Re: Cannot get users to load

[Todd Lyons <tlyons@ivenue.com>]

mpease@egginc.com wanted us to know:

>   I ran the above command as with these results
>   ldapsearch -x -b 'dc=services,dc=egginc,dc=com' '(objectclass=*)'
>   result: 32 No such object
>   # numResponses: 1

Ok, now try it to take into account this:

>   rootdn          "cn=Manager,dc=services,dc=egginc,dc=com"
>   rootpw          secret

ldapsearch -x -b 'dc=services,dc=egginc,dc=com' \
  -D 'cn=Manager,dc=services,dc=egginc,dc=com' -w secret \
  '(objectclass=*)'

I'd be willing to bet that it now finds a few things.

Also note that you have no access definitions in your slapd.conf.
You'll need to work on that before you go live with a production system.

Here's a sample of what mine looks like:
#######################################################################
# ldbm database definitions
#######################################################################

# Note that cn=Manager is not specified here.  It's implied that it
# has write access to everything in the directory, kinda like the way
# that root has access to everything on a filesystem (barring the
# immutable bit).
access to attr=userPassword
        by dn="cn=master,dc=ivenue,dc=net" write
        by dn="cn=courier,dc=ivenue,dc=net" read
        by dn="cn=sendmail,dc=ivenue,dc=net" read
        by dn="cn=pam,dc=ivenue,dc=net" read
        by self write
        by * auth
access to *
        by dn="cn=master,dc=ivenue,dc=net" write
        by * read

#######################################################################
# ldbm database definitions
#######################################################################

database        ldbm
suffix          "dc=ivenue,dc=net"
rootdn          "cn=Manager,dc=ivenue,dc=net"
rootpw          {crypt}obfuscatedobfuscated
directory       /var/lib/openldap-data
# Indices to maintain
index   objectClass,uid,uidNumber,gidNumber,memberUid   eq
index   cn,mail,surname,givenname                       eq,subinitial
index   sendmailMTAKey,sendmailMTAMapName               eq
index   sendmailMTAHost,sendmailMTACluster              eq
index   sendmailMTAAliasGrouping,sendmailMTAClassName   eq

-- 
Regards...		Todd
OS X: We've been fighting the "It's a mac" syndrome with upper management
for  years  now.  Lately  we've  taken  to  just  referring  to  new  mac 
installations  as  "Unix"  installations  when  presenting proposals  and 
updates.  For some reason, they have no problem with that.          -- /.
Linux kernel 2.6.3-19mdkenterprise   2 users,  load average: 0.04, 0.09, 0.08