Re: issue with multiple 'database' stanzas in 2.0.23

["Pierangelo Masarati" <ando@sys-net.it>]

> Hi,
>
> I'm experiencing a problem when trying to add a second 'database'
> section to an existing slapd.conf with OpenLDAP 2.0.23. slapd seems to
> only see whichever database section comes first in the config file. The
> subsequent database definitions are ignored.
>
> Here's the relevant section of slapd.conf:
>
> #######################################################################
> # ldbm database definitions
> #######################################################################
>
> database        ldbm
> suffix          "dc=google,dc=com"
> rootdn          "cn=foo,dc=google,dc=com"
> rootpw          {crypt}foobarbaz
> directory       /var/lib/ldap
>
> # Indices to maintain
> index   objectClass,uid,uidNumber,gidNumber,memberUid   eq
> index   cn,mail,surname,givenname                       eq,subinitial
> index   mailHost,mailRoutingAddress                     eq
>
> #loglevel       256
> loglevel        1280	# temporarily log back-end activity, too
>
> lastmod on
>
> access to attr=userPassword
>         by self write
>         by * auth
>
> access to *
>         by * read
>
> #######################################################################
> # shell definitions
> #######################################################################
> database        shell
>
> suffix          "dc=google,dc=com"
> search          /usr/local/sbin/ldap_search
> #modify         /usr/local/sbin/ldap_modify
> #add            /usr/local/sbin/ldap_add
> #delete         /usr/local/sbin/ldap_delete
> ---
>
> If I move the shell section to the top of the file, the ldbm section is
> ignored and the shell back-end scripts are called as expected.
>
> Am I making a basic mistake here or is there a known issue with 2.0.23
> in this regard?

There is a well documented issue in any version of OpenLDAP
that inhibits multiple database stanzas from having the same
suffix.  If you can figure out a workaround ...

P.

-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it