Re: failed to start slapd & can't create password - please help.

[Zdenek Styblik <stybla@turnovfree.net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 06/20/10 08:21, sam wrote:
> Hi Gibson,
> 
> I just ave the password command working, but it failed at the the final
> step, please see below:
> 
> # slappasswd -h {MD5}
> New password:
> Re-enter new password:
> Password generation failed for scheme MD5: scheme not recognized
> 
> What have I missed?
> 
> Thanks
> Sam
> 

The very same thing as in the beginning. Your OpenLDAP/crypt is missing
MD5 (scheme) support.

The answer is probably here:
http://www.mail-archive.com/openldap-software@openldap.org/msg07304.html

Yes, --enable-crypt could/should do.

Please, don't top-post. It's quite ... annoying.

Regards,
Zdenek

- -- 
Zdenek Styblik
Net/Linux admin
OS TurnovFree.net
email: stybla@turnovfree.net
jabber: stybla@jabber.turnovfree.net

> Quanah Gibson-Mount wrote:
>> --On Sunday, June 20, 2010 11:20 AM +1000 sam <sam@ip6.com.au> wrote:
>>
>>> Hi,
>>>
>>> With the following setup:
>>>
>>> hometest:openldap # uname -a
>>> FreeBSD hometest.ip6.com.au <http://hometest.ip6.com.au> 8.1-RC1 FreeBSD
>>> 8.1-RC1 #0: Fri Jun 18
>>> 15:26:58 EST 2010
>>> root@hometest.ip6.com.au:/usr/
>>> obj/usr/src/sys/mail.db.java.portal
>>> i386
>>> hometest:openldap # pkg_info | grep -i ldap
>>> openldap-sasl-client-2.4.22 Open source LDAP client implementation
>>> with SASL2 support
>>> openldap-sasl-server-2.4.22 Open source LDAP server implementation
>>> hometest:openldap # pkg_info | grep -i db
>>> db46-4.6.21.4       The Berkeley DB package, revision 4.6
>>> hometest:openldap # pkg_info | grep -i sasl
>>> cyrus-sasl-2.1.23   RFC 2222 SASL (Simple Authentication and Security
>>> Layer)
>>> cyrus-sasl-saslauthd-2.1.23 SASL authentication server for cyrus-sasl2
>>> openldap-sasl-client-2.4.22 Open source LDAP client implementation
>>> with SASL2 support
>>> openldap-sasl-server-2.4.22 Open source LDAP server implementation
>>>
>>> I can't create password for ldap:
>>> hometest:openldap # slappasswd -h {MD5} -s password
>>> Password generation failed for scheme MD5: scheme not recognized
>>
>> It wasn't built with MD5 support.  If it is, it works:
>>
>> [zimbra@freelancer ~]$ /opt/zimbra/openldap/sbin/slappasswd -h {MD5}
>> -s blah
>> {MD5}bx7QAqtVlYWQFOvwlRUi2Q==
>>
>>
>>
>>> hometest:rc.d # ./slapd start
>>> Starting slapd.
>>> ./slapd: WARNING: failed to start slapd
>>
>> Run slapd -d -1 to see why it failed to start.
>>
>> --Quanah
>>
>>
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkwdyBsACgkQ8MreUbSH7imStQCgux+MQE3J+UkU3oodcFj63LDi
9dYAnjk2QQerbYJWCIDMK16TRcdUJpO3
=4b4Q
-----END PGP SIGNATURE-----