openldap-technical

openldap-technical@openldap.org

9 participants
9902 discussions

Problem deleting item because of DB_LOCK_NOTGRANTED
by Laurent Bourqui 17 Jul '08

17 Jul '08

Dear Openldap techies, I have been trying for hours to bring this server to work without any success so far. When I try to delete an object from the ldap server with ldapdelete, I get the following error message in the log file: Jul 18 00:43:00 zorg slapd[1904]: => bdb_dn2id_delete 0x3: "cn=laurent bourqui,ou=addresses,dc=apicus,dc=ch" Jul 18 00:43:00 zorg slapd[1904]: <= bdb_dn2id_delete 0x3: -30994 Jul 18 00:43:00 zorg slapd[1904]: <=- bdb_delete: dn2id failed: DB_LOCK_NOTGRANTED: Lock not granted (-30994) Jul 18 00:43:00 zorg slapd[1904]: ==> bdb_delete: retrying... The server is configured the following way: sladpd.conf: ------------------------ include /usr/local/etc/openldap/schema/core.schema include /usr/local/etc/openldap/schema/cosine.schema include /usr/local/etc/openldap/schema/inetorgperson.schema pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args modulepath /usr/local/libexec/openldap moduleload back_bdb loglevel any ####################################################################### # BDB database definitions ####################################################################### database bdb suffix "dc=apicus,dc=ch" rootdn "cn=admin,dc=apicus,dc=ch" rootpw xxxxxxxx directory /var/db/openldap-data index objectClass eq ---------------------------------------- I have added some entries using the following ldif file: ---------------------------------------- dn: dc=apicus, dc=ch objectclass: dcObject objectClass: organization o: apicus dc: apicus dn: ou=addresses, dc=apicus, dc=ch objectclass: organizationalUnit ou: addresses description: Apicus Addressbook dn: cn=Laurent Bourqui, ou=addresses, dc=apicus, dc=ch objectClass: top objectClass: inetOrgPerson uid: 00001 cn: Laurent Bourqui gn: Laurent sn: Bourqui mobile: +xxxxxxxxx homePhone: +xxxxxxxxxxx street: xxxxxxxxxxxx postalCode: xxxxx l: xxxxxxxxxx st: xxx ---------------------------------------- The ldif file has been imported with the following command: ldapadd -x -W -D 'cn=admin,dc=apicus,dc=ch' -f apicus-addresses.ldiff I'm now trying to delete the entry: dn: cn=Laurent Bourqui, ou=addresses, dc=apicus, dc=ch using the following command: ldapdelete -x -W -D 'cn=admin,dc=apicus,dc=ch' "cn=Laurent Bourqui, ou=addresses, dc=apicus, dc=ch" This command hangs and continuisly bring the error message in the logs. I have search the FAQ, google and event the berkley DB infos for informations but I was not able to find any hint about the reason of this problem. Did anybody already encoutered this error ? Versions: openldap 2.4.10 FreeBSD 7.0 Any feedback will be welcom. Many thanks in advance for your help. Best Regards -- Laurent Bourqui

1 0

problem connection in local with account root
by GanGan 17 Jul '08

17 Jul '08

hello all I have problem for connect in local in my server rhel 5.1with the root account all the connection with ssh are good, root too I use ldap for other account the root account is not in ldap my /etc/nsswitch.conf passwd: files [SUCCESS=return] ldap shadow: files [SUCCESS=return] ldap group: files [SUCCESS=return] ldap when I delete ldap in my nsswitch.conf the connection local with the root account works well I have modified /etc/pam.d/sshd no other files in /etc/pam.d/ my /etc/pam.d/sshd auth optional pam_group.so auth required pam_env.so auth sufficient pam_unix.so likeauth auth sufficient pam_ldap.so use_first_pass auth required pam_deny.so auth required pam_warn.so account sufficient pam_unix.so account sufficient pam_ldap.so ignore_unknown_user account required pam_deny.so account required pam_warn.so password required pam_cracklib.so retry=2 minlen=8 password sufficient pam_unix.so use_authok md5 shadow password sufficient pam_ldap.so use_authok password required pam_deny.so password required pam_warn.so session optional pam_mkhomedir.so skel=/etc/skel/ umask=077 silent session required pam_limits.so session optional pam_ldap.so ignore_unknown_user session required pam_warn.so someone could help me - GanGan -

1 0

forcing group membership removal
by daniel rahmeh 17 Jul '08

17 Jul '08

Hi, I have another question concerning group membership. Is there a way to force openldap to remove the user DN from a group when i delete the user entry from openLDAP? In other words, is there some kind of configuration that tells openLDAP to remove the user DN from the member attribute of a group once the user entry is deleted from the directory. Thank you

2 2

openldap entry modification
by daniel rahmeh 17 Jul '08

17 Jul '08

hi, I have a question concerning the best method to modify an entry (in openldap) using a programming API like php. php offers the ability to modify an entry using some fucntions like ldap_modify, ldap_mod_add, ldap_mod_del. sometimes it's complicated to use these functions, in this case, developpers use another approach, which is deleting the entry and then add it with the new attributes etc. my question is: is it fine to delete an entry and re-add it?? does this affect the performance of openLDAP? thank you

2 3

starting slapd 2.4.10
by Christophe Thibault 17 Jul '08

17 Jul '08

Hi, I'm currently playing with Samba 4 alpha and OpenLdap 2.4.10. I want to start slapd with this command line (i'm currently logged in as root) : slapd -d 16384 -f /usr/local/samba/private/ldap/slapd.conf -h ldapi://%2Fusr%2Flocal%2Fsamba%2Fprivate%2Fldap%2Fldapi But I get the following error trace: @(#) $OpenLDAP: slapd 2.4.10 (Jul 11 2008 09:22:55) $ buildd@vernadsky:/build/buildd/openldap-2.4.10/debian/build/servers/slapd daemon: bind(7) failed errno=13 (Permission denied) slapd stopped. connections_destroy: nothing to destroy. I tried to replace the ldapi uri by "ldap:///", but now I'm getting a could not open config file "/usr/local/samba/private/ldap/slapd.conf": Permission denied (13) error message, while all rights and group/owner seem to be OK (ls -l returns -rw-r--r--). I think I miss something, but i'm stuck for now, if someone has any idea... thanks, chris

2 1

Trouble with nisnetgrouptriple syntax / RFC 2307
by Jeff Blaine 16 Jul '08

16 Jul '08

I've come across the same problem as the original poster found here: http://www.openldap.org/lists/openldap-technical/200804/msg00127.html The only reply to him indicated that his syntax was incorrect for nisnetgrouptriple according to RFC 2307. I cannot see how it is invalid based on the syntax definition from RFC 2307. My example: > dn: cn=users1,ou=Netgroup,dc=rcf,dc=foo,dc=com > objectClass: nisNetgroup > objectClass: top > cn: users1 > nisNetgroupTriple: (-,asgen2m,) > nisNetgroupTriple: (-,apdons,) > nisNetgroupTriple: (-,ffeins,) > nisNetgroupTriple: (-,faullton,) The syntax definition: > nisnetgrouptriple = "(" hostname "," username "," domainname ")" > hostname = "" / "-" / keystring > username = "" / "-" / keystring > domainname = "" / "-" / keystring Does that not state that hostname, username, domainname can each be ANY of: empty - keystring ?? Any guidance would be welcome! Jeff Blaine

4 6

script for adding users information in ldap database
by Aravind Arjunan 16 Jul '08

16 Jul '08

hi, i had configured openldap in RHEL 5. It was in master/slave replication in syncrepl method (refreshOnly) method. I had to add users information in the ldap database. Nearly 15000 users are there so i can able to add all the 15000 users infromation at a time. so i need a script or some utility to add all the user infromation at the same time. Am using LDAP Browser for adding the entries now. so plz help me how to add all the users information at single time.

6 6

N-way multimaster
by Miguel Jinez 16 Jul '08

16 Jul '08

Hi. I need help to fix a problem. I am running openLdap 2.4 I have configurated 2 multimaster servers, which works fine, but I was thinking what happen if one of them die? When that master is restarted read the "logold" parameter in the other master and synchronize the changes, problem solved. But what happen if one master dies, meanwhile the other master performs changes in the Ldap tree (add, modify, delete) and that master dies too? I have test it and the changes that I made in the second master are not synchronized on the first one, and I don t know how I can synchronize the changes, I have accesslog configurated, I can see in the second one log these changes but the first one doesn t read it when is restarted. I need your help. sorry by the bad english. Migue

2 4

slapd was refusing connections from local clients
by Haim [Howard] Roman 15 Jul '08

15 Jul '08

I had a strange situation where the slapd would accept connections from other machines, but not from the local host. It didn't matter whether the local client program was the RADIUS server or ldapsearch. According to netstat & lsof, slapd was listening on all interfaces. Setup: * CentOS release 4.6 * slapd 2.2.13 (Jul 11 2008 09:16:05) (CentOS package) * This slapd maintains a replica data base. (The slapd on the master server is slapd 2.3.35, Jun 11 2007, running on Solaris 10.) * FreeRADIUS Version 1.0.1, built on May 10 2007 -- it uses the local slapd to get user names & passwords. Yesterday we had a power outage, and the UPS didn't work :-( Someone suggested that maybe things came up in the wrong order & that a reboot would help. And the reboot did indeed solve the problem. But I'd still like to know what happened. Before the reboot, I even tried turning on the following log levels (in /etc/slapd.conf): loglevel conns config stats sync packets BER ACL none But I really couldn't find any messages that helped me understand *why* I had this strange problem. Any suggestions, or even pointers on how to find out? Thanks. -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Haim (Howard) Roman Computer Center, Jerusalem College of Technology roman(a)jct.ac.il Phone: 052-8-592-599 (6022 from within Machon Lev)

1 0

Convert Fedora-DS LDIF to OpenLDAP?
by John Oliver 15 Jul '08

15 Jul '08

Google hasn't helped... I only found something to go the other way. And I didn't see this addressed in the FAQ, either. -- *********************************************************************** * John Oliver http://www.john-oliver.net/ * * * ***********************************************************************

5 5

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

openldap-technical