Re: /etc/ldap/slapd.conf: line 158: invalid path: Permission denied

[zhangweiwu@realss.com]

zhangweiwu@realss.com wrote:
> Dear all
>
> I've had this strange problem on a new openldap (2.4.9-0ubuntu0.8.04.2)
> installation:
>
> root@emerson # slapd -d 256 -h 'ldap://0.0.0.0:636/'  -f /etc/ldap/slapd.conf
> @(#) $OpenLDAP: slapd 2.4.9 (Aug  5 2008 20:18:55) $
> 	buildd@palmer:/build/buildd/openldap2.3-2.4.9/debian/build/servers/slapd
> /etc/ldap/slapd.conf: line 126: rootdn is always granted unlimited privileges.
> /etc/ldap/slapd.conf: line 143: rootdn is always granted unlimited privileges.
> /etc/ldap/slapd.conf: line 158: invalid path: Permission denied
> slapd stopped.
> connections_destroy: nothing to destroy.
>
> Where:
> root@emerson # sed -n 158p /etc/ldap/slapd.conf 
> directory       "/var/lib/ldap_jxpado"
>
>   
After a lot of experiment it seems anything other than '/var/lib/ldap',
when used for directory directive, would generate "invalid path:
Permission denied". I also tested /var/lib/ldap/jxpado in case slapd
runs in chroot by mistake (~openldap=/var/lib/ldap).

I checked the source code. I am a terrible C code reader, but I found
before this error message is printed slapd check permission by creating
/var/lib/ldap/jxpado/DUMMY and unlink it, if no error, go on, otherwise
pop up this error. I did exactly the same with commandline without error.

# su openldap
$ touch /var/lib/ldap/jxpado/DUMMY
$ rm /var/lib/ldap/jxpado/DUMMY
$ exit
#

This is rather strange to me, could it be the Ubuntu server edition of
slapd was modified? I configured a dozen more slapd server where I
altered directory, on Gentoo Linux, this is the first time I do it on
Ubuntu server.