On Sun, 2003-12-21 at 07:02, Don Calfa wrote:
> I guess I need to know if this is normal first before I go into the
> depths of this.
>
> service ldap start
> Starting slapd: [ OK ]
>
> service ldap stop
> Stopping slapd: /etc/init.d/ldap: line 196: kill: (29285) - No such process
> /etc/init.d/ldap: line 196: kill: (29281) - No such process
> [ OK ]
>
> Maybe this is a reason for it to seem not to work?
>
> Could I also see your slapd.conf file?
----
ps aux|grep slapd
if it's running...should be something like...
ldap 5025 0.0 0.4 16692 4692 ? S 10:28 0:00
/usr/sbin/slapd -u ldap -h ldap://localhost/ ldaps:///
root 5048 0.0 0.0 3676 656 pts/7 S 10:33 0:00 grep
slapd
---
slapd.conf - still a work of confusion in process ;-)
# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.7 2001/09/27
20:00:31 kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/redhat/autofs.schema
include /etc/openldap/schema/redhat/kerberosobject.schema
include /etc/openldap/schema/misc.schema
include /etc/openldap/schema/samba.schema
# Define global ACLs to disable default read access.
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org
#pidfile //var/run/slapd.pid
#argsfile //var/run/slapd.args
# Create a replication log in /var/lib/ldap for use by slurpd.
# replogfile /var/lib/ldap/master-slapd.replog
loglevel 256
# Load dynamic backend modules:
# modulepath /usr/sbin/openldap
# moduleload back_ldap.la
# moduleload back_ldbm.la
# moduleload back_passwd.la
# moduleload back_shell.la
#
# The next three lines allow use of TLS for connections using a dummy
test
# certificate, but you should generate a proper certificate by changing
to
# /usr/share/ssl/certs, running "make slapd.pem", and fixing permissions
on
# slapd.pem so that the ldap user or group can read it.
#TLSCertificateFile /usr/share/ssl/certs/slapd.pem
#TLSCertificateKeyFile /usr/share/ssl/certs/slapd.pem
#TLSCACertificateFile /usr/share/ssl/certs/ca-bundle.cert
TLSCipherSuite HIGH:MEDIUM:+SSLv2
TLSCertificateFile /etc/openldap/ldap.cert
TLSCertificateKeyFile /etc/openldap/ldap.key
TLSCACertificateFile /etc/openldap/ca.crt
#
# Sample Access Control
# Allow read access of root DSE
# Allow self write access
# Allow authenticated users read access
# Allow anonymous users to authenticate
#
#access to dn="" by * read
#access to *
# by self write
# by users read
# by anonymous auth
#
# if no access controls are present, the default is:
# Allow read by all
#
# rootdn can always write!
access to dn=".*,o=Customer,c=US" attr=userPassword
by dn="cn=root,o=Customer,c=US" write
by self write
by * auth
access to dn=".*,o=Customer,c=US" attr=mail
by dn="cn=root,o=Customer,c=US" write
by self write
by * read
access to dn=".*,ou=People,o=Customer,c=US"
by * read
access to dn=".*,o=Customer,c=US"
by self write
by * read
#######################################################################
# ldbm database definitions
#######################################################################
database ldbm
suffix "o=Customer,c=US"
rootdn "cn=root,o=Customer,c=US"
rootpw REMOVED
directory /var/lib/ldap
password-hash {crypt}
password-crypt-salt-format "$1$%.8s"
## Indices to maintain
## required by OpenLDAP
index objectclass eq
index cn pres,sub,eq
index sn pres,sub,eq
index uidNumber,gidNumber eq
index mail,givenname eq,subinitial
## required to support pdb_getsampwnam
index uid pres,sub,eq
# required to support pdb_getsambapwrid()
#index displayName pres,sub,eq
## uncomment these if you are storing posixAccount and
## posixGroup entries in the directory as well
#index uidNumber eq
#index gidNumber eq
index memberUid eq
index sambaSID eq
index sambaPrimaryGroupSID eq
index sambaDomainName eq
index default sub
Good luck
Craig
(text/plain)