Re: getting started cn=config troubles.

[Eric Irrgang <erici@motown.cc.utexas.edu>]

Oh, wait.  That's no good.  I should have read closer.

Don't try to hand-build the files in slapd.d from scratch.  The -F option
needs to point at an LDIF backend which is an OpenLDAP construct.  You
can't just point slapd at an LDIF file.

There are two easy ways to build the files for cn=config.

1) Use both the '-f' flag to point at the classical slapd.conf type file
and the '-F' flag to specify where you want cn=config constructed.

2) Load the ldif file with your config info into the cn=config backend
with 'slapadd -n0 -l config.ldif' or whatever you've called it.

Note that (2) is broken in OL 2.3.21.  I don't know about 2.3.17.  I
haven't gotten to try it yet, but I assume you also have to specify '-F'
when you run slapadd if you want the cn=config directory built in a
non-default location.

On Fri, 28 Apr 2006, Eric Irrgang wrote:

>If you're using the new cn=config directory, then you should change your
>command line to
>/libexec/slapd -d -1 -F /etc/openldap/slapd.d -u ldap
>
>Note the capital F and the higher level path.
>
>On Fri, 28 Apr 2006, Cath Hoe wrote:
>
>>Hi list,
>>
>>After reading Sysadmin 2.3 I'm getting nowhere with the new cn=config.ldif.
>>Making some minor changes to the ldif example in
>>http://www.openldap.org/doc/admin23/guide.html#Configuration%20Example
>>
>>openldap-2.3.17
>>
>>/libexec/slapd -d -1 -f /etc/openldap/slapd.d/cn\=config -u ldap
>>
>>Cannot google this error:
>>--------------------log--------------------------
>>reading config file /etc/openldap/slapd.d/cn=config.ldif
>>line 4 (dn: cn=config)
>>/etc/openldap/slapd.d/cn=config.ldif: line 4: unknown directive <dn:>
>>outside backend info and database definitions (ignored).
>>line 5 (objectClass: olcGlobal)
>>/etc/openldap/slapd.d/cn=config.ldif: line 5: unknown directive
>><objectClass:> outside backend info and database definitions (ignored).
>>line 6 (cn: config)
>>/etc/openldap/slapd.d/cn=config.ldif: line 6: unknown directive <cn:>
>>outside backend info and database definitions (ignored).
>>line 7 (olcIdleTimeout: 3600)
>>/etc/openldap/slapd.d/cn=config.ldif: line 7: unknown directive
>><olcIdleTimeout:> outside backend info and database definitions (ignored).
>>line 8 (olcLogLevel: 192)
>>/etc/openldap/slapd.d/cn=config.ldif: line 8: unknown directive
>><olcLogLevel:> outside backend info and database definitions (ignored).
>>line 19 (schema definitions)
>>------------end log--------------------
>>ldif
>>dn: cn=config  #this is line 4
>>objectClass: olcGlobal
>>cn: config
>>olcIdleTimeout: 3600
>>olcLogLevel: 192
>>
>>schema definitions
>>dn: cn=schema,cn=config
>>objectClass: olcSchemaConfig
>>cn: schema
>>
>>include: file:///usr/share/openldap/schema/core.ldif
>>include: file:///usr/share/openldap/schema/openldap.ldif
>>
>># DATABASE
>>dn: olcDatabase=frontend,cn=config
>>objectClass: olcDatabaseConfig
>>olcDatabase: frontend
>>olcAccess: to * by * read
>>
>>dn: olcDatabase=bdb,cn=config
>>objectClass: olcDatabaseConfig
>>objectClass: olcBdbConfig
>>olcDatabase: bdb
>>olcSuffix: dc=test
>>olcRootDN: cn=Manager,dc=test
>>olcRootPW: password
>>olcSizeLimit: 5000
>>olcTimeLimit: 3600
>>olcDbDirectory: /var/lib/ldap/test
>>olcDbCachesize: 512
>>olcDbCheckpoint: 254 5
>>olcDbConfig: set_cachesize 0 10485760 0
>>olcDbConfig: set_lg_bsize 2097512
>>olcDbConfig: set_lg_dir /var/tmp/bdb-log
>>olcDbConfig: set_flags DB_LOG_AUTOREMOVE
>>olcDbNosync: FALSE
>>olcDbIDLcacheSize: 3000
>>olcDbIndex: objectClass eq
>>olcDbIndex: uid pres,eq
>>
>>olcAccess: to * by * read
>>
>>_________________________________________________________________
>>Check out the latest video  @  http://xtra.co.nz/streaming
>>
>
>--
>Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342
>

-- 
Eric Irrgang - UT Austin ITS Unix Systems - (512)475-9342