Re: phpldapadmin Config

[Josiah Ritchie <jritchie@bible.edu>]

On Tue, 2004-07-13 at 12:51, Quanah Gibson-Mount wrote:
> --On Tuesday, July 13, 2004 12:46 PM -0400 Josiah Ritchie 
> <jritchie@bible.edu> wrote:
> 
> > On Tue, 2004-07-13 at 12:29, Quanah Gibson-Mount wrote:
> >> --On Tuesday, July 13, 2004 12:19 PM -0400 Josiah Ritchie
> >> <jritchie@bible.edu> wrote:
> >>
> >> > I'm trying to configure phpldapadmin to authenticate users from LDAP.
> >> > I'm seeing the following in my logs.
> >> >
> >> > Jul 13 07:11:12 localhost slapd[2481]: conn=1 fd=12 ACCEPT from
> >> > IP=127.0.0.1:33073 (IP=0.0.0.0:389)
> >> > Jul 13 07:11:12 localhost slapd[2483]: conn=1 op=0 BIND dn=""
> >> > method=128 Jul 13 07:11:12 localhost slapd[2483]: conn=1 op=0 RESULT
> >> > tag=97 err=0 text=
> >> > Jul 13 07:11:12 localhost slapd[2483]: conn=1 op=1 SRCH
> >> > base="dc=cougarnet,dc=bible,dc=edu" scope=2
> >> > filter="(uid=JosiahRitchie)" Jul 13 07:11:12 localhost slapd[2483]:
> >> > conn=1 op=1 SRCH attr=dn Jul 13 07:11:12 localhost slapd[2483]: <=
> >> > bdb_equality_candidates: (uid) index_param failed (18)
> >> > Jul 13 07:11:12 localhost slapd[2483]: conn=1 op=1 SEARCH RESULT
> >> > tag=101 err=0 nentries=0 text=
> >> > Jul 13 07:11:12 localhost slapd[2483]: conn=1 op=2 UNBIND
> >> > Jul 13 07:11:12 localhost slapd[2483]: conn=1 fd=12 closed
> >>
> >> You are doing an equality search on uid ("uid=josiahritchie") but you
> >> don't  have an equality index for uid, which is why it is saying the
> >> indexing is  failing.
> >
> > Thanks Quanah, that fixed the error. I put this in "index uid
> > pres,sub,eq" slapd.conf and removed uid from the other list. Restarted
> > slapd and with the same test I get this and the same error from
> > phpldapadmin:

> Please don't email me off list.  It can be helpful for everyone to see the 
> answers.

I apologize, that was unintentional and a result of me not pay attention
to my To: and Cc: lines. I'll do better.

> Did you reindex your database after putting in the eq statement?  If not, 
> it will only apply to new entries that get added after the change.

I ran slapindex and tried again. This does not appear to have changed
anything.

> Also, have you tested doing an anonymous bind to your server via ldapsearch 
> to see what results you get? (Hint: ldapsearch -x)

Ah, this also doesn't work. I tried:
ldapsearch -x uid=JosiahRitchie
ldapsearch -x ou=People
ldapsearch -x cn=JosiahRitchie

All provided this, among other things:
# search result
search: 2
result: 0 Success

JSR/