Hi,

Yes, this is on windows and I am the admin so I do have read/write access to all the directories.

Thanks,

Ike

From: Michael Ströder michael@stroeder.com To: Ike Ikonne/Dallas/IBM@IBMUS, openldap-technical@openldap.org, Date: 12/09/2014 08:41 AM Subject: Re: Problems starting an instance of openLDAP

Ike Ikonne wrote:

I am getting the following error message and would like to know if anyone has any idea as to why I am getting it:

547e04ae line 55 (index telephonenumber) 547e04ae index telephoneNumber 0x0714 547e04ae line 56 (index cn) 547e04ae index cn 0x0714 547e04af config_back_db_open: No explicit ACL for back-config

configured.

Using hardcoded default 547e04af config_build_attrs: error 21 on olcConfigFile value #0 547e04af config_build_entry: build "cn=config" failed: "" 547e04af backend_startup_one (type=config, suffix="cn=config"):

bi_db_open

failed! (-1) 547e04af slapd stopped.

Does the config directory exist? Ownership and permissions allow read/write for slapd process?

Ciao, Michael.

Hi Howard,

So, here is my entire slapd.conf file .. just the default values.

# BDB Backend configuration file # See slapd.conf(5) for details on configuration options. # This file should NOT be world readable. ucdata-path ./ucdata include ./schema/core.schema include ./schema/cosine.schema include ./schema/nis.schema include ./schema/inetorgperson.schema include ./schema/openldap.schema include ./schema/dyngroup.schema

database config rootdn "cn=admin,cn=config" rootPw secret

pidfile ./run/slapd.pid argsfile ./run/slapd.args

# Enable TLS if port is defined for ldaps

TLSVerifyClient never TLSCipherSuite HIGH:MEDIUM:-SSLv2 TLSCertificateFile ./secure/certs/server.pem TLSCertificateKeyFile ./secure/certs/server.pem TLSCACertificateFile ./secure/certs/server.pem

####################################################################### # bdb database definitions #######################################################################

database bdb suffix "dc=maxcrc,dc=com" rootdn "cn=Manager,dc=maxcrc,dc=com" # Cleartext passwords, especially for the rootdn, should # be avoid. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. rootpw {SSHA}ddVc4uWRoUvG/fqQzdwm68IxuTSq/Cq5

# The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd and slap tools. # Mode 700 recommended. directory ./data dirtyread searchstack 20 # Indices to maintain index mail pres,eq index objectclass pres index default eq,sub index sn eq,sub,subinitial index telephonenumber index cn

From: Howard Chu hyc@symas.com To: Ike Ikonne/Dallas/IBM@IBMUS, openldap-technical@openldap.org, Date: 12/09/2014 08:59 AM Subject: Re: Problems starting an instance of openLDAP

Ike Ikonne wrote:

Hi all,

I am getting the following error message and would like to know if anyone has any idea as to why I am getting it:

547e04ae line 55 (index telephonenumber) 547e04ae index telephoneNumber 0x0714 547e04ae line 56 (index cn) 547e04ae index cn 0x0714 547e04af config_back_db_open: No explicit ACL for back-config configured. Using hardcoded default 547e04af config_build_attrs: error 21 on olcConfigFile value #0

error 21 is InvalidSyntax. So what's the value of olcConfigFile?

547e04af config_build_entry: build "cn=config" failed: "" 547e04af backend_startup_one (type=config, suffix="cn=config"): bi_db_open failed! (-1) 547e04af slapd stopped.

Thanks,

Ike

Hi Howard,

Thanks so much for trying to help me to resolve this issue; the thing is that when I initially installed this instance of OpenLDAP, everything came up, I was able to create some entries, but all of a sudden, I started getting this error; that said, how do I specify the olcConfigFile to point to the slapd.conf during runtime inside the slapd.conf file?

Thanks,

Ike

From: Howard Chu hyc@symas.com To: Ike Ikonne/Dallas/IBM@IBMUS, Cc: openldap-technical@openldap.org Date: 12/10/2014 02:14 AM Subject: Re: Problems starting an instance of openLDAP

Ike Ikonne wrote:

Hi Howard,

So, here is my entire slapd.conf file .. just the default values.

The error message comes from cn=config trying to set the olcConfigFile attribute to the name of the slapd.conf file. It's the full pathname of the file that's relevant here, not its contents.

Ike Ikonne wrote:

...

Hi all,

I am getting the following error message and would like to know if anyone has any idea as to why I am getting it:

547e04ae line 55 (index telephonenumber) 547e04ae index telephoneNumber 0x0714 547e04ae line 56 (index cn) 547e04ae index cn 0x0714 547e04af config_back_db_open: No explicit ACL for back-config configured. Using hardcoded default 547e04af config_build_attrs: error 21 on olcConfigFile value #0

error 21 is InvalidSyntax. So what's the value of olcConfigFile?

...

547e04af config_build_entry: build "cn=config" failed: "" 547e04af backend_startup_one (type=config, suffix="cn=config"): bi_db_open failed! (-1) 547e04af slapd stopped.

Hi Howard,

Thanks, that solved it! -f needed to be fully qualified. I have also changed the value in the window's service and openLdap now starts as a service. Again, thanks so much for straightening this out. I have been stumped as to why sometimes open ldap is able to start up and sometimes I just could not get it to boot up.

Ike

From: Howard Chu hyc@symas.com To: Ike Ikonne/Dallas/IBM@IBMUS, Cc: openldap-technical@openldap.org Date: 12/10/2014 10:48 AM Subject: Re: Problems starting an instance of openLDAP

Ike Ikonne wrote:

Hi Howard,

Thanks so much for trying to help me to resolve this issue; the thing is that when I initially installed this instance of OpenLDAP, everything

came

up, I was able to create some entries, but all of a sudden, I started getting this error; that said, how do I specify the olcConfigFile to point to the slapd.conf during runtime inside the slapd.conf file?

You don't. You specify the path to the slapd.conf file using the -f option of the slapd command line, as already documented in the slapd(8) manpage.

Thanks,

Ike

From: Howard Chu hyc@symas.com To: Ike Ikonne/Dallas/IBM@IBMUS, Cc: openldap-technical@openldap.org Date: 12/10/2014 02:14 AM Subject: Re: Problems starting an instance of openLDAP

---

Ike Ikonne wrote:

...

Hi Howard,

So, here is my entire slapd.conf file .. just the default values.

The error message comes from cn=config trying to set the olcConfigFile attribute to the name of the slapd.conf file. It's the full pathname of the file that's relevant here, not its contents.

...

Ike Ikonne wrote:

...

Hi all,

I am getting the following error message and would like to know if anyone has any idea as to why I am getting it:

547e04ae line 55 (index telephonenumber) 547e04ae index telephoneNumber 0x0714 547e04ae line 56 (index cn) 547e04ae index cn 0x0714 547e04af config_back_db_open: No explicit ACL for back-config configured. Using hardcoded default 547e04af config_build_attrs: error 21 on olcConfigFile value #0

error 21 is InvalidSyntax. So what's the value of olcConfigFile?

...

547e04af config_build_entry: build "cn=config" failed: "" 547e04af backend_startup_one (type=config, suffix="cn=config"): bi_db_open failed! (-1) 547e04af slapd stopped.

-- -- Howard Chu CTO, Symas Corp. http://www.symas.com http://www.symas.com/ Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/