On 03/27/2012 09:34 AM, Hallvard B Furuseth wrote:

On Tue, 27 Mar 2012 09:10:17 +0200, stefano stefano.malini@gmail.com wrote:

...

On 03/27/2012 08:13 AM, Hallvard B Furuseth wrote: I wrote: Have you done something as root, so root owns some of the database files but you try to run slapd as another user (with -u)? If so, fix the file permsisions and then avoid working as root.

Sorry, I mean file ownerships. Though it could be file or directory permissions too, come to think of it.

thanks, but, which permissions of which file do i have to check?

The directory and contentes named by the 'directory' directive(s) in slapd.conf, aka olcDbDirectory in cn=config.

these are the permissions of 'directory' /var/lib/ldap/

drwxr-xr-x 2 openldap openldap 4096 Mar 27 07:58 ldap

must be writable by users also? i mean rwxrwxr-x?

and its contents is:

root@amahoro:/var/lib/ldap# ls -l total 11448 -rw-r--r-- 1 openldap openldap 4096 Mar 27 07:58 alock -rw------- 1 root root 24576 Mar 26 16:08 __db.001 -rw------- 1 root root 352256 Mar 26 16:08 __db.002 -rw------- 1 root root 2629632 Mar 26 16:08 __db.003 -rw------- 1 root root 163840 Mar 26 16:07 __db.004 -rw------- 1 root root 876544 Mar 26 16:08 __db.005 -rw------- 1 root root 32768 Mar 26 16:08 __db.006 -rw-r--r-- 1 openldap openldap 96 Mar 23 08:24 DB_CONFIG -rw------- 1 openldap openldap 8192 Mar 26 16:07 dn2id.bdb -rw------- 1 openldap openldap 32768 Mar 26 15:14 id2entry.bdb -rw------- 1 openldap openldap 10485760 Mar 26 16:07 log.0000000001 -rw------- 1 root root 8192 Mar 26 16:07 objectClass.bdb