| View previous topic :: View next topic |
| Author |
Message |
tecknojunky
Veteran
Joined: 19 Oct 2002
Posts: 1937
Location: Montréal
|
 Posted: Wed Feb 18, 2004 5:19 am Post subject: openldap 2.1.26: Stuck after update. |
 |
|
I've been at this all day and I got to let go for the time being or I'll break something.
I can't resolv pass this | Code: | # ldapadd -x -D "cn=root,dc=inet" -W -f base.ldif
Enter LDAP Password:
adding new entry "dc=inet"
ldapadd: update failed: dc=inet
ldap_add: Internal (implementation specific) error (80) |
It's basicaly the same setup then when on 2.0.??.
Is 2.1.26 stable or not?
_________________
(7 of 9) Installing star-trek/species-8.4.7.2::talax. |
|
| Back to top |
|
 |
tecknojunky
Veteran
Joined: 19 Oct 2002
Posts: 1937
Location: Montréal
|
| Posted: Wed Feb 18, 2004 6:18 pm Post subject: |
|
|
Never mind.
chown ldap:ldap /var/lib/openldap-ldbm /var/lib/openldap-data /var/lib/openldap-slurp
...fixed it. How it was before and the how and the when, I have no clue. Suffice it to say that upgrading openldap cost my one working day. The boss is not too happy with how Gentoo handled the upgrade.
_________________
(7 of 9) Installing star-trek/species-8.4.7.2::talax. |
|
| Back to top |
|
|
turtlendog
Tux's lil' helper
Joined: 31 Jan 2004
Posts: 107
Location: East AZ
|
| Posted: Wed Feb 18, 2004 7:59 pm Post subject: |
|
|
| Quote: | | Suffice it to say that upgrading openldap cost my one working day. The boss is not too happy with how Gentoo handled the upgrade |
I hear that. I like Gentoo in some ways, but I have never seen such a painful update. I had a similar problem with my permissions (gid changed on slapd.conf) and got that sorted out but I still am having problems migrating.
Here's my ldif
| Code: | dn: dc=sheepcamp,dc=com
objectclass: dcObject
objectclass: organization
o: Sheepcamp Internet Services
dc: sheepcamp
dn: cn=root,dc=sheepcamp,dc=com
objectclass: organizationalRole
cn: root
dn: cn=bdug,dc=sheepcamp,dc=com
objectClass: organizationalRole
cn: bdug
description: Non-Root LDAP Administrator
dn: ou=personal,dc=sheepcamp,dc=com
o: Sheepcamp Internet Services
ou: personal
objectClass: top
objectClass: organization
objectClass: organizationalUnit
description: Personal Address Book |
And the output of ldapadd
| Code: | ldap_initialize( <DEFAULT> )
add objectclass:
dcObject
organization
add o:
Sheepcamp Internet Services
add dc:
sheepcamp
adding new entry "dc=sheepcamp,dc=com"
modify complete
add objectclass:
organizationalRole
add cn:
root
adding new entry "cn=root,dc=sheepcamp,dc=com"
modify complete
add objectClass:
organizationalRole
top
organization
organizationalUnit
add cn:
bdug
add description:
Non-Root LDAP Administrator
Personal Address Book
add dn:
ou=personal,dc=sheepcamp,dc=com
add o:
Sheepcamp Internet Services
add ou:
personal
adding new entry "cn=bdug,dc=sheepcamp,dc=com"
ldapadd: update failed: cn=bdug,dc=sheepcamp,dc=com
ldap_add: Undefined attribute type (17)
additional info: dn: attribute type undefined
|
I hadn't changed it from the previous working version, but I must have changed it a dozen times by now.
Thoughts? |
|
| Back to top |
|
|
turtlendog
Tux's lil' helper
Joined: 31 Jan 2004
Posts: 107
Location: East AZ
|
| Posted: Thu Feb 19, 2004 5:57 am Post subject: ldapadd solved |
|
|
Here is the ldif that finally allowed me to add my address book.
| Code: | dn: dc=sheepcamp,dc=com
objectclass: dcObject
objectclass: organization
o: Sheepcamp Internet Services
dc: sheepcamp
dn: cn=root,dc=sheepcamp,dc=com
objectclass: organizationalRole
cn: root
dn: ou=personal,dc=sheepcamp,dc=com
objectClass: top
objectClass: organizationalUnit
ou: personal
description: Personal Address Book |
I can't say that I know why it didn't like my non-root administrator, but it was the o: attribute that caused it to bail out of my organizational unit. |
|
| Back to top |
|
|
tecknojunky
Veteran
Joined: 19 Oct 2002
Posts: 1937
Location: Montréal
|
| Posted: Thu Feb 19, 2004 2:42 pm Post subject: |
|
|
I manage to get it working again too. What's the pain with LDAP is that there are no good interface for it. While fudging with it, it made me feel like using a 1970 vt52 terminal and grow my hair.
Oh yeah, there's GQ, but i find it rather primitive. You might want to take a look at directoryadministrator, but it only manages users/groups.
You might want to check if sshd still works. Mine's now broken and only root (non ldap) can ssh in.
_________________
(7 of 9) Installing star-trek/species-8.4.7.2::talax. |
|
| Back to top |
|
|
tecknojunky
Veteran
Joined: 19 Oct 2002
Posts: 1937
Location: Montréal
|
| Posted: Sat Feb 21, 2004 4:50 pm Post subject: |
|
|
| turtlendog wrote: | | I like Gentoo in some ways, but I have never seen such a painful update. I had a similar problem with my permissions (gid changed on slapd.conf) and got that sorted out but I still am having problems migrating |
I think you have to be braindead to permit people to blindly update this one without warning BEFORE and not after (dhu  ) that this will break your current installation (unless you provide to also convert the schemas, but I admit its a big job since it can be customized).
Anyhow, like I said, it's now working as before (I think  ), but it took a week to repair all the damages. My last hurdle was ssh authentification that was broken for some users. Took me a couple of days to trace it down to some users not having any defined shells in the ldap directory. I tought for long it was a sshd issue. For some reason, directoryadministratorcan't log the the new openldap, so i go with gq and it lets you do anything (including stupid things).
_________________
(7 of 9) Installing star-trek/species-8.4.7.2::talax. |
|
| Back to top |
|
|
ozric100
Tux's lil' helper
Joined: 23 Apr 2002
Posts: 136
|
| Posted: Fri Mar 12, 2004 12:55 am Post subject: |
|
|
This was just the kind of infromation I was looking for ... I have a SAMBA PDC with ldapsam backend. I saw the update and wondered if it was safe. Now I know.
_________________
Tyan tiger K8W, Opteron 2x246, 2x512 PC3200 OCZ, FX5900 |
|
| Back to top |
|
|
teahola
n00b
Joined: 20 Jul 2004
Posts: 16
|
| Posted: Tue Oct 11, 2005 3:21 pm Post subject: |
|
|
I am getting following error message:
ldap_add: Internal (implementation specific) error (80)
additional info: è8ª·~wη`LªÍ·
I am not sure what is actually the problem since this additional info is garbage.
I did configuration as defined in the OpenLDAP configuration guide in the Gentoo documentation. |
|
| Back to top |
|
|
|
Networking & Security
