py 发表于 2004-08-14 21:34

写给所有OpenLDAP不能正常启动的人

现在入门的人更多用的是OpenLDAP,如果你的OpenLDAP正常安装,并经过make test没有问题,而启动的时候遇到了问题。那么请这样做/usr/local/libexec/slapd -d 256
然后把出错信息贴出来,我尽量给大家解决。

朽木可雕 发表于 2004-08-15 21:29

写给所有OpenLDAP不能正常启动的人

谢谢,请问在哪儿找出错信息啊。我的系统是SOLARIS8,我看了/var/log/syslog和/var/adm/messages都没什么出错信息。

andrewleading_h 发表于 2004-08-16 07:26

py 发表于 2004-08-16 08:53

写给所有OpenLDAP不能正常启动的人

原帖由 "朽木可雕"]谢谢,请问在哪儿找出错信息啊。我的系统是SOLARIS8,我看了/var/log/syslog和/var/adm/messages都没什么出错信息。

启动的时候就可以看到,这样启动openldap,/usr/local/libexec/slapd -d 256

朽木可雕 发表于 2004-08-16 11:12

写给所有OpenLDAP不能正常启动的人

还是不行啊。
我的系统是SOLARIS8

bash-2.05# /usr/local/libexec/slapd -d 256
Killed
bash-2.05# tail /var/log/syslog
Jul 29 00:05:57 ms1.darren.com sendmail: i6SG5vMR003544: from=<wjz@darren.com>;, size=539, class=0, nrcpts=1, msgid=<200407281605.i6SG5vMR003544@ms1.darren.com>;, proto=ESMTP, daemon=MSA, relay=
Jul 29 00:06:08 ms1.darren.com sendmail: i6SG5vMR003544: to=<mail5@test.com>;, ctladdr=<wjz@darren.com>; (1000/1), delay=00:00:11, xdelay=00:00:05, mailer=esmtp, pri=120539, relay=ms1.test.com. , dsn=2.0.0, stat=Sent (i6SG63S0001503 Message accepted for delivery)
Jul 29 00:09:10 ms1.darren.com sendmail: AUTH=server, relay=, authid=mail1, mech=LOGIN, bits=0
Jul 29 00:09:10 ms1.darren.com sendmail: i6SG9AYe003548: from=<mail1@darren.com>;, size=567, class=0, nrcpts=1, msgid=<200407281609.i6SG9AYe003548@ms1.darren.com>;, proto=ESMTP, daemon=MSA, relay=
Jul 29 00:09:14 ms1.darren.com sendmail: i6SG9AYe003548: to=<mail5@test.com>;, ctladdr=<mail1@darren.com>; (2001/1), delay=00:00:04, xdelay=00:00:04, mailer=esmtp, pri=120567, relay=ms1.test.com. , dsn=2.0.0, stat=Sent (i6SG9Ae1001515 Message accepted for delivery)
Jul 29 20:25:08 ms1.darren.com sendmail: i6TCOqcU003623: localhost did not issue MAIL/EXPN/VRFY/ETRN during connection to MSA
Jul 30 02:30:37 ms1.darren.com sendmail: AUTH=server, relay=, authid=wjz, mech=LOGIN, bits=0
Jul 30 02:30:54 ms1.darren.com sendmail: i6TIUb16004234: from=<wjz@darren.com>;, size=2446917, class=0, nrcpts=1, msgid=<200407291830.i6TIUb16004234@ms1.darren.com>;, proto=ESMTP, daemon=MSA, relay=
Jul 30 02:31:17 ms1.darren.com sendmail: i6TIUb16004234: to=<mail5@test.com>;, ctladdr=<wjz@darren.com>; (1000/1), delay=00:00:40, xdelay=00:00:23, mailer=esmtp, pri=2566917, relay=ms1.test.com. , dsn=2.0.0, stat=Sent (i6TIV1G9001495 Message accepted for delivery)
Jul 31 00:51:57 ms1.darren.com sendmail: i6UGpmH8004350: localhost did not issue MAIL/EXPN/VRFY/ETRN during connection to MSA
bash-2.05# tail /var/adm/messages
Aug 15 05:58:17 ms1.darren.com fdc: fd0 at fdc0
Aug 15 05:58:17 ms1.darren.com genunix: fd0 is /isa/fdc@1,3f0/fd@0,0
Aug 15 05:58:36 ms1.darren.com pcplusmp: pcplusmp: asy (asy) instance 0 vector 0x4 ioapic 0x1 intin 0x4 is bound to cpu 0
Aug 15 05:58:36 ms1.darren.com last message repeated 1 time
Aug 15 05:58:36 ms1.darren.com isa: ISA-device: asy0
Aug 15 05:58:36 ms1.darren.com genunix: asy0 is /isa/asy@1,3f8
Aug 15 05:58:36 ms1.darren.com pcplusmp: pcplusmp: asy (asy) instance #1 vector 0x3 ioapic 0x1 intin 0x3 is bound to cpu 0
Aug 15 05:58:36 ms1.darren.com last message repeated 1 time
Aug 15 05:58:36 ms1.darren.com isa: ISA-device: asy1
Aug 15 05:58:36 ms1.darren.com genunix: asy1 is /isa/asy@1,2f8
bash-2.05#

py 发表于 2004-08-16 12:22

写给所有OpenLDAP不能正常启动的人

我的系统是solaris9,你的openldap是编译安装的吗?make test都通过了吗?
openldap启动的时候如果指定了log level,应该是可以看到报错的,你这样试试/usr/local/libexec/slapd -d -1

朽木可雕 发表于 2004-08-17 10:57

写给所有OpenLDAP不能正常启动的人

是编译安装的啊,编译的时候没报什么错啊。我的配置文件有错吗?下面是我的配置文件,大家帮帮我吧。

bash-2.05# more slapd.conf
# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.23.2.8 2003/05/24 23:19:14 kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include         /usr/local/etc/openldap/schema/core.schema

# Define global ACLs to disable default read access.

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral       ldap://root.openldap.org

pidfile         /usr/local/var/slapd.pid
argsfile      /usr/local/var/slapd.args




loglevel -1
replogfile /var/log/ldap.log



# Load dynamic backend modules:
# modulepath    /usr/local/libexec/openldap
# moduleload    back_bdb.la
# moduleload    back_ldap.la
# moduleload    back_ldbm.la
# moduleload    back_passwd.la
# moduleload    back_shell.la

# Sample security restrictions
#       Require integrity protection (prevent hijacking)
#       Require 112-bit (3DES or better) encryption for updates
#       Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64

# Sample access control policy:
#       Root DSE: allow anyone to read it
#       Subschema (sub)entry DSE: allow anyone to read it
#       Other DSEs:
#               Allow self write access
#               Allow authenticated users read access
#               Allow anonymous users to authenticate
#       Directives needed to implement policy:
# access to dn.base="" by * read
# access to dn.base="cn=Subschema" by * read
# access to *
#       by self write
#       by users read
#       by anonymous auth
#
# if no access controls are present, the default policy is:
#       Allow read by all
#
# rootdn can always write!

#######################################################################
# ldbm database definitions
#######################################################################

database      bdb
suffix          "dc=darren,dc=com"
rootdn          "cn=root,dc=darren,dc=com"
# Cleartext passwords, especially for the rootdn, should
# be avoid.See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw          1234
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory       /usr/local/var/openldap-data
# Indices to maintain
index   objectClass   eq


defaultaccess none

access to dn=".*,dc=darren,dc=com"
by self read
by dn="cn=root,dc=darren,dc=com" write
by * none

access to *
by self read
by dn="cn=root,dc=darren,dc=com" write
by * none
bash-2.05#

py 发表于 2004-08-17 12:55

写给所有OpenLDAP不能正常启动的人

1。access to dn=".*,dc=darren,dc=com"不要再用这样的acl格式,openldap2.1.x已经不再支持
2。把其余的schema也include进来
3。把ACL部分先写成这样:
access to *
      by self write
      by * read
然后重新启动/usr/local/libexec/slapd -d -1,看看会有什么错误

朽木可雕 发表于 2004-08-18 15:27

写给所有OpenLDAP不能正常启动的人

试了,还是不行,日志也没任何显示。请问为什么啊?我都快急死了。

py 发表于 2004-08-18 16:02

写给所有OpenLDAP不能正常启动的人

装了这么多次openldap,还没这样过,呵呵,再想想办法吧,你是装的openldap的新版本吗?
页: [1] 2 3 4 5 6 7 8 9 10
查看完整版本: 写给所有OpenLDAP不能正常启动的人