Re: Re: Slapd permission issues

To: openldap-technical@openldap.org
Subject: Re: Re: Slapd permission issues
From: Gary Slopsema <gslopsema@gmail.com>
Date: Sat, 28 Sep 2013 10:30:52 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:from:date:message-id:subject:to:content-type; bh=P3GSgxYB8X4KyiKjozOonWxignDK6kzIegIKfZMUAOo=; b=Zv+GYEQvsTrCaS/e+GiLezKiELuKSPjr7WI5kEoU7rVcd3nA3uFJ1GozwL3qDcSHgr H2FqQufsEW7817HVekr5EJB9OpboptaxTOgY2o1woXvKHXYQuTQWOUa00eWRwVCt6hwz 6GZ6QTMCya0NnoknCAURdf/YGZWUbPDgWWVDpD7MaJUy6zzL4SHeOTxxU8qZMlsCg/bn lj5yJQ6gRFzdtl3aTdbD3a/aCj5xBR5XzA5B1EJTWjBT0tXdB9FVZ8Z+sZaacUCXptM7 KmP0LP98Ag87a9DGRiWTpcX7oRV0wbQeEbBTctOTLmW1hx2dg9K+rVDLunGMBsFgHk9f q74w==

> I guess AppArmor is blocking you. If I'm right, dmesg(1) will show some

> audit messages that confirm it. Look at /etc/apparmor.d/usr.sbin.slapd
> for the rules it follows.

You are correct.

> You could work around AppArmor, either by copying or hard-linking
> /usr/sbin/slapd somewhere else and running it from there,

This works perfectly. Thanks very much!