hi Dan White,

I'm sorry to reply so late.

I read your email this morning,before that I still try to check the problem out.Last night I figure out a solution by rebuild "/etc/ldap/slapd.d/cn=config" directory:

rm -r /etc/ldap/slapd.d/cn\=config
/etc/init.d/slapd restart


and this problem(Invalid credentials) seem to gone,but another new problem arises.when I run step 5,it's show that:

# ldapsearch -x -D "cn=Manager,dc=cg,dc=scsio,dc=ac,dc=cn" -w "secret"
ldap_bind: Invalid DN syntax (34)
    additional info: invalid DN


I google the solution and found someone said it must be the DN string format error (contain whitespace),but I check and  check again,and it's seem to be OK in format.Maybe there are still somewhere went wrong?

Thank you for your help!


On 2011年01月05日 01:20, Dan White wrote:
On 04/01/11 19:30 +0800, cn_gd@126.com wrote:
hi all,

I 'm install slapd follow bellow steps  in ubuntu 10.04 lucid  strictly:

1. apt-get install slapd

* slapd -V
@(#) $OpenLDAP: slapd 2.4.21 (Aug 10 2010 17:08:36) $
   buildd@yellow:/build/buildd/openldap-2.4.21/debian/build/servers/slapd*

2. dpkg-reconfigure slapd

3.edit  /etc/ldap/slapd.d/cn\=config.ldif

4. cat /etc/ldap/slapd.d/cn\=config.ldif

dn: cn=config
objectClass: olcGlobal
cn: config
olcArgsFile: /var/run/slapd/slapd.args
olcLogLevel: none
olcPidFile: /var/run/slapd/slapd.pid
structuralObjectClass: olcGlobal

dn: olcDatabase=bdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcBdbConfig
olcDatabase: bdb
olcSuffix: "dc=cg,dc=scsio,dc=ac,dc=cn"
olcDbDirectory:    /home/az/openldap-data
olcRootDN: "cn=Manager,dc=cg,dc=scsio,dc=ac,dc=cn"
olcRootPW: secret

4. /etc/init.d/slapd restart


All step're OK,then I run bellow to test it:

5. ldapsearch -x -D "cn=Manager,dc=cg,dc=scsio,dc=ac,dc=cn" -w "secret" -H ldap://cg.scsio.ac.cn

and it show that error:
*ldap_bind: Invalid credentials (49)

You could increase your log level (olcLogLevel) to get trouble shooting
details.

After having gone through this process myself recently (using slapd.d), and
not being happy with the Debian default config, here's the process I'm
using in a test environment for boot strapping an install, that might spark
some ideas with your config.

My starting configuration is: http://web.olp.net/dwhite/openldap/slapd-new.conf

aptitude install slapd slapd-smbk5pwd

/etc/init.d/slapd stop
mv /etc/ldap/slapd.d /etc/ldap/slapd.d.bak
mv /var/lib/ldap /var/lib/ldap.bak
mkdir /etc/ldap/slapd.d /var/lib/ldap
chown openldap:openldap /etc/ldap/slapd.d /var/lib/ldap
cat > /etc/ldap/ldap.conf << EOF
BASE dc=example,dc=org
URI ldapi:///
EOF

echo "SASL_MECH EXTERNAL" > /root/.ldaprc

sudo -u openldap slapadd << EOF
dn: dc=example,dc=org
objectClass: top
objectClass: dcObject
objectClass: organization
o: Example
dc: example

dn: ou=People,dc=example,dc=org
objectClass: top
objectClass: organizationalUnit
ou: People

dn: ou=Groups,dc=example,dc=org
objectClass: top
objectClass: organizationalUnit
ou: Groups

dn: ou=Aliases,dc=example,dc=org
objectClass: top
objectClass: organizationalUnit
ou: Aliases

EOF

sudo -u openldap slaptest -f /etc/ldap/slapd.conf -F /etc/ldap/slapd.d
/etc/init.d/slapd start



-- 
黄龙飞
2011-01-05
_________________________________________________________

地址: 广州市新港西路135号中山大学东北区345栋(510275)
网站:  http://press.sysu.edu.cn
电话:  (020)84113349
传真:  (020)84037215
手机:  13560497211
Email:l.f.hwang@gmail.com

* 在社办公时间:周二、周三 08:15~11:45  14:45~17:15
外出组稿时请直接拨打本人手机,谢谢!