cron[10352]: nss_ldap: failed to bind to LDAP server ldap://127.0.0.1: Invalid credentials
cron[10352]: nss_ldap: failed to bind to LDAP server ldapi://%2fvar%2frun%2fopenldap%2fldapi/: Invalid credentials
cron[10352]: nss_ldap: could not search LDAP server - Server is unavailable
rc.conf
ldap.confslapd_enable="YES"
slapd_flags='-h "ldapi://%2fvar%2frun%2fopenldap%2fldapi/ ldap://0.0.0.0/ ldaps://0.0.0.0/"'
slapd.confhost 127.0.0.1
base dc=my-domain,dc=com
uri ldapi://%2fvar%2frun%2fopenldap%2fldapi/
rootbinddn cn=Manager,dc=my-domain,dc=com
scope sub
nss_base_passwd ou=Users,dc=my-domain,dc=com?one
nss_base_passwd ou=Computers,dc=my-domain,dc=com?one
nss_base_group ou=Groups,dc=my-domain,dc=com?one
ssl no
pam_password CRYPT
bind_timelimit 10
bind_policy soft
Подскажите как на путь истинный nss_ldap направить..include /usr/local/etc/openldap/schema/core.schema
include /usr/local/etc/openldap/schema/cosine.schema
include /usr/local/etc/openldap/schema/inetorgperson.schema
include /usr/local/etc/openldap/schema/misc.schema
include /usr/local/etc/openldap/schema/nis.schema
include /usr/local/etc/openldap/schema/openldap.schema
include /usr/local/etc/openldap/schema/samba.schema
pidfile /var/run/openldap/slapd.pid
argsfile /var/run/openldap/slapd.args
modulepath /usr/local/libexec/openldap
moduleload back_bdb
moduleload back_ldap
access to attrs=userPassword,sambaLMPassword,sambaNTPassword,sambaPwdLastSet,sambaPwdMustChange
by dn="cn=Manager,dc=my-domain,dc=com" write
by self write
by anonymous auth
by * none
#some attributes need to be readable anonymously so that 'id user' can answer correctly
access to attrs=objectClass,entry,homeDirectory,uid,uidNumber,gidNumber,memberUid
by dn="cn=Manager,dc=my-domain,dc=com" write
by * read
#somme attributes can be writable by users themselves
access to attrs=description,telephoneNumber,roomNumber,homePhone,loginShell,gecos,cn,sn,givenname
by dn="cn=Manager,dc=my-domain,dc=com" write
by self write
by * read
#some attributes need to be writable for samba
access to attrs=cn,sambaLMPassword,sambaNTPassword,sambaPwdLastSet,sambaLogonTime,sambaLogoffTime,sambaKickoffTime,sambaPwdCanChange,sambaPwdMustChange, sambaAcctFlags,displayName,sambaHomePath,sambaHomeDrive,sambaLogonScript, sambaProfilePath,description,sambaUserWorkstations,sambaPrimaryGroupSID, sambaDomainName,sambaMungedDial,sambaBadPasswordCount,sambaBadPasswordTime,
sambaPasswordHistory,sambaLogonHours,sambaSID,sambaSIDList,sambaTrustFlags,
sambaGroupType,sambaNextRid,sambaNextGroupRid,sambaNextUserRid,sambaAlgorithmicRidBase,
sambaShareName,sambaOptionName,sambaBoolOption,sambaIntegerOption,sambaStringOption,sambaStringListoption
by dn="cn=Manager,dc=my-domain,dc=com" write
by self read
by * none
#samba need to be able to create the samba domain account
access to dn.base="dc=my-domain,dc=com"
by dn="cn=Manager,dc=my-domain,dc=com" write
by * none
#samba need to be able to create new users accounts
access to dn="ou=Users,dc=my-domain,dc=com"
by dn="cn=Manager,dc=my-domain,dc=com" write
by * none
#samba need to be able to create new groups accounts
access to dn="ou=Groups,dc=my-domain,dc=com"
by dn="cn=Manager,dc=my-domain,dc=com" write
by * none
#samba need to be able to create new computers accounts
access to dn="ou=Computers,dc=my-domain,dc=com"
by dn="cn=Manager,dc=my-domain,dc=com" write
by * none
#this can be omitted but we let it stay because there could be other
branches in the directory
access to *
by self read
By * none
#######################################################################
# BDB database definitions
#######################################################################
database bdb
suffix "dc=my-domain,dc=com"
rootdn "cn=Manager,dc=my-domain,dc=com"
rootpw {SSHA}******************
directory /var/db/openldap-data
loglevel 256
index objectClass,uidNumber,gidNumber eq
index cn,sn,uid,displayName pres,sub,eq
index memberUid,mail,givenname eq,subinitial
index sambaSID,sambaPrimaryGroupSID,sambaDomainName eq
