Вопрос по LDAP

[shults_alesio]

Здравствуйте многоуважаемые коллеги!!!
Вопрос вот в чем.
FreeeBSD 6.1, установил и вроде-бы настроил LDAP, руководствуясь статьей http://www.lissyara.su/?id=1277
При попытке добавления записи в БД:
ldapadd -x -D "cn=root,dc=bm,dc=loc" -W -f base.ldif
Enter LDAP Password:
Выдается следующее: ldap_bind: Can't contact LDAP server (-1)

Все в той же статье в комментариях от 0m3r, 2007-02-28 в 10:40:30 написано следующее:
также мну приходтса юзать опц. -h && -H
без них
ldap_bind: Can't contact LDAP server (-1)

Вроде проблема моя, но, честно говоря, я несколько недопонял(
Объясните пожалуйста, кому не сложно, что это значит????

[Хостинг HostFood.ru]

Тарифы на хостинг в России, от 12 рублей: https://www.host-food.ru/tariffs/hosting/
Тарифы на виртуальные сервера (VPS/VDS/KVM) в РФ, от 189 руб.: https://www.host-food.ru/tariffs/virtualny-server-vps/
Выделенные сервера, Россия, Москва, от 2000 рублей (HP Proliant G5, Intel Xeon E5430 (2.66GHz, Quad-Core, 12Mb), 8Gb RAM, 2x300Gb SAS HDD, P400i, 512Mb, BBU):
https://www.host-food.ru/tariffs/vydelennyi-server-ds/
Недорогие домены в популярных зонах: https://www.host-food.ru/domains/

[Alex Keda]

ldap-сервер - запущен?

[shults_alesio]

Извеняюсь за позднюю реакцию!
При загрузке пишет starting slapd, но в процессах его не видно?
ввожу /usr/local/etc/rc.d/slapd start - тоже пишет starting slapd?
ввожу /usr/local/etc/rc.d/slapd stop - выдает -slapd not runing? (check /var/run/openldap/slapd.pid)
"Я его конечно с удовольствием проверил-бы, но не знаю как!!"
Может чего показать(из cfg) для анализа???

[f0s]

может со схемами какой косяк..

[shults_alesio]

А что может быть за косяк?

slapd.con на всякий случай!
# See slapd.conf(5) for details on configuration options.
include /usr/local/etc/openldap/schema/core.schema
include /usr/local/etc/openldap/schema/cosine.schema
include /usr/local/etc/openldap/schema/inetorgperson.schema
include /usr/local/etc/openldap/schema/misc.schema
include /usr/local/etc/openldap/schema/nis.schema
include /usr/local/etc/openldap/schema/openldap.schema

pidfile /var/run/openldap/slapd.pid
argsfile /var/run/openldap/slapd.args

modulepath /usr/local/libexec/openldap
moduleload back_lbdm

access to attrs=userPassword
by self write
by anonymous auth
by * none

access to *
by self write
by anonymous read
by * none

database lbdb
suffix "dc=bm,dc=loc"
rootdn "cn=root,dc=bm,dc=loc"
rootpw qaz
directory /va/db/openldap-data
loglevel 256
index objectClass eq
index cn eq

[manefesto]

/usr/local/etc/rc.d/slapd stop - выдает -slapd not runing? (check /var/run/openldap/slapd.pid)

Это говорит только о том что он у тебя не запущен. Смотри в /var/log/messages

[shults_alesio]

В /var/log/massages ни чего нет ,
но в /var/log/debug.lod вот чего гонит

Код: Выделить всё

Aug 30 15:00:19 dnsdhcp slapd[522]: @(#) $OpenLDAP: slapd 2.3.27 (Aug 30 2007 11:53:07) $root@dnsdhcp.baltmetal.local:/usr/ports/net/openldap23-server/work/openldap-2.3.27/servers/slapd
Aug 30 15:00:20 dnsdhcp slapd[522]: lt_dlopenext failed: (back_lbdm) Shared object "back_lbdm.so" not found, required by "slapd"
Aug 30 15:00:20 dnsdhcp slapd[522]: connections_destroy: nothing to destroy.
Aug 30 15:00:20 dnsdhcp slapd[522]: slapd stopped.

Может кто знает чего это означает?

[shults_alesio]

Я так поня что он ругается на движок Баз данных BDB (если я правильно выразился)
Но при установки ни каких ошибок не возникло???
Может у кого такие проблемы возникали в ходе настройки, подскажите начинающему!!!

[Turbo]

ругается при запуске все делал по той-же статье.

site# /usr/local/etc/rc.d/slapd.sh start
--: not found
Starting slapd.
Unrecognized database type (lbdm)
site#

при этом с дефолтовой базой bdm

site# /usr/local/etc/rc.d/slapd.sh start
--: not found
Starting slapd.
site#

как сделать чтоб по статье все было?
и на что оно ругается "--: not found"

пакеты в системе

site# pkg_info
cvsup-without-gui-16.1h_3 General network file distribution system optimized for CVS
db44-4.4.20.4 The Berkeley DB package, revision 4.4
ezm3-1.2_1 Easier, more portable Modula-3 distribution for building CV
gettext-0.16.1_3 GNU gettext package
glib-2.14.2 Some useful routines of C programming (current stable versi
gmake-3.81_2 GNU version of 'make' utility
libiconv-1.11_1 A character set conversion library
libltdl-1.5.24 System independent dlopen wrapper
libtool-1.5.24 Generic shared library support script
linux_base-fc-4_10 Base set of packages needed in Linux mode (for i386/amd64)
mc-4.6.1_6 Midnight Commander, a free Norton Commander Clone
openldap-client-2.3.39 Open source LDAP client implementation
openldap-server-2.3.39 Open source LDAP server implementation
pcre-7.4 Perl Compatible Regular Expressions library
perl-5.8.8_1 Practical Extraction and Report Language
pkg-config-0.22_1 A utility to retrieve information about installed libraries
site#

конфиг

Код: Выделить всё

#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /usr/local/etc/openldap/schema/core.schema
include         /usr/local/etc/openldap/schema/cosine.schema
include         /usr/local/etc/openldap/schema/inetorgperson.schema
include         /usr/local/etc/openldap/schema/misc.schema
include         /usr/local/etc/openldap/schema/nis.schema
include         /usr/local/etc/openldap/schema/openldap.schema

# Define global ACLs to disable default read access.

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral       ldap://root.openldap.org

pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args

# Load dynamic backend modules:
modulepath      /usr/local/libexec/openldap
#moduleload     back_bdb
# moduleload    back_ldap
moduleload      back_ldbm
# moduleload    back_passwd
# moduleload    back_shell

# Sample security restrictions
#       Require integrity protection (prevent hijacking)
#       Require 112-bit (3DES or better) encryption for updates
#       Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64

# Sample access control policy:
#       Root DSE: allow anyone to read it
#       Subschema (sub)entry DSE: allow anyone to read it
#       Other DSEs:
#               Allow self write access
#               Allow authenticated users read access
#               Allow anonymous users to authenticate
#       Directives needed to implement policy:
# access to dn.base="" by * read
# access to dn.base="cn=Subschema" by * read
# access to *
#       by self write
#       by users read
#       by anonymous auth
#
# if no access controls are present, the default policy
# allows anyone and everyone to read anything but restricts
# updates to rootdn.  (e.g., "access to * by * read")
#
# rootdn can always read and write EVERYTHING!
 access to attrs=userPassword
        by self write
        by anonymous auth
        by * none

 access to *
        by self write
        by anonymous auth
        by * none

#######################################################################
# BDB database definitions
#######################################################################

database        lbdm
suffix          "dc=ubcua,dc=tv"
rootdn          "cn=root,dc=ubcua,dc=tv"
# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw          {SSHA}YXkMFmhgTz4I3kezXyO693fWml4Hmnom
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory       /var/db/openldap-data

loglevel        256
# Indices to maintain
index   objectClass     eq
index   cn              eq

[ruslan]

Такой же трабл.
Делаю по доку - после первичного конфигуряния slapd.conf -пробую стартовать.
Получаю

Код: Выделить всё

slapd[819]: lt_dlopenext failed: (back_lbdm) Shared object "back_lbdm.so" not found, required by "slapd"

Проверил - симлинк

Код: Выделить всё

back_lbdm.so

на

Код: Выделить всё

back_lbdm.so-2.3.so.2

имеется в

Код: Выделить всё

/usr/local/libexec/openldap

OpenLDAP -2.4 из портов - с опциями из доки.
Система

Код: Выделить всё

galleon# uname -a 
FreeBSD 6.3-RELEASE-p4 

Пакеты в системе

Код: Выделить всё

galleon# pkg_info 
apache-1.3.39_2     The extremely popular Apache http server. Very fast, very c
autoconf-2.61_2     Automatically configure source code on many Un*x platforms
autoconf-wrapper-20071109 Wrapper script for GNU autoconf
automake-1.9.6_2    GNU Standards-compliant Makefile generator (1.9)
automake-wrapper-20071109 Wrapper script for GNU automake
bigreqsproto-1.0.2  BigReqs extension headers
cvsup-without-gui-16.1h_3 General network file distribution system optimized for CVS
cyrus-sasl-2.1.22_1 RFC 2222 SASL (Simple Authentication and Security Layer)
db44-4.4.20.4       The Berkeley DB package, revision 4.4
db46-4.6.21.1       The Berkeley DB package, revision 4.6
expat-2.0.0_1       XML 1.0 parser written in C
ezm3-1.2_1          Easier, more portable Modula-3 distribution for building CV
fam-2.6.10_3        A file alteration monitor
freetype2-2.3.5     A free and portable TrueType font rendering engine
gdbm-1.8.3_3        The GNU database manager
gettext-0.16.1_3    GNU gettext package
glib-2.14.2         Some useful routines of C programming (current stable versi
gmake-3.81_2        GNU version of 'make' utility
help2man-1.36.4_1   Automatically generating simple manual pages from program o
inputproto-1.4.2.1  Input extension headers
jpeg-6b_4           IJG's jpeg compression utilities
kbproto-1.0.3       KB extension headers
libICE-1.0.4,1      Inter Client Exchange library for X11
libSM-1.0.3,1       Session Management library for X11
libX11-1.1.3,1      X11 library
libXau-1.0.3_2      Authentication Protocol library for X11
libXaw-1.0.4,1      X Athena Widgets library
libXdmcp-1.0.2      X Display Manager Control Protocol library
libXext-1.0.3,1     X11 Extension library
libXmu-1.0.3,1      X Miscellaneous Utilities libraries
libXp-1.0.0,1       X print library
libXpm-3.5.7        X Pixmap library
libXt-1.0.5         X Toolkit library
libiconv-1.11_1     A character set conversion library
libltdl-1.5.24      System independent dlopen wrapper
libmcrypt-2.5.8     Multi-cipher cryptographic library (used in PHP)
libtool-1.5.24      Generic shared library support script
libxml2-2.6.30      XML parser library for GNOME
lighttpd-1.4.18_1   A secure, fast, compliant, and very flexible Web Server
lua-5.1.1_2         Small, compilable scripting language providing easy access
m4-1.4.9,1          GNU m4
mc-4.6.1_6          Midnight Commander, a free Norton Commander Clone
mhash-0.9.7.1       An easy-to-use library for strong hashes such as MD5 and SH
mysql-client-5.0.45_1 Multithreaded SQL database (client)
mysql-server-5.0.45_1 Multithreaded SQL database (server)
openldap-client-2.3.43 Open source LDAP client implementation
openldap-server-2.3.43 Open source LDAP server implementation
openssh-3.6.1_6     OpenBSD's secure shell client and server (remote login prog
p5-gettext-1.05_1   Message handling functions
pcre-7.4            Perl Compatible Regular Expressions library
pecl-filter-0.11.0  PHP extension for safely dealing with input parameters
pecl-hash-1.5       HASH Message Digest Framework for PHP
pecl-json-1.2.1     PHP extension for JSON (JavaScript Object Notation) seriali
pecl-zip-1.9.0      A PECL extension to create and read zip files
perl-5.8.8_1        Practical Extraction and Report Language
php5-5.2.5          PHP Scripting Language
php5-bz2-5.2.5      The bz2 shared extension for php
php5-calendar-5.2.5 The calendar shared extension for php
php5-ctype-5.2.5    The ctype shared extension for php
php5-dom-5.2.5      The dom shared extension for php
php5-extensions-1.1 A "meta-port" to install PHP extensions
php5-ftp-5.2.5      The ftp shared extension for php
php5-gd-5.2.5       The gd shared extension for php
php5-gettext-5.2.5  The gettext shared extension for php
php5-iconv-5.2.5    The iconv shared extension for php
php5-mbstring-5.2.5 The mbstring shared extension for php
php5-mcrypt-5.2.5   The mcrypt shared extension for php
php5-mhash-5.2.5    The mhash shared extension for php
php5-mysql-5.2.5    The mysql shared extension for php
php5-mysqli-5.2.5   The mysqli shared extension for php
php5-openssl-5.2.5  The openssl shared extension for php
php5-pcre-5.2.5     The pcre shared extension for php
php5-pdo-5.2.5      The pdo shared extension for php
php5-posix-5.2.5    The posix shared extension for php
php5-session-5.2.5  The session shared extension for php
php5-simplexml-5.2.5 The simplexml shared extension for php
php5-sockets-5.2.5  The sockets shared extension for php
php5-spl-5.2.5      The spl shared extension for php
php5-sqlite-5.2.5   The sqlite shared extension for php
php5-tokenizer-5.2.5 The tokenizer shared extension for php
php5-xml-5.2.5      The xml shared extension for php
php5-xmlreader-5.2.5 The xmlreader shared extension for php
php5-xmlwriter-5.2.5 The xmlwriter shared extension for php
php5-zlib-5.2.5     The zlib shared extension for php
phpMyAdmin-2.11.2.2 A set of PHP-scripts to manage MySQL over the web
pkg-config-0.22_1   A utility to retrieve information about installed libraries
png-1.2.22          Library for manipulating PNG images
printproto-1.0.3    Print extension headers
python-2.5,2        The "meta-port" for the default version of Python interpret
python25-2.5.1_1    An interpreted object-oriented programming language
t1lib-5.1.1_2,1     A Type 1 Rasterizer Library for UNIX/X11
xcmiscproto-1.1.2   XCMisc extension headers
xextproto-7.0.2     XExt extension headers
xf86bigfontproto-1.1.2 XFree86-Bigfont extension headers
xproto-7.0.10_1     X11 protocol headers
xtrans-1.0.4        Abstract network code for X

И ещё конфиг openldap

Код: Выделить всё

galleon# cat /usr/local/etc/openldap/slapd.conf                               /
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /usr/local/etc/openldap/schema/core.schema
include         /usr/local/etc/openldap/schema/cosine.schema
include         /usr/local/etc/openldap/schema/inetorgperson.schema
include         /usr/local/etc/openldap/schema/misc.schema
include         /usr/local/etc/openldap/schema/nis.schema
include         /usr/local/etc/openldap/schema/openldap.schema

# Define global ACLs to disable default read access.

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral       ldap://root.openldap.org

pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args

# Load dynamic backend modules:
modulepath      /usr/local/libexec/openldap
moduleload      back_lbdm
# moduleload    back_hdb
# moduleload    back_ldap

# Sample security restrictions
#       Require integrity protection (prevent hijacking)
#       Require 112-bit (3DES or better) encryption for updates
#       Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64

# Sample access control policy:
#       Root DSE: allow anyone to read it
#       Subschema (sub)entry DSE: allow anyone to read it
#       Other DSEs:
#               Allow self write access
#               Allow authenticated users read access
#               Allow anonymous users to authenticate
#       Directives needed to implement policy:
access to attrs=userPassword
        by self write
        by anonymous auth
        by * none

access to *
        by self write
        by anonymous auth
        by * more
#######################################################################
# BDB database definitions
#######################################################################

database        lbdm
suffix          "dc=metalltrader,dc=dp, dc=ua"
rootdn          "cn=root,dc=metalltrader,dc=dp,dc=ua"
# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw          {SSHA##################
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory       /var/db/openldap-data
# Indices to maintain
index   objectClass     eq
index   cn              eq

[HRonik]

используйте back_bdb.

[ruslan]

чем это чревато? и чревато ли чем то?

[ruslan]

поставил back_bdb
взлетело вроде - продолжаю - полёт нормальный

[romzes]

да ничем. Уже более полгода стоид bdb. На производительность не жалуюсь. Правда dn'ов немного до 100.
C преимуществ bdb над lbdm: можно делать slapcat не останавливая slapd. с lbdm у меня slapd ругался на такое.
Имхо в любом случае шустрее мускуля, ибо мускуль автономная СУБД, а бдб - библиотека .
детальнее - http://www.inode.ru/articles/database/2006-02-12/296
http://itc.ua/node/25938

[HRonik]

да ничем. Уже более полгода стоид bdb. На производительность не жалуюсь. Правда dn'ов немного до 100.
C преимуществ bdb над lbdm: можно делать slapcat не останавливая slapd. с lbdm у меня slapd ругался на такое.
Имхо в любом случае шустрее мускуля, ибо мускуль автономная СУБД, а бдб - библиотека .
детальнее - http://www.inode.ru/articles/database/2006-02-12/296
http://itc.ua/node/25938

500 dn'ов , работает год...
Просто уже не раз всплывало, что LDAP отказывается от ldbm в пользу bdb.

[ruslan]

спасибо за советы

[f0s]

у меня токая трабл после перехода с ldbm на bdb, в дебаге постоянно сыпется это:

Код: Выделить всё

Oct  2 15:02:50 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:50 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:50 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (sambaGroupType) index_param failed (18)
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (sambaSIDList) index_param failed (18)
Oct  2 15:02:51 mail last message repeated 5 times
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (sambaGroupType) index_param failed (18)
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (sambaSIDList) index_param failed (18)
Oct  2 15:02:51 mail last message repeated 5 times
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (sambaGroupType) index_param failed (18)
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (sambaSIDList) index_param failed (18)
Oct  2 15:02:51 mail last message repeated 5 times
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:51 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:52 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:52 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:52 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:52 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:53 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:53 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:53 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:53 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:54 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:55 mail slapd[394]: <= bdb_equality_candidates: (mail) index_param failed (18)
Oct  2 15:02:55 mail slapd[394]: <= bdb_equality_candidates: (mail) index_param failed (18)
Oct  2 15:02:55 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:55 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:55 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:55 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:56 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:56 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:56 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:56 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:56 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:56 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:56 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:56 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:57 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (uid) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:02:58 mail slapd[394]: <= bdb_equality_candidates: (sambaSID) index_param failed (18)
Oct  2 15:03:00 mail slapd[394]: <= bdb_equality_candidates: (gidNumber) index_param failed (18)
Oct  2 15:03:00 mail slapd[394]: <= bdb_equality_candidates: (sambaGroupType) index_param failed (18)
Oct  2 15:03:00 mail slapd[394]: <= bdb_equality_candidates: (sambaSIDList) index_param failed (18)
Oct  2 15:03:00 mail last message repeated 3 times
Oct  2 15:03:00 mail slapd[394]: <= bdb_equality_candidates: (sambaGroupType) index_param failed (18)
Oct  2 15:03:00 mail slapd[394]: <= bdb_equality_candidates: (sambaSIDList) index_param failed (18)
Oct  2 15:03:00 mail last message repeated 3 times
Oct  2 15:03:02 mail slapd[394]: <= bdb_equality_candidates: (accountStatus) index_param failed (18)
Oct  2 15:03:02 mail slapd[394]: <= bdb_equality_candidates: (mailAlternateAddress) index_param failed (18)
Oct  2 15:03:02 mail slapd[394]: <= bdb_equality_candidates: (accountStatus) index_param failed (18)
Oct  2 15:03:02 mail slapd[394]: <= bdb_equality_candidates: (mail) index_param failed (18)

[HRonik]

Надеюсь ты бэкапы делал ?)
попробуй снести все файлы базы, что бы slapd по новой их создал...
и потом залит свою бд туда...

[ruslan]

у меня ещё есть трабл - ругаецца в логи на ошибку с файле nsswitch.conf - строка с параметром - shells files.
Убрал - ругань исчезла

погуглил - нашел список опций этого файла - и вот shells там не оказалось

[HRonik]

у меня ещё есть трабл - ругаецца в логи на ошибку с файле nsswitch.conf - строка с параметром - shells files.
Убрал - ругань исчезла

погуглил - нашел список опций этого файла - и вот shells там не оказалось

действительно странный параметр, ты где его раскопал?

[ruslan]

Настраиваю по этой статье:
http://forum.lissyara.su/viewtopic.php? ... s%3A+files

[f0s]

Надеюсь ты бэкапы делал ?)
попробуй снести все файлы базы, что бы slapd по новой их создал...
и потом залит свою бд туда...

ну я так и делал изначально. сохзранил всю базу в ldif, потом прибил все из /var/db/openldap
поменял параметр на bdb, после чего через ldapadd добавил данные.

а в логи дебага сыпется эта тема.. не нравиццо мне это
я так понимаю это наверно из-за eq параметра.. то есть если его пропсиать в конфиге, то на то, что укажешь ругаться не будет, но и тогда и параметр этот не будет видиется.. особенно это заметно если указать что-то типа eq uid

[f0s]

у меня ещё есть трабл - ругаецца в логи на ошибку с файле nsswitch.conf - строка с параметром - shells files.
Убрал - ругань исчезла

погуглил - нашел список опций этого файла - и вот shells там не оказалось

действительно странный параметр, ты где его раскопал?

у меня все ок.. а посел shells стоит двоеточие?

[Amadeus]

Добрый день вопрос такого плана.

Полдымаю домен по статьям на этом сайте.

Лдап сервер запустил без сучка и задоринки, а вот когда пытаюсь внести туда данные.

мне пишет вот это

Код: Выделить всё

ldapadd: Invalid syntax (21)
        additional info: objectClass: value #1 invalid per syntax

Вот конфик base.ldif Написал по статьям

Код: Выделить всё

dn: dc=mx,dc=aspeto,dc=ru
objectClass: dcobject
objectClass: ....... тут домен
objectClass: top
dc: aspeto
o: aspeto

dn: ou=users,dc=mx,dc=....,dc=ru
objectClass: top
objectClass: organizationUnit
ou: users

dn: ou=groups,dc=.......,dc=.......,dc=ru
objectClass: top
objectClass: organizationUnit
ou: groups

dn: ou=computers,dc=.....,dc=.....,dc=ru
objectClass: top
objectClass: organizationUnit
ou: computers

Запускаю вот так

Код: Выделить всё

ldapadd -x -D \ "cn=.....,dc=....,dc=....,dc=ru" -w тут пароль -f main.ldif

Не судите строго, начинающий в этом деле) Если есть возможность ткните где грабли)
Заранее благодарен:)

[zingel]

http://www.openldap.org/lists/openldap- ... 00631.html