[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: disappearing daemon ...



>Since I did not save the earlier posts, would you tell me (again) which db you
>are using, and which version?

I am using OpenLDAP 1.0.2, with gdbm 1.7.3 (direct from ftp.gnu.org).

>Can you please post your acl and slapd.conf file (remember to edit out the
>manager dn and password..)?

These files are pretty-much the stock distribution (we are primarily
testing a conversion of some of our services over to LDAP, which was
looking like a great product).  Here there are,

Tony
attribute	photo					bin
attribute	personalsignature			bin
attribute	jpegphoto				bin
attribute	audio					bin
attribute	labeledurl				ces
attribute	userpassword				ces
attribute	telephonenumber				tel
attribute	facsimiletelephonenumber	fax	tel
attribute	pagertelephonenumber		pager	tel
attribute	homephone				tel
attribute	mobiletelephonenumber		mobile	tel
attribute	aliasedObjectName			dn
attribute	member					dn
attribute	owner					dn
attribute	seealso					dn
attribute	manager					dn
attribute	documentauthor				dn
attribute	secretary				dn
attribute	lastmodifiedby				dn
attribute	associatedname				dn
attribute	naminglink				dn
attribute	reciprocalnaminglink			dn
attribute	dn					dn
include		/usr/local/etc/ldap/slapd.at.conf
include		/usr/local/etc/ldap/slapd.oc.conf
schemacheck	on
# referral	ldap://ldap.itd.umich.edu

#######################################################################
# Setup access controls
#######################################################################

access to attrs=userPassword by self write by dn="cn=XXXXX,o=George Fox
University,c=US" write by dn="cn=XXXXX,o=George Fox University,c=US"
compare by * none by dn="^$" none

access to attrs=member,entry by dnattr=owner write

access to attrs=universityID by * none by dn="^$" none

access to attrs=cn by * read

access to attrs=uid by * read

access to attrs=uidNumber by * read

access to * by self write

#######################################################################
# ldbm database definitions
#######################################################################

database	ldbm
suffix		"o=George Fox University, c=US"
directory	/usr/tmp/ldap
rootdn		"cn=XXXXX, o=George Fox University, c=US"
rootpw		XXXXXXXX
objectclass top
	requires
		objectClass

objectclass alias
	requires
		aliasedObjectName,
		objectClass

objectclass country
	requires
		objectClass,
		c
	allows
		searchGuide,
		description

objectclass locality
	requires
		objectClass
	allows
		description,
		l,
		searchGuide,
		seeAlso,
		st,
		streetAddress

objectclass organization
	requires
		objectClass,
		o
	allows
		businessCategory,
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		searchGuide,
		seeAlso,
		st,
		streetAddress,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		userPassword,
		x121Address

objectclass organizationalUnit
	requires
		objectClass,
		ou
	allows
		businessCategory,
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		searchGuide,
		seeAlso,
		st,
		streetAddress,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		userPassword,
		x121Address

objectclass person
	requires
		objectClass,
		sn,
		cn
	allows
		description,
		seeAlso,
		telephoneNumber,
		userPassword

objectclass organizationalPerson
	requires
		objectClass,
		sn,
		cn
	allows
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		ou,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		seeAlso,
		st,
		streetAddress,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		title,
		userPassword,
		x121Address

objectclass gfuPerson
	requires
		objectClass,
		sn,
		givenname,
		cn,
		uid,
		universityID
	allows
		affiliationCode,
		audio,
		businessCategory,
		classStanding,
		description,
		destinationIndicator,
		doNotDelete,
		doNotMove,
		expire,
		extention,
		facsimileTelephoneNumber,
		gidNumber,
		homePhone,
		homePostalAddress,
		internationaliSDNNumber,
		jpegPhoto,
		keepNames,
		l,
		labeledURL,
		loginshell,
		mail,
		mailPreferenceOption,
		memberOfGroup,
		middlename,
		mobile,
		multiLineDescription,
		noBatchUpdates,
		notRegistered,
		notice,
		onVacation,
		organizationalStatus,
		ou,
		pager,
		personalSignature,
		personalTitle,
		photo,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		proxy,
		registeredAddress,
		registrationStatus,
		roomNumber,
		secretary,
		seeAlso,
		st,
		streetAddress,
		telephoneNumber,
		textEncodedORaddress,
		title,
		uidNumber,
		updateSource,
		userCertificate,
		userClass,
		userPassword,
		vacationMessage,
		xacl

objectclass organizationalRole
	requires
		objectClass,
		cn
	allows
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		ou,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		roleOccupant,
		seeAlso,
		st,
		streetAddress,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		x121Address

objectclass groupOfNames
	requires
		objectClass,
		member,
		cn
	allows
		businessCategory,
		description,
		o,
		ou,
		owner,
		seeAlso

objectclass groupOfUniqueNames
	requires
		objectClass,
		member,
		gidNumber,
		cn
	allows
		businessCategory,
		description,
		o,
		ou,
		owner,
		seeAlso

objectclass residentialPerson
	requires
		objectClass,
		sn,
		cn,
		l
	allows
		businessCategory,
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		seeAlso,
		st,
		streetAddress,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		userPassword,
		x121Address

objectclass applicationProcess
	requires
		objectClass,
		cn
	allows
		description,
		l,
		ou,
		seeAlso

objectclass applicationEntity
	requires
		objectClass,
		presentationAddress,
		cn
	allows
		description,
		l,
		o,
		ou,
		seeAlso,
		supportedApplicationContext

objectclass dSA
	requires
		objectClass,
		presentationAddress,
		cn
	allows
		knowledgeInformation

objectclass device
	requires
		objectClass,
		cn
	allows
		description,
		l,
		o,
		ou,
		owner,
		seeAlso,
		serialNumber

objectclass strongAuthenticationUser
	requires
		objectClass,
		userCertificate

objectclass certificationAuthority
	requires
		objectClass,
		authorityRevocationList,
		certificateRevocationList,
		cACertificate
	allows
		crossCertificatePair

objectclass pilotObject
	requires
		objectClass
	allows
		audio,
		dITRedirect,
		info,
		jpegPhoto,
		lastModifiedBy,
		lastModifiedTime,
		manager,
		photo,
		uniqueIdentifier

objectclass newPilotPerson
	requires
		objectClass,
		sn,
		cn
	allows
		businessCategory,
		description,
		drink,
		homePhone,
		homePostalAddress,
		janetMailbox,
		mail,
		mailPreferenceOption,
		mobile,
		organizationalStatus,
		otherMailbox,
		pager,
		personalSignature,
		personalTitle,
		preferredDeliveryMethod,
		roomNumber,
		secretary,
		seeAlso,
		telephoneNumber,
		textEncodedORaddress,
		uid,
		userClass,
		userPassword

objectclass account
	requires
		objectClass,
		uid
	allows
		description,
		host,
		l,
		o,
		ou,
		seeAlso

objectclass document
	requires
		objectClass,
		documentIdentifier
	allows
		abstract,
		audio,
		authorCN,
		authorSN,
		cn,
		dITRedirect,
		description,
		documentAuthor,
		documentLocation,
		documentPublisher,
		documentStore,
		documentTitle,
		documentVersion,
		info,
		jpegPhoto,
		keywords,
		l,
		lastModifiedBy,
		lastModifiedTime,
		manager,
		o,
		obsoletedByDocument,
		obsoletesDocument,
		ou,
		photo,
		seeAlso,
		subject,
		uniqueIdentifier,
		updatedByDocument,
		updatesDocument

objectclass room
	requires
		objectClass,
		cn
	allows
		description,
		roomNumber,
		seeAlso,
		telephoneNumber

objectclass documentSeries
	requires
		objectClass,
		cn
	allows
		description,
		l,
		o,
		ou,
		seeAlso,
		telephoneNumber

objectclass domain
	requires
		objectClass,
		dc
	allows
		associatedName,
		businessCategory,
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		o,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		searchGuide,
		seeAlso,
		st,
		streetAddress,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		userPassword,
		x121Address

objectclass rFC822localPart
	requires
		objectClass,
		dc
	allows
		associatedName,
		businessCategory,
		cn,
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		o,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		searchGuide,
		seeAlso,
		sn,
		st,
		streetAddress,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		userPassword,
		x121Address

objectclass dNSDomain
	requires
		objectClass,
		dc
	allows
		associatedName,
		businessCategory,
		dNSRecord,
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		o,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		searchGuide,
		seeAlso,
		st,
		streetAddress,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		userPassword,
		x121Address

objectclass domainRelatedObject
	requires
		objectClass,
		associatedDomain

objectclass friendlyCountry
	requires
		objectClass,
		c,
		co
	allows
		description,
		searchGuide

objectclass simpleSecurityObject
	requires
		objectClass,
		userPassword

objectclass pilotOrganization
	requires
		objectClass,
		ou,
		o
	allows
		buildingName,
		businessCategory,
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		searchGuide,
		seeAlso,
		st,
		streetAddress,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		userPassword,
		x121Address

objectclass nadfObject
	requires
		objectClass
	allows
		lastModifiedTime,
		nadfSearchGuide,
		supplementaryInformation

objectclass usStateOrEquivalent
	requires
		objectClass,
		st,
		fipsStateAlphaCode,
		fipsStateNumericCode,
		l
	allows
		description,
		lastModifiedTime,
		nadfSearchGuide,
		searchGuide,
		seeAlso,
		streetAddress,
		supplementaryInformation

objectclass usPlace
	requires
		objectClass,
		fips55,
		l
	allows
		description,
		lastModifiedTime,
		nadfSearchGuide,
		searchGuide,
		seeAlso,
		st,
		streetAddress,
		supplementaryInformation

objectclass usCountyOrEquivalent
	requires
		objectClass,
		fipsCountyNumericCode,
		fips55,
		l
	allows
		description,
		lastModifiedTime,
		nadfSearchGuide,
		searchGuide,
		seeAlso,
		st,
		streetAddress,
		supplementaryInformation

objectclass ansiOrgObject
	requires
		objectClass,
		ansiOrgNumericCode

objectclass nadfApplicationEntity
	requires
		objectClass,
		supportedApplicationContext,
		presentationAddress,
		cn
	allows
		description,
		l,
		o,
		ou,
		seeAlso,
		supportedApplicationContext

objectclass nadfADDMD
	requires
		objectClass,
		ad
	allows
		businessCategory,
		description,
		destinationIndicator,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		l,
		lastModifiedTime,
		nadfSearchGuide,
		o,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		searchGuide,
		seeAlso,
		st,
		streetAddress,
		supplementaryInformation,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		userPassword,
		x121Address

objectclass publicObject
	requires
		objectClass,
		namingLink

objectclass providerObject
	requires
		objectClass,
		reciprocalNamingLink

objectclass nationalObject
	requires
		objectClass,
		c

objectclass fips55Object
	requires
		objectClass,
		fips55
	allows
		st

objectclass restaurant
	requires
		objectClass,
		description,
		telephoneNumber,
		streetAddress
	allows
		Ambiance,
		Appearance,
		Average-price,
		Closed,
		CreditCardsAccepted,
		Kosher,
		Max-price,
		MaximumInParty,
		Min-price,
		Music,
		NotRecommended,
		OutdoorSeating,
		Parking,
		QualityOfService,
		QualityPriceRatio,
		Recommended,
		RecommendedBy,
		Reservation,
		ServiceSpeed,
		Specialty,
		Taux-de-frequentation,
		TransportationMeans,
		facsimileTelephoneNumber,
		postalAddress

objectclass kerberosSecurityObject
	requires
		objectClass,
		krbName

objectclass rfc822MailGroup
	requires
		objectClass,
		owner,
		cn
	allows
		associatedDomain,
		autoMgt,
		description,
		destinationIndicator,
		errorsTo,
		facsimileTelephoneNumber,
		internationaliSDNNumber,
		joinable,
		krbName,
		labeledURL,
		mail,
		member,
		memberOfGroup,
		moderator,
		multiLineDescription,
		notice,
		physicalDeliveryOfficeName,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		registeredAddress,
		requestsTo,
		rfc822ErrorsTo,
		rfc822RequestsTo,
		seeAlso,
		streetAddress,
		suppressNoEmailError,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		userPassword,
		x121Address,
		xacl

objectclass image
	requires
		objectClass,
		cn
	allows
		citation,
		copyright,
		imageFiles,
		jpegPhoto,
		keywords,
		multiLineDescription,
		owner,
		predominantColor

objectclass imageFile
	requires
		objectClass,
		cn
	allows
		colorDepth,
		documentLocation,
		fileFormat,
		fileSize,
		height,
		resolution,
		seeAlso,
		width

objectclass service
	requires
		objectClass,
		cn
	allows
		category,
		dependentUpon,
		destinationIndicator,
		facsimileTelephoneNumber,
		hoursOfOperation,
		internationaliSDNNumber,
		jpegPhoto,
		keywords,
		labeledURL,
		mail,
		multiLineDescription,
		owner,
		physicalDeliveryOfficeName,
		platform,
		postOfficeBox,
		postalAddress,
		postalCode,
		preferredDeliveryMethod,
		product,
		provider,
		ratingDescription,
		ratingTime,
		registeredAddress,
		seeAlso,
		serviceArea,
		serviceRating,
		streetAddress,
		telephoneNumber,
		teletexTerminalIdentifier,
		telexNumber,
		x121Address

objectclass umichDocument
	requires
		objectClass,
		documentIdentifier
	allows
		abstract,
		audio,
		authorCN,
		authorSN,
		category,
		cn,
		dITRedirect,
		description,
		documentAuthor,
		documentAvailable,
		documentLocation,
		documentPublisher,
		documentSeriesTitle,
		documentStore,
		documentTitle,
		documentVersion,
		info,
		jpegPhoto,
		keywords,
		l,
		labeledURL,
		lastModifiedBy,
		lastModifiedTime,
		manager,
		multiLineAbstract,
		o,
		obsoletedByDocument,
		obsoletesDocument,
		ou,
		owner,
		photo,
		platform,
		product,
		seeAlso,
		serviceArea,
		subject,
		uniqueIdentifier,
		updatedByDocument,
		updatesDocument

objectclass documentDescription
	requires
		objectClass,
		cn
	allows
		labeledURL,
		multiLineDescription,
		owner

objectclass labeledURLObject
	requires
		objectClass
	allows
		labeledURL

objectclass cacheObject
	requires
		objectClass
	allows
		ttl
============================================================================
Anthony W. Brock                               Directory of Network Services
abrock@georgefox.edu                                  George Fox Univerisity
----------------------------------------------------------------------------