写给所有OpenLDAP不能正常启动的人
现在入门的人更多用的是OpenLDAP,如果你的OpenLDAP正常安装,并经过make test没有问题,而启动的时候遇到了问题。那么请这样做/usr/local/libexec/slapd -d 256然后把出错信息贴出来,我尽量给大家解决。
写给所有OpenLDAP不能正常启动的人
谢谢,请问在哪儿找出错信息啊。我的系统是SOLARIS8,我看了/var/log/syslog和/var/adm/messages都没什么出错信息。写给所有OpenLDAP不能正常启动的人
原帖由 "朽木可雕"]谢谢,请问在哪儿找出错信息啊。我的系统是SOLARIS8,我看了/var/log/syslog和/var/adm/messages都没什么出错信息。启动的时候就可以看到,这样启动openldap,/usr/local/libexec/slapd -d 256
写给所有OpenLDAP不能正常启动的人
还是不行啊。我的系统是SOLARIS8
bash-2.05# /usr/local/libexec/slapd -d 256
Killed
bash-2.05# tail /var/log/syslog
Jul 29 00:05:57 ms1.darren.com sendmail: i6SG5vMR003544: from=<wjz@darren.com>;, size=539, class=0, nrcpts=1, msgid=<200407281605.i6SG5vMR003544@ms1.darren.com>;, proto=ESMTP, daemon=MSA, relay=
Jul 29 00:06:08 ms1.darren.com sendmail: i6SG5vMR003544: to=<mail5@test.com>;, ctladdr=<wjz@darren.com>; (1000/1), delay=00:00:11, xdelay=00:00:05, mailer=esmtp, pri=120539, relay=ms1.test.com. , dsn=2.0.0, stat=Sent (i6SG63S0001503 Message accepted for delivery)
Jul 29 00:09:10 ms1.darren.com sendmail: AUTH=server, relay=, authid=mail1, mech=LOGIN, bits=0
Jul 29 00:09:10 ms1.darren.com sendmail: i6SG9AYe003548: from=<mail1@darren.com>;, size=567, class=0, nrcpts=1, msgid=<200407281609.i6SG9AYe003548@ms1.darren.com>;, proto=ESMTP, daemon=MSA, relay=
Jul 29 00:09:14 ms1.darren.com sendmail: i6SG9AYe003548: to=<mail5@test.com>;, ctladdr=<mail1@darren.com>; (2001/1), delay=00:00:04, xdelay=00:00:04, mailer=esmtp, pri=120567, relay=ms1.test.com. , dsn=2.0.0, stat=Sent (i6SG9Ae1001515 Message accepted for delivery)
Jul 29 20:25:08 ms1.darren.com sendmail: i6TCOqcU003623: localhost did not issue MAIL/EXPN/VRFY/ETRN during connection to MSA
Jul 30 02:30:37 ms1.darren.com sendmail: AUTH=server, relay=, authid=wjz, mech=LOGIN, bits=0
Jul 30 02:30:54 ms1.darren.com sendmail: i6TIUb16004234: from=<wjz@darren.com>;, size=2446917, class=0, nrcpts=1, msgid=<200407291830.i6TIUb16004234@ms1.darren.com>;, proto=ESMTP, daemon=MSA, relay=
Jul 30 02:31:17 ms1.darren.com sendmail: i6TIUb16004234: to=<mail5@test.com>;, ctladdr=<wjz@darren.com>; (1000/1), delay=00:00:40, xdelay=00:00:23, mailer=esmtp, pri=2566917, relay=ms1.test.com. , dsn=2.0.0, stat=Sent (i6TIV1G9001495 Message accepted for delivery)
Jul 31 00:51:57 ms1.darren.com sendmail: i6UGpmH8004350: localhost did not issue MAIL/EXPN/VRFY/ETRN during connection to MSA
bash-2.05# tail /var/adm/messages
Aug 15 05:58:17 ms1.darren.com fdc: fd0 at fdc0
Aug 15 05:58:17 ms1.darren.com genunix: fd0 is /isa/fdc@1,3f0/fd@0,0
Aug 15 05:58:36 ms1.darren.com pcplusmp: pcplusmp: asy (asy) instance 0 vector 0x4 ioapic 0x1 intin 0x4 is bound to cpu 0
Aug 15 05:58:36 ms1.darren.com last message repeated 1 time
Aug 15 05:58:36 ms1.darren.com isa: ISA-device: asy0
Aug 15 05:58:36 ms1.darren.com genunix: asy0 is /isa/asy@1,3f8
Aug 15 05:58:36 ms1.darren.com pcplusmp: pcplusmp: asy (asy) instance #1 vector 0x3 ioapic 0x1 intin 0x3 is bound to cpu 0
Aug 15 05:58:36 ms1.darren.com last message repeated 1 time
Aug 15 05:58:36 ms1.darren.com isa: ISA-device: asy1
Aug 15 05:58:36 ms1.darren.com genunix: asy1 is /isa/asy@1,2f8
bash-2.05#
写给所有OpenLDAP不能正常启动的人
我的系统是solaris9,你的openldap是编译安装的吗?make test都通过了吗?openldap启动的时候如果指定了log level,应该是可以看到报错的,你这样试试/usr/local/libexec/slapd -d -1
写给所有OpenLDAP不能正常启动的人
是编译安装的啊,编译的时候没报什么错啊。我的配置文件有错吗?下面是我的配置文件,大家帮帮我吧。bash-2.05# more slapd.conf
# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.23.2.8 2003/05/24 23:19:14 kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /usr/local/etc/openldap/schema/core.schema
# Define global ACLs to disable default read access.
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org
pidfile /usr/local/var/slapd.pid
argsfile /usr/local/var/slapd.args
loglevel -1
replogfile /var/log/ldap.log
# Load dynamic backend modules:
# modulepath /usr/local/libexec/openldap
# moduleload back_bdb.la
# moduleload back_ldap.la
# moduleload back_ldbm.la
# moduleload back_passwd.la
# moduleload back_shell.la
# Sample security restrictions
# Require integrity protection (prevent hijacking)
# Require 112-bit (3DES or better) encryption for updates
# Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64
# Sample access control policy:
# Root DSE: allow anyone to read it
# Subschema (sub)entry DSE: allow anyone to read it
# Other DSEs:
# Allow self write access
# Allow authenticated users read access
# Allow anonymous users to authenticate
# Directives needed to implement policy:
# access to dn.base="" by * read
# access to dn.base="cn=Subschema" by * read
# access to *
# by self write
# by users read
# by anonymous auth
#
# if no access controls are present, the default policy is:
# Allow read by all
#
# rootdn can always write!
#######################################################################
# ldbm database definitions
#######################################################################
database bdb
suffix "dc=darren,dc=com"
rootdn "cn=root,dc=darren,dc=com"
# Cleartext passwords, especially for the rootdn, should
# be avoid.See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw 1234
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory /usr/local/var/openldap-data
# Indices to maintain
index objectClass eq
defaultaccess none
access to dn=".*,dc=darren,dc=com"
by self read
by dn="cn=root,dc=darren,dc=com" write
by * none
access to *
by self read
by dn="cn=root,dc=darren,dc=com" write
by * none
bash-2.05#
写给所有OpenLDAP不能正常启动的人
1。access to dn=".*,dc=darren,dc=com"不要再用这样的acl格式,openldap2.1.x已经不再支持2。把其余的schema也include进来
3。把ACL部分先写成这样:
access to *
by self write
by * read
然后重新启动/usr/local/libexec/slapd -d -1,看看会有什么错误