RE: kadmin: kadm5_create_principa: ldap_add_s: Can't contact LDAP server

[Lara Adianto <m1r4cle_26@yahoo.com>]

> The FIRST thing to do is to run ldapsearch with
> debugging enabled to see
> where it failed in the connection.
Thanks a LOT, Howard..
I turned debugging on, and in fact, the problem was
that ldapsearch was trying to find ldapi in the
following path: /usr/local/var/ldapi while my ldapi
was in /var/run/ldapi.

So, I fed on the path of ldapi: 
[root@localhost libexec]# ldapsearch -H
'ldapi://%2fvar%2frun%2fldapi/' -x
# extended LDIF
#
# LDAPv3
# base <> with scope sub
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 32 No such object

# numResponses: 1
[root@localhost libexec]#

I supposed this is correct, since the database in
empty...

However, I still get "Can't connect to server" when
trying to initialize a new REALM in Heimdal using
kadmin.

[root@localhost libexec]# kadmin -l
kadmin> init LARAS.COM
Realm max ticket life [unlimited]:
Realm max renewable ticket life [unlimited]:
kadmin: kadm5_create_principal: ldap_add_s: Can't
contact LDAP server

Do I need to set some paths here ?

- lara -

--- Howard Chu <hyc@highlandsun.com> wrote:
> > -----Original Message-----
> > From: owner-openldap-software@OpenLDAP.org
> > [mailto:owner-openldap-software@OpenLDAP.org]On
> Behalf Of Dieter
> > Kluenter
> 
> > Hi,
> >
> > Lara Adianto <m1r4cle_26@yahoo.com> writes:
> >
> > > Hello,
> > >
> > > I have a problem of using ldap as the backend of
> > > Heimdal.
> > > I've followed the instructions given in PADL
> > > Documentation, but I still get "Can't connect to
> > > server" when trying to initialize a new REALM in
> > > Heimdal using kadmin.
> > >
> > > By turning on the debug mode, I can see that the
> > > database is opened:
> > > --snip--
> > > slapd startup: initiated.
> > > bdb_db_open: ou=KPrincipals,dc=laras,dc=com
> > > bdb_db_open: dbenv_open(/var/lib/ldap)
> > > slapd starting
> > > --snip--
> > >
> > > but running this returns me error:
> > > [root@localhost libexec]# ldapsearch -H
> 'ldapi:///'
> > > ldap_sasl_interactive_bind_s: Can't contact LDAP
> > > server (81)
> 
> The FIRST thing to do is to run ldapsearch with
> debugging enabled to see
> where it failed in the connection.
> 
> > Three questions:
> > 1. did you start slapd -h ldapi:/// ?
> > 2. Is the socket ldapi world executable, that is
> set to mod 777?
> > 3. are ldapsearch and slapd of the same version?
> >
> > If all three questions can be answered 'yes' than
> add the escaped path
> > to the uri, that is ldapsearch -H
> ldapi://%2Fsome%2Fpath
> 
> 
>   -- Howard Chu
>   Chief Architect, Symas Corp.       Director,
> Highland Sun
>   http://www.symas.com              
> http://highlandsun.com/hyc
>   Symas: Premier OpenSource Development and Support
> 


=====
------------------------------------------------------------------------------------ 
La vie, voyez-vous, ca n'est jamais si bon ni si mauvais qu'on croit
                                                                        - Guy de Maupassant -
------------------------------------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! Tax Center - File online by April 15th
http://taxes.yahoo.com/filing.html