Re: LDAP stopping without apparent reason

[Michael Ströder <michael@stroeder.com>]

Márcio Luciano Donada wrote:
> Michael Ströder escreveu:
>> Márcio Luciano Donada wrote:
>>> Hi list,
>>> We have a service ldap, version 2.4.11-1, debian lenny, but the times
>>> have been falling and does not even have a message in the log about the
>>> fall of it. Use it for e-mail service, jabber, ftp, and website. In the
>>> logs I have the following message:
>>>
>>> Aug  8 09:34:41 ldap slapd[15338]: connection_input: conn=1332300
>>> deferring operation: binding
>>> Aug  8 09:34:42 ldap slapd[15338]: connection_input: conn=1332301
>>> deferring operation: binding
>>> Aug  8 09:47:46 ldap slapd[15338]: slap_global_control: unrecognized
>>> control: 1.3.6.1.4.1.42.2.27.8.5.1
>> Your LDAP client seems to send the "Password Policy Control" along with the
>> bind request (see draft-behera-ldap-password-policy). So you should either
>> turn that off in your client's configuration if you don't need it or enable
>> slapo-ppolicy in your slapd.conf file.
> 
> Excuse my ignorance, but you can give me an example of how this would be
> setting in slapd.conf?

The first question is whether you need password policy enabled. If yes, then
see man page slapo-ppolicy(5). If no, then turn it off in the LDAP client in
question (which one?). If that's pam_ldap then watch out the configuration in
the accompanying ldap.conf file.

Ciao, Michael.

-- 
Michael Ströder
E-Mail: michael@stroeder.com
http://www.stroeder.com