Re: Ok, I'll show my ignorance...please help...?

["Trever Furnish" <trever@monster.com>]

Thanks!  That was going to be my next question.  Instead, how about this one:
Does anyone have a working slapd.conf for openldap 1.2?  Mine (doesn't seem to
work) is below.

If I do ldapsearch 'cn=*', I get a referral on the server and "DSA is
unwilling to perform" at the client.  If I do ldapsearch -b 'dc=Monster,
dc=com' 'cn=*', I get "No such object" at the client and the following on the
server (debug level 5):
do_bind
do_bind: version 2 dn () method 128
send_ldap_result 0::
do_search
SRCH "DC=MONSTER,DC=COM" 2 0    0 0 0
    filter: (cn=*)
    attrs:
=> ldbm_back_search
using base "DC=MONSTER,DC=COM"
subtree_candidates: base: "DC=MONSTER,DC=COM" lookupbase
dn2entry_r: dn: "DC=MONSTER,DC=COM"
=> dn2id( "DC=MONSTER,DC=COM" )
=> ldbm_cache_open( "/usr/tmp/dn2id.dbb", 66, 600 )
ldbm_cache_open (blksize 4096) (maxids 1022) (maxindirect 4)
<= ldbm_cache_open (opened 0)
<= dn2id NOID
send_ldap_result 32::
do_unbind

If I try to add an entry per the man page for ldapadd, I get:
adding new entry cn=Trever Furnish, o=Monster.com, c=US
ldap_add: DSA is unavailable
ldap_add: additional info: Can't chase referral

My ldap.conf file is below.  The manual page doesn't seem to apply to it:
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /usr/local/etc/openldap/slapd.at.conf
include         /usr/local/etc/openldap/slapd.oc.conf
schemacheck     off
referral        ldap://ldap.itd.umich.edu
DEREF never

pidfile         /usr/local/var/slapd.pid
argsfile        /usr/local/var/slapd.args

#######################################################################
# ldbm database definitions
#######################################################################

database        ldbm
suffix          "dc=monster, dc=com"
##suffix                "dc=your-domain, dc=com"
#suffix         "o=Your Organization Name, c=US"
directory       /usr/tmp
rootdn          "cn=root, dc=monster, dc=com"
##rootdn                "cn=root, dc=your-domain, dc=com"
#rootdn         "cn=root, o=Your Organization Name, c=US"
rootpw          ewwbad
# cleartext passwords, especially for the rootdn, should
# be avoid.  See slapd.conf(5) for details.





-----Original Message-----
From: Ranjan Bagchi <ranjan.bagchi@pobox.com>
To: kevin@adclabs.com <kevin@adclabs.com>; trever@monster.com
<trever@monster.com>
Cc: openldap-general@OpenLDAP.org <openldap-general@OpenLDAP.org>
Date: Tuesday, March 30, 1999 11:10 AM
Subject: RE: Ok, I'll show my ignorance...please help...?


>Actually, you can indicate multiple suffixes in your slapd.conf.
>
>Mine has:
>
>suffix ""
>suffix "o=NotTerriblyBigCorp,c=US"
>
>This works without any advanced features in Outlook.
>
>-rj
>
>[FWIW:  Your solution's actually nicer for a more scalable solution, IMHO.
>My understanding is you can design a custom Outlook deployment package which
>installs on everyone's machine with settings particular
>to your site.  But I don't know how to do that yet]
>
>> -----Original Message-----
>> From: owner-openldap-general@OpenLDAP.org
>> [mailto:owner-openldap-general@OpenLDAP.org]On Behalf Of
>> kevin@adclabs.com
>> Sent: Tuesday, April 29, 1997 7:49 PM
>> To: trever@monster.com
>> Cc: openldap-general@OpenLDAP.org
>> Subject: RE: Ok, I'll show my ignorance...please help...?
>>
>>
>>
>> It might also help to know, that after setting it up happily, I had to
>> add my suffix in the Search Base - which is under the advanced part of
>> the settings in Outlook. In my case it was "o=AdcLabs, c=US".
>>
>> Regards,
>>
>> kevin@adclabs.com
>>
>>
>