Re: slapd access to private key owned by root

2023-03-05 Thread Andy Smith
Hello, On Sun, Mar 05, 2023 at 09:08:57AM +0800, jeremy ardley wrote: > The problem is when I try and configure private keys for ldap TLS the > permissions are checked and if it's not owned by openldap and permissions > 400 or 600 the configuration fails. > > Is there a known solution to this pro

slapd access to private key owned by root

2023-03-04 Thread jeremy ardley
I think the problem is probably unsolvable but I thought I'd ask. I understand slapd starts as user root and reads config etc and then changes to user openldap This means that it could potentially read a private key owned by root during startup? The problem is when I try and conf

slapd/gnutls CRL issue

2015-04-19 Thread Dark Victorian Spirit
Hi, I'm trying to get

Re: change slapd during debian install

2013-12-19 Thread Steve McIntyre
On Thu, Dec 19, 2013 at 08:22:39AM -0200, paulo bruck wrote: >Hi Guys > >Is it possible to change slapd during debian install? I have done a lot of >pachages wich depends on some changes at ldap and all this pachakes depends >on this changes... > >Please let me know if I askin

Re: change slapd during debian instalation

2013-12-18 Thread Cyril Brulebois
Hi, paulo bruck (2013-12-18): > Is it possible to change slapd during debian install? I have done a lot of > pachages wich depends on some changes at ldap and all this pachakes depends > on this changes... > > Please let me know if I asking at the correct list. I'm no

Preseed slapd package rootpw

2013-11-14 Thread ML mail
Hello, I would like to install the slapd package using a response file with puppet in order to configure openldap non-interactively. I managed to setup some parameters but I am a bit confused about how to configure the OpenLDAP rootpw (the root password for openldap access) parameter. using

SLAPd upgrade woes

2011-05-30 Thread ray klassen
I recently upgraded to squeeze and found that the slapd configuration had been completely revamped. I was authenticating against a locally replicated copy of my directory behind a firewall. I was using anonymous binding for my own purposes and I want to continue using it that way. I don&#

[OT] Slapd TLS on Squeeze

2011-05-18 Thread David Dumortier
Hi everybody, I try to setup a slapd with TLS. I generated a self-signed certificate with these options : certtool --generate-privkey --outfile /etc/ldap/ssl/mykey.key certtool --generate-request --load-privkey /etc/ldap/ssl/mykey.key --outfile /etc/ldap/ssl/mycsr.csr Basic

Re: slapd stopped working...

2010-07-16 Thread Troy Telford
On Jul 16, 2010, at 12:39 PM, Troy Telford wrote: > I'm running sid; there was a couple of recent updates to slapd, from 2.4.21-1 > to 2.4.23-1 (and then 2.4.23-2) > > The config itself wasn't changed; the backup file made is the same as the > current one. > &g

slapd stopped working...

2010-07-16 Thread Troy Telford
I'm running sid; there was a couple of recent updates to slapd, from 2.4.21-1 to 2.4.23-1 (and then 2.4.23-2) The config itself wasn't changed; the backup file made is the same as the current one. However, slapd doesn't start anymore. All I have to go on is the following: (/v

Re: slapd + TLS Problem.

2009-06-14 Thread Maria McKinley
Alessandro Baggi wrote: Hi there. I've problem setting up SLAPD + TLS and libnss-ldap. When I try to get the passwd entry with getent passwd I get the following error: TLS: can't accept: A record packet with illegal version was received.. connection_read(13): TLS accept failure e

slapd + TLS Problem.

2009-06-14 Thread Alessandro Baggi
Hi there. I've problem setting up SLAPD + TLS and libnss-ldap. When I try to get the passwd entry with getent passwd I get the following error: TLS: can't accept: A record packet with illegal version was received.. connection_read(13): TLS accept failure error=-1 id=18, closing

Re: slapd

2009-05-25 Thread Frank Lin PIAT
Hi, On Mon, 2009-05-25 at 08:55 -0300, Márcio Luciano Donada wrote: > I am using a server with debian lenny slapd (OpenLDAP 2.4.11) but when > I start the process he never opens sub processes for the parent > process of slapd, a single process is created. Is there a setting for > th

slapd

2009-05-25 Thread Márcio Luciano Donada
Hi, I am using a server with debian lenny slapd (OpenLDAP 2.4.11) but when I start the process he never opens sub processes for the parent process of slapd, a single process is created. Is there a setting for this? In / etc / ldap / slapd.conf I have the following entries tool-threads 16 threads

Re: slapd: SASL/EXTERNAL not supported?

2008-12-13 Thread Alex Samad
On Sat, Dec 13, 2008 at 12:28:46PM +0100, Hanspeter Kunz wrote: > Hi, > > I have a working LDAP-installation (slapd from etch) using simple-bind > over TLS. > > when I try to connect with e.g. > > ldapsearch -ZZ -Y EXTERNAL uid=hkunz -LLL > > I get >

slapd: SASL/EXTERNAL not supported?

2008-12-13 Thread Hanspeter Kunz
Hi, I have a working LDAP-installation (slapd from etch) using simple-bind over TLS. when I try to connect with e.g. ldapsearch -ZZ -Y EXTERNAL uid=hkunz -LLL I get SASL/EXTERNAL authentication started ldap_sasl_interactive_bind_s: Unknown authentication method (-6) additional

replacing simple auth in slapd with saslauthd

2007-09-23 Thread Henning Follmann
Hello, I try to replace simple auth in slapd with saslauthd. So far everything is in place and works as expected. I installed and configured saslauthd. and a /usr/sbin/testsaslauthd -p x -u xxx works without any problems I added the ldap user to the sasl group so it can read and write to

Re: Problems with slapd not starting after upgrade

2006-06-14 Thread Clive Menzies
On (13/06/06 20:22), Juliet Kemp wrote: > I'm running testing on a Sparc box, and have just upgraded slapd to the > latest version (2.3.23), only to discover that it now won't start, at > all. The same applies to the version in unstable, & an attempt at > downgrading

Problems with slapd not starting after upgrade

2006-06-13 Thread Juliet Kemp
Hi, I'm running testing on a Sparc box, and have just upgraded slapd to the latest version (2.3.23), only to discover that it now won't start, at all. The same applies to the version in unstable, & an attempt at downgrading to stable was unproductive (although differently unp

Re: LDAP: ultrapossum-server or slapd?

2006-05-04 Thread Gezim Hoxha
On Tue, 2006-02-05 at 15:59 -0700, Kelly Clowers wrote: > I had never heard of ultrapossum before, so I had to go look it up. > Looking at its home page (http://ultrapossum.org/) it looks like it is a > layer of services on top of OpenLDAP, not a seperate server. It seems > to provide monitoring,

Re: LDAP: ultrapossum-server or slapd?

2006-05-02 Thread Kelly Clowers
the storage system (is that term correct?). However, the problem is choice (darned choice :)) because in the repos there is the slapd and ultrapossum-server. They both seem to do the same job. So, my question is, which one is better, what are the differences between slapd and ultrapossum-server?

LDAP: ultrapossum-server or slapd?

2006-05-02 Thread Gezim Hoxha
em is choice (darned choice :)) because in the repos there is the slapd and ultrapossum-server. They both seem to do the same job. So, my question is, which one is better, what are the differences between slapd and ultrapossum-server? Thanks alot. -Gezim -- To UNSUBSCRIBE, email to [EMAIL PROT

slapd + gnutls clients (exim4, libnss-ldap) (Bug #325971)

2005-10-03 Thread Daniel Hermann
Hi, We run Debian Sarge on our institutes ldap server and our clients and have problems with slapd + applications using libgnutls11. See the bug report #325971 (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325971). I posted this bug 1 month ago but, until now, got no response. It would be

slapd dpkg pre-installation script fails

2005-06-16 Thread Frederik Himpe
I'm trying to install slapd, but I get this errors: # apt-get install slapd Reading Package Lists... Done Building Dependency Tree... Done The following NEW packages will be installed: slapd 0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded. Need to get 0B/817kB of archives.

Slapd freaks OT

2004-11-25 Thread Huston
And here I was thinking it was a bad spelled porn siteHope some others see my warped humor...All the weird spam mail I get... Huston - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, November 25, 2004 4:24 PM Subject: [Norton Ant

Re: Slapd freaks

2004-11-25 Thread Henrique de Moraes Holschuh
On Thu, 25 Nov 2004, [EMAIL PROTECTED] wrote: > operation, the load average is growing drastic. The log level is -1 but I Make it zero. It won't help. > slapd and the end I restarted the machine. The slapd is starting corectly > but any operation have the same result. But if I

Slapd freaks

2004-11-25 Thread beckzg
Hi Members! I've an interesant experience with slapd version 2.1.30-3. I tried with two different hardware and two different kernel, 2.4.27 and 2.6.9 with alan cox 11 patch. The symptom is, in stochastic times and events I try some ldap operation, the load average is growing drastic. Th

Re: Slapd wont start on unstable

2004-08-25 Thread Pete Conkin
- Original Message - From: "Mirko Scurk" <[EMAIL PROTECTED]> > I get following error: > > slapd[1847]: slap_open_listener: socket() failed for AF_INET6 errno=97 > (Address family not supported by protocol) http://www.openldap.org/faq/data/cache/652.html

Slapd wont start on unstable

2004-08-25 Thread Mirko Scurk
Maybe some demaged packages sliped past apt-listbugs? libldap2 2.1.23-1 slapd 2.1.23-1 I get following error: slapd[1847]: slap_open_listener: socket() failed for AF_INET6 errno=97 (Address family not supported by protocol) Anybody? -- Mirko Scurk -- To UNSUBSCRIBE, email

OpenLDAP (slapd) will not work

2004-01-12 Thread Ralph Bergmann
Hello! My slapd doesn't work any more. He has simply stopped and I don't know why? I have attached the log file. Does anybody have a tip? Regards, Ralph Jan 13 00:14:40 linuxserver slapd[1676]: bdb_initialize: Sleepycat Software: Berkeley DB 4.1.25: (December 19, 2002) Jan 1

Re: slapd upgrade from 2.0.27-4 to 2.1.22-1 is a catastrophe

2003-07-25 Thread Jean-Marc V. Liotier
The conversion process needed to make our tree acceptable to recent versions of slapd not being something I am going to embark upon on a Friday evening, downgrading to version 2.0.27-4 seems the most reasonable course of action. After having wiped the partly upgraded setup and installed the

Re: slapd upgrade from 2.0.27-4 to 2.1.22-1 is a catastrophe

2003-07-25 Thread Jean-Marc V. Liotier
On Fri, 2003-07-25 at 17:23, Jean-Marc V. Liotier wrote: > I have a testing system (with a handful of packages pinned to unstable). > During the upgrade I performed today, slapd went from 2.0.27-4 to > 2.1.22-1. The result is catastrophic : > - Postfix no longer works properly (I a

slapd upgrade from 2.0.27-4 to 2.1.22-1 is a catastrophe

2003-07-25 Thread Jean-Marc V. Liotier
I have a testing system (with a handful of packages pinned to unstable). During the upgrade I performed today, slapd went from 2.0.27-4 to 2.1.22-1. The result is catastrophic : - Postfix no longer works properly (I am using ldap virtual maps) - The upgrade process produced a bunch of errors I do

Re: restarting slapd and slurpd

2003-03-05 Thread Jeremy T. Bouse
a PID file and thus start-stop-daemon must use something along the lines of a 'pidof slurpd' call which will return multiple PIDs due to the threading issue... Jeremy On Wed, Mar 05, 2003 at 02:55:10PM +0200, Alexey Chetroi wrote: > > Dear All, > > I&#

restarting slapd and slurpd

2003-03-05 Thread Alexey Chetroi
Dear All, I've configured slapd and slurpd on my woody box and everything works fine, except when I restart slapd, init script complains about missing pid of slurpd: lexa:/home# ps -ef|egrep 'slapd|slurpd' root 21418 1 0 13:37 ?00:00:00 /usr/sbin/slapd root

Re: compiling slapd with tls SOLVED

2002-03-18 Thread Ramin Motakef
> Hi, > i need TLS with slapd, so i downloaded the debian source package, > changed debian/rules (--without-tls to --with-tls) and made binary > packages. > > They compiled fine, however they do not run: > > deb1:~# slapd -f /etc/ldap/slapd.conf -d 255 -h "ldap://

Re: compiling slapd with tls

2002-03-18 Thread Karsten Heymann
* Ramin Motakef <[EMAIL PROTECTED]> [020318 09:32]: > Hi, > ... > deb1:~# slapd -f /etc/ldap/slapd.conf -d 255 -h "ldap:/// ldaps:///" > @(#) $OpenLDAP: slapd 2.0.23-Release (Sam Mär 16 17:04:30 CET 2002) $ > [EMAIL > PROTECTED]:/home/ramin/tmp/server/ldap/ope

compiling slapd with tls

2002-03-17 Thread Ramin Motakef
Hi, i need TLS with slapd, so i downloaded the debian source package, changed debian/rules (--without-tls to --with-tls) and made binary packages. They compiled fine, however they do not run: deb1:~# slapd -f /etc/ldap/slapd.conf -d 255 -h "ldap:/// ldaps:///" @(#) $OpenLDAP: sl

Too many slapd processes

2001-09-27 Thread Doug Fields
Hello, Woody had the 2.0.14 version of slapd (OpenLDAP) upgraded a while ago, instead of the official "stable" 2.0.11 version and also not the 2.0.15 most recent version. Since then, with my LDAP PAM/NSS configured woody box, I get a proliferation of slapd processes - over 20, a

openldap-utils cannot bind to slapd

1999-06-10 Thread Thomas Gebhardt
Hi, just trying to populate my first ldap directory. Somehow I cannot bind to the server as the admin user. Here is my access configuration (slapd.conf): access to * by dn="cn=admin, ou=People, o=Universitaet Marburg, c=DE" write defaultaccess none When I try ldapsearch -v -D "cn=admin, ou=Peo