[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re[8]: OpenLDAP + pgSQL

To: Pierangelo Masarati <ando@sys-net.it>
Subject: Re[8]: OpenLDAP + pgSQL
From: "Sergey Panchenko (Dev Zero G)" <sergey.p@ua.devzerog.com>
Date: Wed, 12 May 2004 18:05:10 +0300
Cc: OpenLDAP Mail List <openldap-software@OpenLDAP.org>
In-reply-to: <47378.131.175.154.56.1084373619.squirrel@webmail.sys-net.it>
Organization: Dev Zero G Ltd
References: <3410140780.20040512095610@ua.devzerog.com> <27838.193.227.212.131.1084348102.squirrel@webmail.sys-net.it> <119923433.20040512112818@ua.devzerog.com> <46145.131.175.154.56.1084351419.squirrel@webmail.sys-net.it> <6810480090.20040512120214@ua.devzerog.com> <46173.131.175.154.56.1084352575.squirrel@webmail.sys-net.it> <665974829.20040512175222@ua.devzerog.com> <47378.131.175.154.56.1084373619.squirrel@webmail.sys-net.it>

Hello Pierangelo,

Wednesday, May 12, 2004, 5:53:39 PM, you wrote:


>> Hello Pierangelo,
>>
>> Wednesday, May 12, 2004, 12:02:55 PM, you wrote:
>>
>> I have configured unixODBC. But now when starting with new script from
>> slapd, but have same prob. If starting with slapd command - everything
>> fine.

PM> This sounds a bit obscure; can you clarify
PM> what is fine and what has the same problem?

New script that openldap using slapd.sh in rc.d, when starting thru it
in command i got:
"
This: not found
Starting slapd.
"
But ldap doesn't start.
When using /usr/local/libexec/slapd, I have no mistakes, exept:
postgres[749]: [1-1] ERROR:  unrecognized configuration parameter "ksqo"

But ldap still starts.

PM> p.

>>
>> PM> You need to configure unixODBC appropriately.
>> PM> Check unixODBC documentation for details.
>>
>> PM> p.
>>
>>>> Hello Pierangelo,
>>>>
>>>> Wednesday, May 12, 2004, 11:43:39 AM, you wrote:
>>>>
>>>> I think I found a problem, but don't know how to solve it:
>>>> Here's that part from log:
>>>>
>>>> backsql_open_db_conn: SQLConnect() to database "pg_ldap" as user
>>>> "test" failed: Return code: -1
>>>>    Native error code: 0
>>>>    SQL engine state:  IM002
>>>>    Message:           [unixODBC][Driver Manager]Data source name not
>>>> found, and no default driver specified
>>>> backsql_get_db_conn(): could not get connection handle -- returning
>>>> NULL backsql_db_open(): connection failed, exiting
>>>> backend_startup: bi_db_open(0) failed! (1)
>>>>
>>>>
>>>> PM> A more verbose log would help as well.  Try -d -1.
>>>>
>>>> PM> p.
>>>>
>>>>>> Hello Luca,
>>>>>>
>>>>>> Wednesday, May 12, 2004, 10:48:22 AM, you wrote:
>>>>>>
>>>>>> Just added.
>>>>>> Doesn't not help.
>>>>>>
>>>>>>
>>>>>> LS> I would try including the back_sql module.
>>>>>>
>>>>>> LS> just my 2 cents
>>>>>>
>>>>>> LS> Dev Zero G disse:
>>>>>>>> Hello,
>>>>>>>>
>>>>>>>>     I try to explain the whole problem.
>>>>>>>>
>>>>>>>>     I have FreeBSD 4.9-R, OpenLDAP 2.2.10-server and PostgreSQL
>>>>>>>> 7.4
>>>>>>>>
>>>>>>>>     Here's list of slapd.conf:
>>>>>>>>
>>>>>>>> #
>>>>>>>> # See slapd.conf(5) for details on configuration options.
>>>>>>>> # This file should NOT be world readable.
>>>>>>>> #
>>>>>>>> include         /usr/local/etc/openldap/schema/core.schema
>>>>>>>> include         /usr/local/etc/openldap/schema/cosine.schema
>>>>>>>> include         /usr/local/etc/openldap/schema/corba.schema
>>>>>>>> include
>>>>>>>> /usr/local/etc/openldap/schema/inetorgperson.schema
>>>>>>>> include         /usr/local/etc/openldap/schema/java.schema
>>>>>>>> #include       
>>>>>>>> /usr/local/etc/openldap/schema/krb5-kdc.schema
>>>>>>>> #include
>>>>>>>> /usr/local/etc/openldap/schema/kerberosobject.schema
>>>>>>>> include         /usr/local/etc/openldap/schema/misc.schema
>>>>>>>> include         /usr/local/etc/openldap/schema/nis.schema
>>>>>>>> include        
>>>>>>>> /usr/local/etc/openldap/schema/openldap.schema
>>>>>>>> include         /usr/local/etc/openldap/schema/samba.schema
>>>>>>>>
>>>>>>>> # Define global ACLs to disable default read access.
>>>>>>>>
>>>>>>>> # Do not enable referrals until AFTER you have a working
>>>>>>>> directory # service AND an understanding of referrals.
>>>>>>>> #referral       ldap://root.openldap.org
>>>>>>>>
>>>>>>>> pidfile         /var/run/openldap/slapd.pid
>>>>>>>> argsfile        /var/run/openldap/slapd.args
>>>>>>>>
>>>>>>>> defaultsearchbase       dc=some,dc=domain,dc=com
>>>>>>>>
>>>>>>>> # Load dynamic backend modules:
>>>>>>>>  modulepath     /usr/local/libexec/openldap
>>>>>>>>  moduleload     back_bdb.la
>>>>>>>>  moduleload     back_ldap.la
>>>>>>>>  moduleload     back_ldbm.la
>>>>>>>>  moduleload     back_passwd.la
>>>>>>>>  moduleload     back_shell.la
>>>>>>>>
>>>>>>>> # Timeout in seconds, 0 = never
>>>>>>>> idletimeout     0
>>>>>>>> threads         32
>>>>>>>> # Debuging level, 0 = none
>>>>>>>> loglevel       64
>>>>>>>>
>>>>>>>> access to *
>>>>>>>>         by self write
>>>>>>>>         by * read
>>>>>>>> access to * by dn="cn=admin,dc=some,dc=domain,dc=com" write
>>>>>>>>
>>>>>>>>  security ssf=1 update_ssf=112 simple_bind=64
>>>>>>>>
>>>>>>>>  access to dn.base="" by * read
>>>>>>>>  access to dn.base="cn=Subschema" by * read
>>>>>>>>  access to *
>>>>>>>>         by self write
>>>>>>>>         by users read
>>>>>>>>         by anonymous auth
>>>>>>>>
>>>>>>>>     allow bind_v2
>>>>>>>>
>>>>>>>> database        sql
>>>>>>>> suffix          "dc=some,dc=domain,dc=com"
>>>>>>>> rootdn          "cn=admin,dc=some,dc=domain,dc=com"
>>>>>>>> rootpw          secret
>>>>>>>> dbname          pg_ldap
>>>>>>>> dbuser          test
>>>>>>>> dbpasswd        test
>>>>>>>> lastmod off
>>>>>>>> insentry_query  "insert into ldap_entries
>>>>>>>> (id,dn,oc_map_id,parent,keyval) values ((select max(id)+
>>>>>>>> upper_func "upper"
>>>>>>>> strcast_func    "text"
>>>>>>>> concat_pattern  "?||?"
>>>>>>>> has_ldapinfo_dn_ru      no
>>>>>>>>
>>>>>>>> #Specify ciphers
>>>>>>>> TLSCipherSuite HIGH:MEDIUM:+SSLv2:+SSLv3
>>>>>>>> #TLS keyfile locations
>>>>>>>> TLSCertificateFile      /etc/ldap/slapd_cert.pem
>>>>>>>> TLSCertificateKeyFile   /etc/ldap/slapd_key.pem
>>>>>>>>
>>>>>>>> #Sasl
>>>>>>>> sasl-host       localhost
>>>>>>>>
>>>>>>>> PostgreSQL configured by default.
>>>>>>>>
>>>>>>>> Here's what I have in logs:
>>>>>>>> May 12 09:48:35 palladium-bsd slapd[287]: @(#) $OpenLDAP:
>>>>>>>> slapd 2.2.10(May 11 2004 09:41:45) $
>>>>>>>> root@palladium-bsd.ua.devzerog.com:/usr/ports/net/openldap22-server/work/openldap-2.2.10/servers/slapd
>>>>>>>> May 12 09:48:35 palladium-bsd /kernel: May 12 09:48:35
>>>>>>>> palladium-bsd May 12 09:48:35 palladium-bsd slapd[287]:
>>>>>>>> bdb_initialize: Sleepycat Software: Berkeley DB 4.2.52: (December
>>>>>>>> 3, 2003)
>>>>>>>> May 12 09:48:35 palladium-bsd /kernel: May 12 09:48:35
>>>>>>>> palladium-bsd slapd[287]: bdb_initialize: Sleepycat Software:
>>>>>>>> Berkeley DB 4.2.52: (December  3, 2003) May 12 09:48:35
>>>>>>>> palladium-bsd slapd[287]: bdb_initialize: Sleepycat Software:
>>>>>>>> Berkeley DB 4.2.52: (December  3, 2003)
>>>>>>>> May 12 09:48:35 palladium-bsd slapd[287]: line 44 (access to * by
>>>>>>>> self write        by * read)
>>>>>>>> May 12 09:48:35 palladium-bsd /kernel: May 12 09:48:35
>>>>>>>> palladium-bsd slapd[287]: bdb_initialize: Sleepycat Software:
>>>>>>>> Berkeley DB 4.2.52: (December  3, 2003) May 12 09:48:35
>>>>>>>> palladium-bsd /kernel: May 12 09:48:35 palladium-bsd slapd[287]:
>>>>>>>> line 44 (access to *        by self write        by * read) May
>>>>>>>> 12 09:48:35 palladium-bsd
>>>>>>>> slapd[287]: line 45 (access to * by
>>>>>>>> dn="cn=admin,dc=some,dc=domain,dc=com" write)
>>>>>>>> May 12 09:48:35 palladium-bsd slapd[287]: line 138 (database sql)
>>>>>>>> May 12 09:48:35 palladium-bsd /kernel: May 12 09:48:35
>>>>>>>> palladium-bsd slapd[287]: line 140 (suffix
>>>>>>>> "dc=some,dc=domain,dc=com") May 12 09:48:35 palladium-bsd
>>>>>>>> /kernel: May 12 09:48:35 palladium-bsd slapd[287]: line 142
>>>>>>>> (rootdn
>>>>>>>> "cn=root,dc=some,dc=domain,dc=com")
>>>>>>>> May 12 09:48:35 palladium-bsd slapd[287]: line 144 (rootpw ***)
>>>>>>>> May 12 09:48:35 palladium-bsd slapd[287]: line 145 (dbname
>>>>>>>> pg_ldap) May 12 09:48:35 palladium-bsd slapd[287]: line 146
>>>>>>>> (dbuser
>>>>>>>>     test) May 12 09:48:35 palladium-bsd slapd[287]: line 147
>>>>>>>> (dbpasswd
>>>>>>>> ***)
>>>>>>>> May 12 09:48:35 palladium-bsd slapd[287]: line 148 (lastmod off)
>>>>>>>> May 12 09:48:35 palladium-bsd slapd[287]: line 149
>>>>>>>> (insentry_query "insert into ldap_entries
>>>>>>>> (id,dn,oc_map_id,parent,keyval) values
>>>>>>>> ((select max(id)+1 from ldap_entries),?,?,?,?)") May 12 09:48:35
>>>>>>>> palladium-bsd slapd[287]: line 150 (upper_func      "upper") May
>>>>>>>> 12 09:48:35 palladium-bsd slapd[287]: line 151 (strcast_func
>>>>>>>> "text") May 12 09:48:35 palladium-bsd slapd[287]: line 152
>>>>>>>> (concat_pattern "?||?") May 12 09:48:35 palladium-bsd slapd[287]:
>>>>>>>> line 153
>>>>>>>> (has_ldapinfo_dn_ru
>>>>>>>>    no) May 12 09:48:35 palladium-bsd slapd[287]: line 163
>>>>>>>> (TLSCipherSuite HIGH:MEDIUM:+SSLv2:+SSLv3) May 12 09:48:35
>>>>>>>> palladium-bsd slapd[287]: line 165 (TLSCertificateFile
>>>>>>>> /etc/ldap/slapd_cert.pem) May 12 09:48:35 palladium-bsd
>>>>>>>> slapd[287]: line 166 (TLSCertificateKeyFile
>>>>>>>>   /etc/ldap/slapd_key.pem) May 12 09:48:35 palladium-bsd
>>>>>>>> slapd[287]:
>>>>>>>> line 169 (sasl-host localhost) May 12 09:48:35 palladium-bsd
>>>>>>>> slapd[288]: backend_startup: bi_db_open(0) failed! (1) May 12
>>>>>>>> 09:48:35 palladium-bsd slapd[288]: slapd stopped.
>>>>>>>> May 12 09:48:35 palladium-bsd slapd[288]: connections_destroy:
>>>>>>>> nothing to destroy.
>>>>>>>>
>>>>>>>> Any ideas?
>>>>>>>>
>>>>>>>> --
>>>>>>>> Regards,
>>>>>>>>
>>>>>>>>  Sergey
>>>>>>>>  Dev Zero G Ltd
>>>>>>>>  w: http://devzerog.com
>>>>>>>>  e: sergey.p@ua.devzerog.com
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> --
>>>>>> Best regards,
>>>>>>  Sergey
>>>>>> mailto:sergey.p@ua.devzerog.com
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>> Best regards,
>>>>  Sergey                           
>>>> mailto:sergey.p@ua.devzerog.com
>>
>>
>>
>>
>>
>> --
>> Best regards,
>>  Sergey                            mailto:sergey.p@ua.devzerog.com





-- 
Best regards,
 Sergey                            mailto:sergey.p@ua.devzerog.com

Follow-Ups:
- Re: Re[8]: OpenLDAP + pgSQL
  - From: "Pierangelo Masarati" <ando@sys-net.it>

References:
- OpenLDAP + pgSQL
  - From: "Sergey Panchenko (Dev Zero G)" <sergey.p@ua.devzerog.com>
- Re: OpenLDAP + pgSQL
  - From: "Luca Scamoni" <luca.scamoni@sys-net.it>
- Re[2]: OpenLDAP + pgSQL
  - From: "Sergey Panchenko (Dev Zero G)" <sergey.p@ua.devzerog.com>
- Re: Re[2]: OpenLDAP + pgSQL
  - From: "Pierangelo Masarati" <ando@sys-net.it>
- Re[4]: OpenLDAP + pgSQL
  - From: "Sergey Panchenko (Dev Zero G)" <sergey.p@ua.devzerog.com>
- Re: Re[4]: OpenLDAP + pgSQL
  - From: "Pierangelo Masarati" <ando@sys-net.it>
- Re[6]: OpenLDAP + pgSQL
  - From: "Sergey Panchenko (Dev Zero G)" <sergey.p@ua.devzerog.com>
- Re: Re[6]: OpenLDAP + pgSQL
  - From: "Pierangelo Masarati" <ando@sys-net.it>

Prev by Date: LDAP Sync or Slurpd?
Next by Date: Re: Re[8]: OpenLDAP + pgSQL
Index(es):
- Chronological
- Thread