Server :: Ldap Cannot Carry Slapd.conf Changes Or Did Not Use /etc/openldap/slapd.conf?
Aug 20, 2010
I am setting up LDAP server, i set slapd.conf(dc=proldap,dc=com) and start ldap it is OK but when i check using ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts result is : namingContexts: dc=my-domain,dc=com
it seems that it did not use my slapd.conf so i tried removing my slapd.conf from /etc/openldap and start slapd again and it did start with no errors. and when i do ldapsearch again still uses dc=my-domain,dc=com
I tried searching about this in google and found no answers,
my reference in setting up ldap is the link below. but it seemed that it always uses another configuration not the one i modified
I'm using Fedora12, ldap version 2.4.19. i installed ldap by yum install url
Slapd is up and running perfectly well, and I can add and remove entries without a problem. My OS is the Ubuntu based Mint.
So I was hoping for someone to give me a nudge in the right direction for doing this without a slapd.conf file, or directions for how to force slapd to pay attention to a slapd.conf file whose location I specify.
I've tried messing around with /etc/ldap/ldap.conf to no avail, I've tried just putting in a custom slapd.conf file but slapd doesn't pay attention to it.
And to the best of my knowledge I can't find anything written on this specific topic. I can find plenty on slapd.conf's, but that's just taunting me considering I don't even have it on my system.
I try to setup OpenLDAP on Debian Squeeze.But it seems the documentation I found is differed than the installation.
Normally I would expect /etc/ldap/slapd.conf as also mentioned at url.However this file does not exists and I got the feeling Debian changes a lot with the default (bit poor if you asked me).Seems they created a LDAP database and put the config in there, correct me if I am wrong?A folder /etc/ldap/slapd.d is created with some config inside. And also a /etc/ldap/ldap.conf does exist.
Is there any documentation on this, and what if I would like to have a flat config in /etc/ldap/slapd.conf?
If I do something to the effect of this:ldapsearch -b "dc=example,dc=com" -x -z 3000
I'll get this back at the end of the result set: # search result search: 2 result: 4 Size limit exceeded
The thing is is that I have way more (thousands) than what's being displayed here. And I've tried to mess around with /etc/ldap.conf, changing the SIZELIMIT directive to something else, 10000, let's say, and restarting the server, but the same goddamn thing happens.
I've been messing around with this for quite some time now, hopefully someone will be able to shed some light on this so that I can learn my way out of this mess that is LDAP. Also in a related matter, I'm running Mint (based off of Ubuntu), and all the documentation that I've seen (probably read a good 100+ pages in a few days now on this) keeps telling me to make changes to my slapd.conf file. What slapd.conf file? It doesn't exist, I can't find it at least. find / -name slapd.conf turns up nothing.
I am trying to setup LDAP server on Ubuntu 10.04 and am sticking to the old /etc/ldap/slapd.conf file configuration.
I had to comment ldapi:/// from /etc/default/slapd since it was giving 'Address already in use error'. Also had to juggle with pid directory and file issues
After that I was able to start the slapd daemon (service slapd start) but now I am running into multiple issues:
1. Can't stop the service with service slapd stop
Code: ## Service stop returns 0, maybe because start-stop-daemon is not giving error #service slapd stop Stopping OpenLDAP: slapd. # echo $? 0
Will switching to BDB database resolve this ?Also can't I slapcat at non-root user ??
I was trying to run openldap in /usr/local/libexec on ./slapd command.
As usual, it doesn't respond anything which is normal (side qns: can anyone tell me why ./slapd doesn't even return me a status message?)
Then I went on to check ps -ef | grep slapd, but found that the ./slapd was not in process at all (means its not running). If it ran successfully, it should be in my process.
I am using Fedora12. I installed the following packages: openldap-servers-2.4.19-1.fc12.x86_64 openldap-clients-2.4.19-1.fc12.x86_64 openldap-2.4.19-1.fc12.x86_64 db4-4.7.25-13.fc12.x86_64
I have slapd-server running but it seems to refuse connections in a very odd way. Wireshark shows that everytime JavaEE-client tries to connect, only 2 packages are sent. As I understand, in tcp/ip protocol, the first is just "hello, who's there". The last is just a message consisting of ACK and RST. I think RST means "we're done". At this point I don't think any credentials are checked so I don't know what could be wrong
can anyone tell me what is the difference between these two files of LDAP client /etc/ldap.conf and /etc/ldap/ldap.conf and for what purposes these two files gives services. Is it necessary to have these two files at a time ?
I use these files to install LDAP client to authenticate with our LDAP server by creating a symbolic link of /etc/ldap.conf to /etc/ldap/ldap.conf.
I have LDAP authentication working via SSSD using authconfig-tui and a few minor modifications to sssd.conf (ie: max_id etc). The problem I am having is it would appear /etc/ldap.conf is being ignored and/or setups that work perfectly on RHEL5, F11 and F12 no longer work on F13. Specifically Im referring to "pam_check_host_attr" and "nss_map_attribute". It refuses to honor either of these options and I can only assume a number of the other options in our ldap.conf. For instance, "nss_map_attribute" is defaulting to the standard "homeDirectory" rather than "homeDirectoryLinux". This is related to a bunch of OSX clients we have and its not optional to use another setup. The host restriction is also a major issue.
I had a machine that is using ldap, but need to remove it completely.I edited the /etc/nsswitch.conf and removed all references of ldapand renamed /etc/ldap.conf to /etc/ldap.conf.bakI can log in as root, but cannot log in as any user in /etc/passwdIn the /var/log it shows pam_ldap: missing file "/etc/ldap.conf"I am guessing I am missing something else?I never set this machine up for ldap, was here when i got here, so not sure of steps to even put ldap on.
I've been scanning the apache2 docs for the past few days and have not come up with an answer my following issue:
In my httpd.conf file, at the very end, I have the line
Include conf/vhosts/vhost_*.conf
However, when I run apache checkconfig or try to start apache, it gives me the error:
httpd: Syntax error on line 993 of /etc/httpd/conf/httpd.conf: Could not open configuration file /etc/httpd/conf/vhosts/vhost_1.conf: Permission denied
It appears as if the Include line is correct - in terms of it grabbing the first virtual host conf file. However, I'm confused on the permissions. the /etc/httpd folder is owned by root:root, as are the subfolders. As a test, I chown'd the conf/vhost folder combination and all the vhost files to apache:apache to see if that made a difference, and it appeared to make no difference at all. The log files don't contain anything (assumed because apache isn't starting). If I place the contents of the vhosts in a singular vhosts.conf it works - with the permissions set to root:root. I'd like to avoid having to use one vhosts conf for the configuration I'm trying to achieve - as it would make my life a lot easier.
Just installed openldap server on a VM CentOS called 'ldapsrv', it works fine, ldapsearch returns all ldap information.
Installed openldap client on another VM CentOS called 'ldapclient1', configured it with most basic configuration, no ssl/tls etc. but ldapsearch returns error:
I'd like to clear the slapd DB so that I could reinstall it from scratch, however, when I remove the package and reinstall it, I still get some items in there.How can I purge/flush/remove everything from slapd?Instructions I follow to do the set up?https://help.ubuntu.com/10.04/server...ap-server.html
I am unable to find any ldap.conf parameter or pam.d/system-auth setting from where i can restrict the LDAP users having uidNumber less than a particular number, say 500 to login into the system.I am using OpenLDAP server and tried pam_max_uid 500 in ldap.conf but it didn't work.
phpmyadmin files are in usr/share/phpmyadmin but i cant find anything in my apache2.conf or httpd.conf files that point to that directory.How do I find the route taken from the Server root "ServerRoot "/etc/apache2"" to the phpmy admin files.
I have used nVidia my entire linux life (about 5 years clean and sober from M$). Recently, I have switched over to an ATI Radeon HD 5550 card. After many trial and error setups, I finally got the resolutions and screens set properly with a xrandr command, which I have now added to a shell script in ~/.kde4/Autostart. It has worked for me for a while now, but I really would like to get it set in the xorg.conf.d files so that I don't have to wait that extra few seconds after login for the screens to fix themselves.
Is there an easy way to take what xrandr does and export it to the xorg.conf.d files? If my video card recognizes my default monitor as DFP2 and the tv that I only sometimes use with this computer as DFP1, how can I ensure that the login screen for openSUSE/KDE4 appears on my default screen (an issue that drove me nuts a few months ago when I tried Ubuntu to see what all the fuss was about)?
I am using the proprietary Radeon driver from the ioda repository. DFP2 is a monitor which has a optimum resolution of 1920x1200, and DFP1 is an 1080p HDTV. I can not reverse the output plugs for the screens even though my monitor is an HDMI monitor because I use the actual HDMI port on the video card to output audio to the television and the other plug is a DVI that I convert to HDMI for the monitor.
I'm trying to set up samba. I am editing the smb.conf.master file, and then using the testparm -s "smb.conf.master > smb.conf" command to make the smb.conf file. I am running this command as root. However, the smb.conf is not updating with the changes I am making. Does anyone know why? It just stays the same no matter what I change. The only way to change it is to edit the smb.conf file itself.
I've just done a fresh install of Lubuntu 10.10 on an older Sony Vaio laptop. Having learned the hard way about editing xorg files, I wanted to create a backup of the xorg.conf file so that I dont have to do another install when I screw everything up. In a terminal, I typed
I have installed Kubuntu 8.04.2 on a USB stick with persistence to keep any changes I make after a reboot and it works fine. I then installed the 185 Nvidia driver to give me higher resolutions and it works fine.
But each time I reboot, my updated xorg.conf is replaced with the default xorg.conf that ships with that version of Kubuntu and a backup is made of my updated xorg.conf (the correct one) which looks like xorg.conf.20100409135913. I have to put the backup xorg.conf back in place to get my Nvidia driver to work with the correct screen resolutions again. Otherwise my screen resolution is too low.
What could be causing this behavor? I'm sure it not the persistence feature of the USB stick failing since a backup is made of my original xorg.conf.
I might add more information. The xorg.conf that gets changed after a reboot says "This file was generated by dexconf, the Debian X Configuration tool, using # values from the debconf database." #
1. What is the difference between files (xorg.conf and xorg.conf-vesa)
2. No matter how hard I try I can't change keyboard layout in xorg.conf-vesa (I change it in file ) but there is no actually anything changing, it starts to get annoying - for example - below goes my xorg.conf-vesa, if I uncomment and set line from
I am looking for ideas for getting windows users into an ldap server. I am currently running a Linux server for my department and need to create an LDAP server which mirrors the username/password information for all of us as they are stored in the windows server here. I have the openldap server up and running on Ubuntu 8.04 and it works great; I now need to find some way to import user info into this from windows. I've seen discussions of using ldifde.exe to export the AD users into an ldif file. Is this the simplest way to go about it?
Our Linux server is currently providing us with much needed services using apache, and apache is authenticating using LDAP to our windows server (Using our windows username / password is required functionality). This windows server has some problem which causes it to delay for inordinate amounts of time between authentication requests and responses. The situation is such that this problem will not be addressed by IT staff. However, I have control over the Linux server so I am looking to just mirror the windows server on an LDAP server of my own. I could get away with updating the passwords in the Linux server.
I've read the how-tos (thank you oldcpu!) and wikis about how xorg.conf take precedence over the section configuration files in etc/X11/xorg.conf.d/, if it exist. I also understand that the xorg.conf can be partial. If it is missing some sections, these will be taken from the corresponding xorg.conf.d section config file. Currently I'm using a xorg.conf generated by nvidia-settings in one of my home machines, due to a dual-monitor setup. After generating xorg.conf, the device sections are:
My question is if the Option "UseCompositeWrapper" "True" will be used or not. In other words, if a section exist in xorg.conf then it's correspondent in xorg.conf.d/ will be completely ignored *or* only the lines in xorg.conf.d/ that already exist in xorg.conf will be ignored?
I'm running the ubuntu based Green OS and cant get my video card properly configured. i've already gone through the forums to figure out what i need to do to get my ATI card working but my system wont let me access the xorg.conf file. i can see it using the the GOS file editor but it wont let me save the modifications. when i attempt to edit from a terminal window with su privelages it tells me that /etc/x11/xorg.conf does not exist. i've even tried booting into recovery mode and using the root instead of the sudo command. nothing i've tried will let me open the file.
I'll preface this by saying i'm by no means an expert on Linux. A competant beginner at most.We have a dedicated server, the 'resolv.conf' was changed, specifically the domain that was listed (this is the primary domain).I only became aware of this change, when we get into work on Friday and all our sites were down - I attributed this to DNS fault as if I changed my host file (I work on a windows machine) and specifically routed to the domains to the correct IP address, the websites were served fine.I tracked down the resolv.conf change by quizzing a collegue. I then switched the resolv.conf file back to it's original state - luckily a backup was made so I am 100% sure that the current resolv.conf is the correct one.
change was made Friday morning, around 9.30am (UK time). It is now 5.05pm (UK time). The original change was made sometime on Weds afternoon, and the sites stopped serving between Thursday night and Friday morning.Does anyone have any idea how long it should take for the fix to be picked up? Will it be picked up? I just started to think that the change can't be picked up due to some DNS related voodoo.
