Re: OpenLDAP 2.0.7 with LDAP Back End

[Jim Malcolm <jimm@att.com>]

Hi

I wanted to bring everyone up to date on this problem and thank those who
responded.

Douglas L. Stewart suggested:

>> You might want to try a system call trace and see if it gives anymore
>> information.  Not sure what OS you're running under.

>> Under Linux you can do:

>> strace -f slapd -d -1

>> Under Solaris you can do:

>> truss -f slapd -d -1

>> -Douglas

This was a good idea, but didn't help this time.  The problem was more
fundamental.

Pierangelo Masarati noticed that the suffix line was missing in slapd.conf

>> It seems that a suffix line is missing ... the backend
>> will never be resolved if you do not provide a naming
>> context.

That helped a lot.  It got me to a new set of errors.  Fortunately,
Pierangelo's email had the solution for them as well:

>> There are a couple of bugs in 2.0.7 that (at least on my system) inhibit
>> the correct operations of the backend. They have been fixed in the
>> HEAD branch.

I got the HEAD branch.  It built and ran with only one glitch.  When
starting slapd, I got the message that authPassword was not in the schema.
I checked the core.schema in etc/openldap/schema and indeed it was not
there.  However, it is in the core scheme in servers/slapd/schema so
something in the build doesn't install it.  I don't know whether this is a
bug or a feature.  However, when I cut and pasted the definition for
authPassword into etc/ldap/core.schema, my slapd operated as an ldap
repeater.

Success!

Jim Malcolm wrote:

> Hi
>
> I'm trying to get OpenLDAP 2.0.7 running with the LDAP back end.  My
> configure command is:
>
> ./configure  --without-threads \
>         --enable-ldap --with-ldap-module=static
>
> My database definition in slapd.conf is:
>
> database        ldap
> uri     ldap://niven.control.att.com:489
> binddn  ""
> bindpw  ""
>
> When I run slapd -d -1 and make a query, I get:
>
> slapd startup: initiated.
> slapd starting
> daemon: added 6r
> daemon: select: listen=6 active_threads=0 tvp=NULL
> daemon: activity on 1 descriptors
> daemon: new connection on 7
> daemon: conn=0 fd=7 connection from IP=135.207.251.22:1141
> (IP=255.61.221.56:389
> ) accepted.
> daemon: added 7r
> daemon: activity on:
> daemon: select: listen=6 active_threads=0 tvp=NULL
> daemon: activity on 1 descriptors
> daemon: activity on: 7r
> daemon: read activity on 7
> connection_get(7)
> connection_get(7): got connid=0
> connection_read(7): checking for input on id=0
> ber_get_next
> ldap_read: want=1, got=1
>   0000:  30                                                 0
> ldap_read: want=1, got=1
>   0000:  0c                                                 .
> ldap_read: want=12, got=12
>   0000:  02 01 01 60 07 02 01 02  04 00 80 00               ...`........
>
> ber_get_next: tag 0x30 len 12 contents:
> ber_dump: buf=0x0009cdc8 ptr=0x0009cdc8 end=0x0009cdd4 len=12
>   0000:  02 01 01 60 07 02 01 02  04 00 80 00               ...`........
>
> do_bind
> ber_scanf fmt ({iat) ber:
> ber_dump: buf=0x0009cdc8 ptr=0x0009cdcb end=0x0009cdd4 len=9
>   0000:  60 07 02 01 02 04 00 80  00                        `........
> ber_scanf fmt (o}) ber:
> ber_dump: buf=0x0009cdc8 ptr=0x0009cdd2 end=0x0009cdd4 len=2
>   0000:  80 00                                              ..
> do_bind: version=2 dn="" method=128
> conn=0 op=0 BIND dn="" method=128
> send_ldap_result: conn=0 op=0 p=2
> send_ldap_result: 0::
> send_ldap_response: msgid=1 tag=97 err=0
> ber_flush: 14 bytes to sd 7
>   0000:  30 0c 02 01 01 61 07 0a  01 00 04 00 04 00
> 0....a........
> ldap_write: want=14, written=14
>   0000:  30 0c 02 01 01 61 07 0a  01 00 04 00 04 00
> 0....a........
> conn=0 op=0 RESULT tag=97 err=0 text=
> do_bind: v2 anonymous bind
> ber_get_next
> ldap_read: want=1 error=Resource temporarily unavailable
> ber_get_next on fd 7 failed errno=11 (Resource temporarily unavailable)
>
> I can't figure out where it went wrong.  I can tell that it never got to
> the LDAP back end but I don't know why.
>
> Any pointers would be appreciated.
>
> Jim Malcolm
> jimm@att.com

--
Jim Malcolm
Room 2A19
180 Park Ave.
Florham Park, NJ  07932-0971
973 236 6469
jimm@att.com
AOL IM jimmyato