[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Antw: Upgrading from 2.4.26 to 2.4.41: Stricter checks prevent startup?



On 10/25/18 2:12 PM, Ulrich Windl wrote:
> For issue 2):
> 
>  # slapcat -n0 -F /etc/openldap/slapd.d -l /tmp/0.ldif
> 5bd1a671 UNKNOWN attributeDescription "OLCACCESSLOGDB" inserted.
> 5bd1a671 UNKNOWN attributeDescription "OLCACCESSLOGOPS" inserted.
> 5bd1a671 UNKNOWN attributeDescription "OLCACCESSLOGPURGE" inserted.
> 5bd1a671 UNKNOWN attributeDescription "OLCACCESSLOGSUCCESS" inserted.
> 5bd1a671 UNKNOWN attributeDescription "OLCACCESSLOGOLD" inserted.
> 5bd1a671 config error processing
> olcOverlay={1}accesslog,olcDatabase={0}config,cn=config:
> slapcat: bad configuration directory!

I suspect slapo-accesslog is not loaded.

Please compare the output of '/usr/sbin/slapd -VVV' of both
installations. The command lists statically linked modules.

> Vermutlich ist das Modul in SLES12 SP4 nicht mehr enthalten! Ich habe auch
> kein entsprechendes Modul zum Nachinstallieren gefunden.

slapo-accesslog is probably not statically linked anymore but is likely
dynamically loadable.

On my system (openSUSE Tumbleweed):

$ rpm -ql openldap2|grep accesslog
/usr/lib64/openldap/accesslog-2.4.so.2
/usr/lib64/openldap/accesslog-2.4.so.2.10.9
/usr/lib64/openldap/accesslog.la
/usr/lib64/openldap/accesslog.so
/usr/share/man/man5/slapo-accesslog.5.gz

Adding "accesslog" to attribute 'olcModuleLoad' in entry
cn=module{0},cn=config should fix that. Depending on your config this
applies to some other backend and overlay modules as well.

Ciao, Michael.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature