[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: Cannot get users to load



Title: RE: Cannot get users to load

Same results for ldapsearch. I'm guessing there are limited results because the ldapadd is not working.

[root@EGGLDAP openldap]# ldapsearch -x -b 'dc=services,dc=egginc,dc=com' -D 'cn
=Manager,dc=services,dc=egginc,dc=com' -w secret '(objectclass=*)'
# extended LDIF
#
# LDAPv3
# base <dc=services,dc=egginc,dc=com> with scope sub
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 32 No such object

# numResponses: 1
[root@EGGLDAP openldap]#

-----Original Message-----
From: Todd Lyons [mailto:tlyons@ivenue.com]
Sent: Tuesday, October 19, 2004 9:13 PM
To: Pease, Melanie
Cc: openldap-software@openldap.org
Subject: Re: Cannot get users to load

mpease@egginc.com wanted us to know:

>   I ran the above command as with these results
>   ldapsearch -x -b 'dc=services,dc=egginc,dc=com' '(objectclass=*)'
>   result: 32 No such object
>   # numResponses: 1

Ok, now try it to take into account this:

>   rootdn          "cn=Manager,dc=services,dc=egginc,dc=com"
>   rootpw          secret

ldapsearch -x -b 'dc=services,dc=egginc,dc=com' \
  -D 'cn=Manager,dc=services,dc=egginc,dc=com' -w secret \
  '(objectclass=*)'

I'd be willing to bet that it now finds a few things.

Also note that you have no access definitions in your slapd.conf.
You'll need to work on that before you go live with a production system.

Here's a sample of what mine looks like:
#######################################################################
# ldbm database definitions
#######################################################################

# Note that cn=Manager is not specified here.  It's implied that it
# has write access to everything in the directory, kinda like the way
# that root has access to everything on a filesystem (barring the
# immutable bit).
access to attr=userPassword
        by dn="cn=master,dc=ivenue,dc=net" write
        by dn="cn=courier,dc=ivenue,dc=net" read
        by dn="cn=sendmail,dc=ivenue,dc=net" read
        by dn="cn=pam,dc=ivenue,dc=net" read
        by self write
        by * auth
access to *
        by dn="cn=master,dc=ivenue,dc=net" write
        by * read

#######################################################################
# ldbm database definitions
#######################################################################

database        ldbm
suffix          "dc=ivenue,dc=net"
rootdn          "cn=Manager,dc=ivenue,dc=net"
rootpw          {crypt}obfuscatedobfuscated
directory       /var/lib/openldap-data
# Indices to maintain
index   objectClass,uid,uidNumber,gidNumber,memberUid   eq
index   cn,mail,surname,givenname                       eq,subinitial
index   sendmailMTAKey,sendmailMTAMapName               eq
index   sendmailMTAHost,sendmailMTACluster              eq
index   sendmailMTAAliasGrouping,sendmailMTAClassName   eq

--
Regards...              Todd
OS X: We've been fighting the "It's a mac" syndrome with upper management
for  years  now.  Lately  we've  taken  to  just  referring  to  new  mac
installations  as  "Unix"  installations  when  presenting proposals  and
updates.  For some reason, they have no problem with that.          -- /.
Linux kernel 2.6.3-19mdkenterprise   2 users,  load average: 0.04, 0.09, 0.08