[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: "Upgrading from 2.3.x" section in Changes Appendix for Admin Guide

Gavin Henry wrote:
Next one:

[root@suretec openldap]# slaptest
monitor_back_register_entry_attrs(""): base="cn=databases,cn=monitor"
unable to find entry

backend_startup_one: bi_db_open failed! (1)
slap_startup failed (test would succeed using the -u switch)

Pretty sure you reported this in an ITS a while back. The monitor DB defaults to no anonymous read access. You need to define a rootDN for the monitor DB so that the registration functions can actually see the tree. (The registration ops try to run as the rootDN, but if none is set, that means a zero-length DN, i.e. anonymous.)

I think this is a flaw in the design of these registration ops in back-monitor, they shouldn't depend on an actual Search operation to get their work done. The monitor code ought to be able to directly locate the entry corresponding to a given BackendDB pointer, and whatever lookup should not require filter or ACL evaluation.
-- Howard Chu
Chief Architect, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/