Márcio Luciano Donada wrote:
Michael Ströder escreveu:
Márcio Luciano Donada wrote:
Hi list, We have a service ldap, version 2.4.11-1, debian lenny, but the times have been falling and does not even have a message in the log about the fall of it. Use it for e-mail service, jabber, ftp, and website. In the logs I have the following message:
Aug 8 09:34:41 ldap slapd[15338]: connection_input: conn=1332300 deferring operation: binding Aug 8 09:34:42 ldap slapd[15338]: connection_input: conn=1332301 deferring operation: binding Aug 8 09:47:46 ldap slapd[15338]: slap_global_control: unrecognized control: 1.3.6.1.4.1.42.2.27.8.5.1
Your LDAP client seems to send the "Password Policy Control" along with the bind request (see draft-behera-ldap-password-policy). So you should either turn that off in your client's configuration if you don't need it or enable slapo-ppolicy in your slapd.conf file.
Excuse my ignorance, but you can give me an example of how this would be setting in slapd.conf?
The first question is whether you need password policy enabled. If yes, then see man page slapo-ppolicy(5). If no, then turn it off in the LDAP client in question (which one?). If that's pam_ldap then watch out the configuration in the accompanying ldap.conf file.
Ciao, Michael.