寫(xiě)給所有OpenLDAP不能正常啟動(dòng)的人

py

現(xiàn)在入門(mén)的人更多用的是OpenLDAP，如果你的OpenLDAP正常安裝，并經(jīng)過(guò)make test沒(méi)有問(wèn)題，而啟動(dòng)的時(shí)候遇到了問(wèn)題。那么請(qǐng)這樣做/usr/local/libexec/slapd -d 256
然后把出錯(cuò)信息貼出來(lái)，我盡量給大家解決。

朽木可雕

謝謝，請(qǐng)問(wèn)在哪兒找出錯(cuò)信息啊。我的系統(tǒng)是SOLARIS8，我看了/var/log/syslog和/var/adm/messages都沒(méi)什么出錯(cuò)信息。

py

[quote]原帖由 "朽木可雕"]謝謝，請(qǐng)問(wèn)在哪兒找出錯(cuò)信息啊。我的系統(tǒng)是SOLARIS8，我看了/var/log/syslog和/var/adm/messages都沒(méi)什么出錯(cuò)信息。[/quote 發(fā)表：

啟動(dòng)的時(shí)候就可以看到，這樣啟動(dòng)openldap，/usr/local/libexec/slapd -d 256

朽木可雕

還是不行啊。
我的系統(tǒng)是SOLARIS8

1. 
   
2. bash-2.05# /usr/local/libexec/slapd -d 256
   
3. Killed
   
4. bash-2.05# tail /var/log/syslog
   
5. Jul 29 00:05:57 ms1.darren.com sendmail[3544]: [ID 801593 mail.info] i6SG5vMR003544: from=<wjz@darren.com>;, size=539, class=0, nrcpts=1, msgid=<200407281605.i6SG5vMR003544@ms1.darren.com>;, proto=ESMTP, daemon=MSA, relay=[10.1.2.19]
   
6. Jul 29 00:06:08 ms1.darren.com sendmail[3546]: [ID 801593 mail.info] i6SG5vMR003544: to=<mail5@test.com>;, ctladdr=<wjz@darren.com>; (1000/1), delay=00:00:11, xdelay=00:00:05, mailer=esmtp, pri=120539, relay=ms1.test.com. [10.1.2.52], dsn=2.0.0, stat=Sent (i6SG63S0001503 Message accepted for delivery)
   
7. Jul 29 00:09:10 ms1.darren.com sendmail[3548]: [ID 702911 mail.info] AUTH=server, relay=[10.1.2.19], authid=mail1, mech=LOGIN, bits=0
   
8. Jul 29 00:09:10 ms1.darren.com sendmail[3548]: [ID 801593 mail.info] i6SG9AYe003548: from=<mail1@darren.com>;, size=567, class=0, nrcpts=1, msgid=<200407281609.i6SG9AYe003548@ms1.darren.com>;, proto=ESMTP, daemon=MSA, relay=[10.1.2.19]
   
9. Jul 29 00:09:14 ms1.darren.com sendmail[3550]: [ID 801593 mail.info] i6SG9AYe003548: to=<mail5@test.com>;, ctladdr=<mail1@darren.com>; (2001/1), delay=00:00:04, xdelay=00:00:04, mailer=esmtp, pri=120567, relay=ms1.test.com. [10.1.2.52], dsn=2.0.0, stat=Sent (i6SG9Ae1001515 Message accepted for delivery)
   
10. Jul 29 20:25:08 ms1.darren.com sendmail[3623]: [ID 801593 mail.info] i6TCOqcU003623: localhost [127.0.0.1] did not issue MAIL/EXPN/VRFY/ETRN during connection to MSA
    
11. Jul 30 02:30:37 ms1.darren.com sendmail[4234]: [ID 702911 mail.info] AUTH=server, relay=[10.1.2.19], authid=wjz, mech=LOGIN, bits=0
    
12. Jul 30 02:30:54 ms1.darren.com sendmail[4234]: [ID 801593 mail.info] i6TIUb16004234: from=<wjz@darren.com>;, size=2446917, class=0, nrcpts=1, msgid=<200407291830.i6TIUb16004234@ms1.darren.com>;, proto=ESMTP, daemon=MSA, relay=[10.1.2.19]
    
13. Jul 30 02:31:17 ms1.darren.com sendmail[4236]: [ID 801593 mail.info] i6TIUb16004234: to=<mail5@test.com>;, ctladdr=<wjz@darren.com>; (1000/1), delay=00:00:40, xdelay=00:00:23, mailer=esmtp, pri=2566917, relay=ms1.test.com. [10.1.2.52], dsn=2.0.0, stat=Sent (i6TIV1G9001495 Message accepted for delivery)
    
14. Jul 31 00:51:57 ms1.darren.com sendmail[4350]: [ID 801593 mail.info] i6UGpmH8004350: localhost [127.0.0.1] did not issue MAIL/EXPN/VRFY/ETRN during connection to MSA
    
15. bash-2.05# tail /var/adm/messages
    
16. Aug 15 05:58:17 ms1.darren.com fdc: [ID 114370 kern.info] fd0 at fdc0
    
17. Aug 15 05:58:17 ms1.darren.com genunix: [ID 936769 kern.info] fd0 is /isa/fdc@1,3f0/fd@0,0
    
18. Aug 15 05:58:36 ms1.darren.com pcplusmp: [ID 637496 kern.info] pcplusmp: asy (asy) instance 0 vector 0x4 ioapic 0x1 intin 0x4 is bound to cpu 0
    
19. Aug 15 05:58:36 ms1.darren.com last message repeated 1 time
    
20. Aug 15 05:58:36 ms1.darren.com isa: [ID 202937 kern.info] ISA-device: asy0
    
21. Aug 15 05:58:36 ms1.darren.com genunix: [ID 936769 kern.info] asy0 is /isa/asy@1,3f8
    
22. Aug 15 05:58:36 ms1.darren.com pcplusmp: [ID 398438 kern.info] pcplusmp: asy (asy) instance #1 vector 0x3 ioapic 0x1 intin 0x3 is bound to cpu 0
    
23. Aug 15 05:58:36 ms1.darren.com last message repeated 1 time
    
24. Aug 15 05:58:36 ms1.darren.com isa: [ID 202937 kern.info] ISA-device: asy1
    
25. Aug 15 05:58:36 ms1.darren.com genunix: [ID 936769 kern.info] asy1 is /isa/asy@1,2f8
    
26. bash-2.05#
    
27. 
    

復(fù)制代碼

py

我的系統(tǒng)是solaris9，你的openldap是編譯安裝的嗎？make test都通過(guò)了嗎？
openldap啟動(dòng)的時(shí)候如果指定了log level，應(yīng)該是可以看到報(bào)錯(cuò)的，你這樣試試/usr/local/libexec/slapd -d -1

朽木可雕

是編譯安裝的啊，編譯的時(shí)候沒(méi)報(bào)什么錯(cuò)啊。我的配置文件有錯(cuò)嗎？下面是我的配置文件，大家?guī)蛶臀野伞?br />

1. 
   
2. bash-2.05# more slapd.conf
   
3. # $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.23.2.8 2003/05/24 23:19:14 kurt Exp $
   
4. #
   
5. # See slapd.conf(5) for details on configuration options.
   
6. # This file should NOT be world readable.
   
7. #
   
8. include         /usr/local/etc/openldap/schema/core.schema
   
9. 
   
10. # Define global ACLs to disable default read access.
    
11. 
    
12. # Do not enable referrals until AFTER you have a working directory
    
13. # service AND an understanding of referrals.
    
14. #referral       ldap://root.openldap.org
    
15. 
    
16. pidfile         /usr/local/var/slapd.pid
    
17. argsfile        /usr/local/var/slapd.args
    
18. 
    
19. 
    
20. 
    
21. 
    
22. loglevel -1
    
23. replogfile /var/log/ldap.log
    
24. 
    
25. 
    
26. 
    
27. # Load dynamic backend modules:
    
28. # modulepath    /usr/local/libexec/openldap
    
29. # moduleload    back_bdb.la
    
30. # moduleload    back_ldap.la
    
31. # moduleload    back_ldbm.la
    
32. # moduleload    back_passwd.la
    
33. # moduleload    back_shell.la
    
34. 
    
35. # Sample security restrictions
    
36. #       Require integrity protection (prevent hijacking)
    
37. #       Require 112-bit (3DES or better) encryption for updates
    
38. #       Require 63-bit encryption for simple bind
    
39. # security ssf=1 update_ssf=112 simple_bind=64
    
40. 
    
41. # Sample access control policy:
    
42. #       Root DSE: allow anyone to read it
    
43. #       Subschema (sub)entry DSE: allow anyone to read it
    
44. #       Other DSEs:
    
45. #               Allow self write access
    
46. #               Allow authenticated users read access
    
47. #               Allow anonymous users to authenticate
    
48. #       Directives needed to implement policy:
    
49. # access to dn.base="" by * read
    
50. # access to dn.base="cn=Subschema" by * read
    
51. # access to *
    
52. #       by self write
    
53. #       by users read
    
54. #       by anonymous auth
    
55. #
    
56. # if no access controls are present, the default policy is:
    
57. #       Allow read by all
    
58. #
    
59. # rootdn can always write!
    
60. 
    
61. #######################################################################
    
62. # ldbm database definitions
    
63. #######################################################################
    
64. 
    
65. database        bdb
    
66. suffix          "dc=darren,dc=com"
    
67. rootdn          "cn=root,dc=darren,dc=com"
    
68. # Cleartext passwords, especially for the rootdn, should
    
69. # be avoid.  See slappasswd(8) and slapd.conf(5) for details.
    
70. # Use of strong authentication encouraged.
    
71. rootpw          1234
    
72. # The database directory MUST exist prior to running slapd AND
    
73. # should only be accessible by the slapd and slap tools.
    
74. # Mode 700 recommended.
    
75. directory       /usr/local/var/openldap-data
    
76. # Indices to maintain
    
77. index   objectClass     eq
    
78. 
    
79. 
    
80. defaultaccess none
    
81. 
    
82. access to dn=".*,dc=darren,dc=com"
    
83. by self read
    
84. by dn="cn=root,dc=darren,dc=com" write
    
85. by * none
    
86. 
    
87. access to *
    
88. by self read
    
89. by dn="cn=root,dc=darren,dc=com" write
    
90. by * none
    
91. bash-2.05#
    

復(fù)制代碼

py

1。access to dn=".*,dc=darren,dc=com"不要再用這樣的acl格式，openldap2.1.x已經(jīng)不再支持
2。把其余的schema也include進(jìn)來(lái)
3。把ACL部分先寫(xiě)成這樣：
access to *
        by self write
        by * read
然后重新啟動(dòng)/usr/local/libexec/slapd -d -1，看看會(huì)有什么錯(cuò)誤

朽木可雕

試了，還是不行，日志也沒(méi)任何顯示。請(qǐng)問(wèn)為什么�。课叶伎旒彼懒�。

py

裝了這么多次openldap，還沒(méi)這樣過(guò)，呵呵，再想想辦法吧，你是裝的openldap的新版本嗎？