new slapd.d configuration format and Invalid DN syntax (34)

[Samuel Tran <stran@amnh.org>]

Hi all,

I am testing OL 2.3.6 + BerkeleyDB 4.2.52 on Debian Sarge boxes.

I am a little bit confused on the new slapd.d configuration format.

I have a slapd.conf file that is working with my setup. I converted it
to the new slapd.d format using this command:

/usr/local/libexec/slapd -f /etc/openldap/slapd.conf
-F /etc/openldap/slapd.d

I re-started slapd using slapd.d:
/usr/local/libexec/slapd -d 255 -u ldap -F /etc/openldap/slapd.d -4

Here is the resulting output:

[snip]
slapd startup: initiated.
backend_startup_one: starting "cn=config"
slapd starting
daemon: added 4r
daemon: added 6r
daemon: select: listen=6 active_threads=0 tvp=NULL
daemon: activity on 1 descriptors
daemon: new connection on 7
ldap_pvt_gethostbyname_a: host=info-ldap-001, r=0
daemon: added 7r
daemon: select: listen=6 active_threads=0 tvp=NULL
daemon: activity on 1 descriptors
daemon: activity on: 7r
daemon: read activity on 7
connection_get(7)
connection_get(7): got connid=0
connection_read(7): checking for input on id=0
ber_get_next
ldap_read: want=8, got=8
  0000:  30 0c 02 01 01 60 07 02                            0....`..
ldap_read: want=6, got=6
  0000:  01 03 04 00 80 00                                  ......
ber_get_next: tag 0x30 len 12 contents:
ber_dump: buf=0x081d1248 ptr=0x081d1248 end=0x081d1254 len=12
  0000:  02 01 01 60 07 02 01 03  04 00 80 00               ...`........
ber_get_next
ldap_read: want=8 error=Resource temporarily unavailable
ber_get_next on fd 7 failed errno=11 (Resource temporarily unavailable)
daemon: select: listen=6 active_threads=0 tvp=NULL
do_bind
ber_scanf fmt ({imt) ber:
ber_dump: buf=0x081d1248 ptr=0x081d124b end=0x081d1254 len=9
  0000:  60 07 02 01 03 04 00 80  00                        `........
ber_scanf fmt (m}) ber:
ber_dump: buf=0x081d1248 ptr=0x081d1252 end=0x081d1254 len=2
  0000:  00 00                                              ..
>>> dnPrettyNormal: <>
<<< dnPrettyNormal: <>, <>
do_bind: version=3 dn="" method=128
send_ldap_result: conn=0 op=0 p=3
send_ldap_result: err=0 matched="" text=""
send_ldap_response: msgid=1 tag=97 err=0
ber_flush: 14 bytes to sd 7
  0000:  30 0c 02 01 01 61 07 0a  01 00 04 00 04 00
0....a........
ldap_write: want=14, written=14
  0000:  30 0c 02 01 01 61 07 0a  01 00 04 00 04 00
0....a........
daemon: activity on 1 descriptors
daemon: activity on: 7r
daemon: read activity on 7
connection_get(7)
connection_get(7): got connid=0
connection_read(7): checking for input on id=0
ber_get_next
ldap_read: want=8, got=8
  0000:  30 33 02 01 02 63 2e 04                            03...c..
ldap_read: want=45, got=45
  0000:  0e 64 63 3d 61 6d 6e 68  2c 64 63 3d 6f 72 67
0a   .dc=amnh,dc=org.
  0010:  01 02 0a 01 00 02 01 00  02 01 00 01 01 00 87
0b   ................
  0020:  6f 62 6a 65 63 74 63 6c  61 73 73 30 00
objectclass0.
ber_get_next: tag 0x30 len 51 contents:
ber_dump: buf=0x081d08f0 ptr=0x081d08f0 end=0x081d0923 len=51
  0000:  02 01 02 63 2e 04 0e 64  63 3d 61 6d 6e 68 2c
64   ...c...dc=amnh,d
  0010:  63 3d 6f 72 67 0a 01 02  0a 01 00 02 01 00 02 01
c=org...........
  0020:  00 01 01 00 87 0b 6f 62  6a 65 63 74 63 6c 61
73   ......objectclas
  0030:  73 30 00                                           s0.
connection_input: conn=0 deferring operation: binding
daemon: select: listen=6 active_threads=0 tvp=NULL
do_bind: v3 anonymous bind
do_search
ber_scanf fmt ({miiiib) ber:
ber_dump: buf=0x081d08f0 ptr=0x081d08f3 end=0x081d0923 len=48
  0000:  63 2e 04 0e 64 63 3d 61  6d 6e 68 2c 64 63 3d 6f
c...dc=amnh,dc=o
  0010:  72 67 0a 01 02 0a 01 00  02 01 00 02 01 00 01 01
rg..............
  0020:  00 87 0b 6f 62 6a 65 63  74 63 6c 61 73 73 30
00   ...objectclass0.
>>> dnPrettyNormal: <dc=example,dc=com>
=> ldap_bv2dn(dc=example,dc=com,0)
ldap_err2string
<= ldap_bv2dn(dc=example,dc=com)=0 Success
do_search: invalid dn (dc=example,dc=com)
send_ldap_result: conn=0 op=1 p=3
send_ldap_result: err=34 matched="" text="invalid DN"
send_ldap_response: msgid=2 tag=101 err=34
ber_flush: 24 bytes to sd 7
  0000:  30 16 02 01 02 65 11 0a  01 22 04 00 04 0a 69 6e
0....e..."....in
  0010:  76 61 6c 69 64 20 44 4e                            valid DN
ldap_write: want=24, written=24
  0000:  30 16 02 01 02 65 11 0a  01 22 04 00 04 0a 69 6e
0....e..."....in
  0010:  76 61 6c 69 64 20 44 4e                            valid DN
daemon: activity on 1 descriptors
daemon: activity on: 7r
daemon: read activity on 7
connection_get(7)
connection_get(7): got connid=0
connection_read(7): checking for input on id=0
ber_get_next
ldap_read: want=8, got=7
  0000:  30 05 02 01 03 42 00                               0....B.
ber_get_next: tag 0x30 len 5 contents:
ber_dump: buf=0x081d1248 ptr=0x081d1248 end=0x081d124d len=5
  0000:  02 01 03 42 00                                     ...B.
ber_get_next
ldap_read: want=8, got=0
ber_get_next on fd 7 failed errno=0 (Success)
connection_read(7): input error=-2 id=0, closing.
connection_closing: readying conn=0 sd=7 for close
connection_close: deferring conn=0 sd=7
daemon: select: listen=6 active_threads=0 tvp=NULL
daemon: activity on 1 descriptors
daemon: select: listen=6 active_threads=0 tvp=NULL
connection_resched: attempting closing conn=0 sd=7
connection_close: deferring conn=0 sd=7
do_unbind
connection_resched: attempting closing conn=0 sd=7
connection_close: conn=0 sd=7
daemon: removing 7

I can see an Invalid DN syntax error.

Obviously when I try to do a simple ldapsearch I get:
Invalid DN syntax (34)
Additional information: invalid DN

Any idea on what's going on?

I would appreciate any help.

Thanks.
Sam