Re: a problem of authentication fail in Ubuntu 10.04,slapd 2.4.21

[Dan White <dwhite@olp.net>]

On 04/01/11 19:30 +0800, cn_gd@126.com wrote:
> hi all,
>
> I 'm install slapd follow bellow steps  in ubuntu 10.04 lucid  strictly:
>
> 1. apt-get install slapd
>
> * slapd -V
> @(#) $OpenLDAP: slapd 2.4.21 (Aug 10 2010 17:08:36) $
>    buildd@yellow:/build/buildd/openldap-2.4.21/debian/build/servers/slapd*
>
> 2. dpkg-reconfigure slapd
>
> 3.edit  /etc/ldap/slapd.d/cn\=config.ldif
>
> 4. cat /etc/ldap/slapd.d/cn\=config.ldif
>
> dn: cn=config
> objectClass: olcGlobal
> cn: config
> olcArgsFile: /var/run/slapd/slapd.args
> olcLogLevel: none
> olcPidFile: /var/run/slapd/slapd.pid
> structuralObjectClass: olcGlobal
>
> dn: olcDatabase=bdb,cn=config
> objectClass: olcDatabaseConfig
> objectClass: olcBdbConfig
> olcDatabase: bdb
> olcSuffix: "dc=cg,dc=scsio,dc=ac,dc=cn"
> olcDbDirectory:    /home/az/openldap-data
> olcRootDN: "cn=Manager,dc=cg,dc=scsio,dc=ac,dc=cn"
> olcRootPW: secret
>
> 4. /etc/init.d/slapd restart
>
>
> All step're OK,then I run bellow to test it:
>
> 5. ldapsearch -x -D "cn=Manager,dc=cg,dc=scsio,dc=ac,dc=cn" -w 
> "secret" -H ldap://cg.scsio.ac.cn
>
> and it show that error:
> *ldap_bind: Invalid credentials (49)

You could increase your log level (olcLogLevel) to get trouble shooting
details.

After having gone through this process myself recently (using slapd.d), and
not being happy with the Debian default config, here's the process I'm
using in a test environment for boot strapping an install, that might spark
some ideas with your config.

My starting configuration is: http://web.olp.net/dwhite/openldap/slapd-new.conf

aptitude install slapd slapd-smbk5pwd

/etc/init.d/slapd stop
mv /etc/ldap/slapd.d /etc/ldap/slapd.d.bak
mv /var/lib/ldap /var/lib/ldap.bak
mkdir /etc/ldap/slapd.d /var/lib/ldap
chown openldap:openldap /etc/ldap/slapd.d /var/lib/ldap
cat > /etc/ldap/ldap.conf << EOF
BASE dc=example,dc=org
URI ldapi:///
EOF

echo "SASL_MECH EXTERNAL" > /root/.ldaprc

sudo -u openldap slapadd << EOF
dn: dc=example,dc=org
objectClass: top
objectClass: dcObject
objectClass: organization
o: Example
dc: example

dn: ou=People,dc=example,dc=org
objectClass: top
objectClass: organizationalUnit
ou: People

dn: ou=Groups,dc=example,dc=org
objectClass: top
objectClass: organizationalUnit
ou: Groups

dn: ou=Aliases,dc=example,dc=org
objectClass: top
objectClass: organizationalUnit
ou: Aliases

EOF

sudo -u openldap slaptest -f /etc/ldap/slapd.conf -F /etc/ldap/slapd.d
/etc/init.d/slapd start

--
Dan White