[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
OpenLDAP 2.4 - Problem with rewrite overlay
- To: openldap-technical@openldap.org
- Subject: OpenLDAP 2.4 - Problem with rewrite overlay
- From: KISTER RAPHAEL <kraph@yahoo.com>
- Date: Wed, 16 Dec 2009 08:07:38 -0800 (PST)
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1260979658; bh=C0T2YMBuhHPIQmMYqOPmZrD3RTsbsoxxpW3arcXRMo8=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=tZz/RWYUht0X21BrCGHbu54h1+pYRaHSMuo9r9gwwe3kcCDcaBFEWyJdUpXwFdFqWVSKe4BmeuRY0NJ8ScHk/7x2FKy9Gihp+OrpRqs8GQLJRnA63bgLgZvtbyZJSVWYlLjM2b2D8FpusClptsIQHX/CrV9BBa9fuKdsNumt6p0=
- Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=oWNDp2VoLaPHSzUT3RAXakPc0jUcuyYw+RFvoboZe/lgUMO/yoMsQ2fXqgDGs+LKooVf0DoMM7rJUwtmQw9i0DmkbtpDvp4vlpldnteUxey7jln/wK1UEpLs9VvpXmkuyzEEg7iZYPYCdRUj0fDCNuK+P0eACd1rEvLxItMwqVA=;
Hello,
I have to configure an OpenLDAP directory that store some informations about users and groups and that is a proxy with Active Directory.
To do this, i configure two suffix on my openldap server : the first one is to store informations about users and groups and the second is for the Active Directory proxy (second suffix is embedded in the first one.
To configure the Active Directory proxy, i use an ldap backend with rwm overlay to rewrite some attributes and objectclass.
When i test my configuration with slaptest binary, i get this error :
config error processing olcOverlay={0}rwm,olcDatabase={2}ldap,cn=config: <olcRwmMap> handler exited with 1
slaptest: bad configuration directory!
I am on a CentOS 5.4 server with OpenLDAP 2.4.20 (compile from sources) and Berkeley DB 4.6.21.
I'll give you my slapd.conf file :
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
serverid 001
# Inclusion des schemas
include /opt/openldap/etc/openldap/schema/core.schema
include /opt/openldap/etc/openldap/schema/cosine.schema
include /opt/openldap/etc/openldap/schema/inetorgperson.schema
include /opt/openldap/etc/openldap/schema/nis.schema
include /opt/donnees/etc/openldap/schema/microsoft.schema
# Log level
loglevel -1
# The maximum number of entries that is returned for a search operation
sizelimit unlimited
# The tool-threads parameter sets the actual amount of cpu's that is used
# for indexing.
tool-threads 1
# PID File
pidfile /opt/donnees/var/run/slapd.pid
argsfile /opt/donnees/var/run/slapd.args
# Load dynamic backend modules:
#modulepath /opt/openldap/lib
#moduleload back_hdb
#moduleload back_monitor
moduleload rwm
# Access control policy:
access to attrs=userPassword
by self write
by anonymous auth
by * none
access to dn.base="" by * read
access to dn.subtree="cn=Monitor"
by dn.exact="cn=admin,cn=config" write
by users read
by * none
access to *
by self write
by dn="cn=admin,cn=config" write
by * none
# Configuration du backend
backend hdb
#######################################################################
# BDB database definitions
#######################################################################
database monitor
# Dynamic Config
database config
rootdn "cn=admin,cn=config"
rootpw secret
#######################################################################
# Configuration Proxy Active Directory
database ldap
suffix ou=proxy,dc=my-company,dc=meta
rootdn "cn=admin,cn=config"
subordinate
uri ldap://192.168.44.88:389
lastmod off
acl-authcDN cn=admin,cn=config
acl-passwd secret
idassert-bind bindmethod="simple"
binddn="CN=srv_ldap,OU=Services-account,OU=Administration,dc=my-company,dc=local"
credentials="Azerty00"
mode="legacy"
overlay rwm
rwm-suffixmassage dc=my-company,dc=local
rwm-map attribute uid sAMAccountName
rwm-map attribute cn cn
rwm-map attribute displayName displayName
rwm-map attribute givenName givenName
rwm-map attribute sn sn
rwm-map attribute mail mail
rwm-map attribute userPassword userPassword
rwm-map attribute *
rwm-map objectclass inetOrgPerson user
#######################################################################
# Configuration Annuaire technique (habilitations, partenaires, internautes)
database hdb
suffix "dc=my-company,dc=meta"
rootdn "cn=admin,cn=config"
directory "/opt/donnees/var/openldap-data"
checkpoint 512 30
dbconfig set_cachesize 0 128000000 0
dbconfig set_lk_max_objects 1500
dbconfig set_lk_max_locks 1500
dbconfig set_lk_max_lockers 1500
index objectClass,entryCSN,entryUUID eq
index uid pres,eq,sub
index sn pres,eq,sub
index mail pres,eq,sub
index cn pres,eq,sub
lastmod on
When i install OpenLDAP on my server, i execute this commands :
CPPFLAGS="-I/usr/local/BerkeleyDB.4.6/include" LDFLAGS="-L/usr/local/BerkeleyDB.4.6/lib"
./configure --prefix=/opt/openldap --enable-shared --enable-crypt=yes --enable-rewrite=yes
--enable-bdb=yes --enable-hdb=yes --enable-ldap=mod --enable-meta=mod --enable-monitor=yes
--enable-relay=mod --enable-overlays=yes --with-cyrus-sasl --with-threads=posix
--with-tls=openssl
make depend
make
make test
make install
What's wrong with my installation or my config file ? Is this error is an OpenLDAP bug ?
Thank you for your help,
Raphaël KISTER