Re: adding VLV support to OpenLDAP 2.4.31

[Igor Shmukler <igor.shmukler@gmail.com>]

Hi Chris,

vq@vq-HVM-domU:~$ ldapsearch -x -w Vq0106%% -D "cn=admin,dc=nodomain"
-b cn=config
# extended LDIF
#
# LDAPv3
# base <cn=config> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 32 No such object

# numResponses: 1

vq@vq-HVM-domU:~$ cat /usr/share/slapd/sssvlv.ldif
dn: olcOverlay=sssvlv,olcDatabase={1}bdb,cn=config
objectClass: olcSssVlvConfig
olcOverlay: sssvlv
olcSssVlvMax: 10
olcSssVlvMaxKeys: 5

In order to actually get the search working, I use base dc=nodomain

It is not my choice. I inherited the server and the configuration. Nor
do I know much about OpenLDAP configuration. I am a programmer and my
job is [among other things] hacking the client piece. Unfortunately,
there is nobody else [better] qualified to configure the server.
Hence, I am filling in for an administrator.

The "ldapsearch -x -w SECRET -D "cn=admin,dc=nodomain" -b dc=nodomain"
version works fine and I do in fact get results.

Sincerely,

Igor Shmukler

On Wed, Nov 12, 2014 at 11:47 AM, Chris Card <ctcard@hotmail.com> wrote:
>
>
>
>> Hi Chris,
>>
>> Sorry to bother you again.
>>
>>>>>>> ldapadd -x -w <password> -D cn=config -f <ldif file>
>>
>> -D cn=config was giving me an authentication error. I used
>> credentials, which work for ldapsearch and got a syntax error.
>>
>> vq@vq-HVM-domU:~$ ldapadd -x -w SECRET -D "cn=admin, dc=nodomain" -f
>> /usr/share/slapd/sssvlv.ldif
>> ldap_add: Invalid syntax (21)
>> additional info: objectClass: value #0 invalid per syntax
>>
> Is cn=admin,dc=nodomain the rootdn for the cn=config directory?
>
> Does
>
>     ldapsearch -x -w SECRET -D "cn=admin,dc=nodomain" -b cn=config
>
> work?
>
> What are the contents of sssvlv.ldif? (it's possible I made a typo, it was untested)
>
> Chris
>
>