSecProps: noplain,noanonymous olcSecurity: simple_bind=256 ssf=256 tls=0 olcTLSCACertificateFile: /etc/ssl/certs/ca-bundle.crt olcTLSCertificateFile: /etc/openldap/certs/server.pem olcTLSCertificateKeyFile: /etc/openldap/certs/server.key olcTLSCipherSuite: DEFAULT:-SHA1:-CBC olcTLSDHParamFile: /etc/openldap/dhparam.pem olcTLSProtocolMin: 3.3 dn: olcDatabase={2}ldap,cn=config objectClass: olcDatabaseConfig objectClass: olcLDAPConfig olcDatabase: {2}ldap olcAccess: redacted olcDbACLBind: bindmethod=simple binddn=cn=proxy,ou=admin,o=tu-darmstadt credentials=redacted tls_cacert=/etc/ssl/certs/ca-bundle.crt olcDbStartTLS: ldaps tls_cacert=/etc/ssl/certs/ca-bundle.crt olcDbURI: ldaps://backend-server01.example.com/ olcRootDN: cn=admin,ou=admin,o=tu-darmstadt olcSizeLimit: unlimited olcSuffix: o=tu-darmstadt olcTimeLimit: 90 Kind regards Clemens (Bergmann) -- Clemens Bergmann [er/ihm; he/him] Gruppe Nutzermanagement und Entwicklung Technische Universität Darmstadt Hochschulrechenzentrum, Alexanderstraße 2, 64283 Darmstadt Tel. +49 6151 16 71184 <http://www.hrz.tu-darmstadt.de/> http://www.hrz.tu-darmstadt.de/

3 4

Re: slapadd: could not add entry dn="cn=config" (line=1):
by Nick 03 Jul '25

03 Jul '25

I figured it out. I needed to only include the slapd.conf file in the directory, not slapd.ldif. Also generated rfc2307bis files and populated the database. Very cool! Thanks to the developers here! On Tue, Jul 1, 2025 at 7:10 PM Quanah Gibson-Mount <quanah(a)fast-mail.org> wrote: > > > --On Sunday, June 29, 2025 2:49 AM -0400 Nick <atod101101(a)gmail.com> > wrote: > > > > Import the configuration database > > su root -c /usr/local/sbin/slapadd -n 0 -F /usr/local/etc/slapd.d -l > > /usr/local/etc/openldap/slapd.ldif > > What is the contents of slapd.ldif? And I assume the > /usr/local/etc/slapd.d/ directory exists and has no contents. > > --Quanah > > > >

1 0

slapadd: could not add entry dn="cn=config" (line=1):
by Nick 01 Jul '25

01 Jul '25

Does anyone know the source and resolution to this installation error? Interestingly, if I use an alternate command I'm able to bring up the server, in which I can see via debug it's responding to the client. I'm following: https://www.openldap.org/doc/admin24/quickstart.html Import the configuration database su root -c /usr/local/sbin/slapadd -n 0 -F /usr/local/etc/slapd.d -l /usr/local/etc/openldap/slapd.ldif and encounter this error. I see many posts on it with no resolution. I'm using MacPorts openldap 2.6.10. Interestingly, if I invoke this suggested command: /opt/local/libexec/slapd -f /opt/local/etc/openldap/slapd.conf -F /opt/local/etc/slapd.d I can invoke slapd and my LDAP server comes up. It responds back to: /opt/local/bin/ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts but without dc=site,dc=com only blank dn: dn: # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 There is nothing in my etc/slapd.d directory. I try: ldapadd -d 3 -x -D "cn=Manager,dc=p0,dc=mac" -W -f file.txt Enter LDAP Password: ldap_bind: Invalid DN syntax (34) additional info: invalid DN Not sure how to approach this and any guidance appreciated.

3 2

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical July 2025