openldap 问题..

kinux

我在freebsd上用ports安裝了openldap..
改了slapd.conf
suffix          "dc=test,dc=example,dc=org"
rootdn          "cn=Manager,dc=test,dc=example,dc=org"

之后运行
su root -c /usr/local/libexec/slapd

看到slapd是运行了..
# sockstat -4 | grep 389
root     slapd      187    9 tcp4   *:389                 *:*
# netstat -a | grep ldap
tcp4       0      0  *.ldap                 *.*                    LISTEN
tcp6       0      0  *.ldap                 *.*                    LISTEN

但是当用ldapsearch时就不行了..

# ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts
ldap_bind: Can't contact LDAP server (-1)

这是什么问题??

我是看这里做的..
http://www.openldap.org/doc/admin22/quickstart.html

hzqbbc

原帖由 "kinux" 发表：
我在freebsd上用ports安裝了openldap..
改了slapd.conf
suffix          "dc=test,dc=example,dc=org"
rootdn          "cn=Manager,dc=test,dc=example,dc=org"

之后运行
su root -c /usr/local/libexec/sla..........

看看你的slapd.conf里关于acl的设置？？

如果acl设置不允许这样匿名search也许会提示错误。但不应该是Can't contact ldap server哦。。怪事。。你或者关闭slapd，用debug模式启动看看（让它在前台运行），可以看到很多debug信息，知道有无问题的了。

slapd -u ldap -d 16  看看。

kinux

这是什么意思??

1. test# /usr/local/libexec/slapd -u ldap -d 16
   
2. @(#) $OpenLDAP: slapd 2.2.6 (Mar 24 2004 20:54:02) $
   
3.         kinux@test.example.com:/usr/ports/net/openldap22-server/work/openldap-
   
4. 2.2.6/servers/slapd
   
5. daemon: bind(8) failed errno=48 (Address already in use)
   
6. daemon: bind(8) failed errno=48 (Address already in use)
   
7. slapd stopped.
   
8. connections_destroy: nothing to destroy.
   
9. 
   
10. test# /usr/local/libexec/slapd -u ldap -d 63
    
11. @(#) $OpenLDAP: slapd 2.2.6 (Mar 24 2004 20:54:02) $
    
12.         kinux@test.example.com:/usr/ports/net/openldap22-server/work/openldap-
    
13. 2.2.6/servers/slapd
    
14. daemon_init: <null>;
    
15. daemon_init: listen on ldap:///
    
16. daemon_init: 1 listeners to open...
    
17. ldap_url_parse_ext(ldap:///)
    
18. daemon: bind(8) failed errno=48 (Address already in use)
    
19. daemon: bind(8) failed errno=48 (Address already in use)
    
20. slap_open_listener: failed on ldap:///
    
21. slapd stopped.
    
22. connections_destroy: nothing to destroy.
    
23. 
    
24. test# /usr/local/libexec/slapd -u ldap -d 63 -h ldap://test.example.com:389
    
25. @(#) $OpenLDAP: slapd 2.2.6 (Mar 24 2004 20:54:02) $
    
26.         kinux@test.example.com:/usr/ports/net/openldap22-server/work/openldap-
    
27. 2.2.6/servers/slapd
    
28. daemon_init: ldap://test.example.com:389
    
29. daemon_init: listen on ldap://test.example.com:389
    
30. daemon_init: 1 listeners to open...
    
31. ldap_url_parse_ext(ldap://test.example.com:389)
    
32. daemon: initialized ldap://test.example.com:389
    
33. daemon_init: 1 listeners opened
    
34. slapd init: initiated server.
    
35. bdb_initialize: initialize BDB backend
    
36. bdb_initialize: Sleepycat Software: Berkeley DB 4.2.52: (December  3, 2003)
    
37. could not open config file "/usr/local/etc/openldap/slapd.conf": Permission deni
    
38. ed (13)
    
39. slapd shutdown: freeing system resources.
    
40. slapd stopped.
    
41. connections_destroy: nothing to destroy.

复制代码

py

/usr/local/libexec/slapd -u ldap -d 16之前先kill掉以前的slapd进程呀，提示你端口冲突呢，另外可以看看你的syslog信息，会有很详细的错误信息的

i2era

ttyv0:
#/usr/local/libexec/slapd -u ldap -d 16

ttyv1:
#ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts
version: 2

#
# filter: (objectclass=*)
# requesting: namingContexts
#

#
dn:
namingContexts: dc=localhost,dc=my.domain

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

kinux

# /usr/local/libexec/slapd -u ldap -d 16
@(#) $OpenLDAP: slapd 2.2.6 (Mar 24 2004 20:54:02) $
        kinux@test.example.com:/usr/ports/net/openldap22-server/work/openldap-
2.2.6/servers/slapd
daemon: bind( failed errno=48 (Address already in use)
daemon: bind( failed errno=48 (Address already in use)
slapd stopped.
connections_destroy: nothing to destroy.



# slaptest
config file testing succeeded

i2era

原帖由 "kinux" 发表：
# /usr/local/libexec/slapd -u ldap -d 16
@(#) $OpenLDAP: slapd 2.2.6 (Mar 24 2004 20:54:02) $
        kinux@test.example.com:/usr/ports/net/openldap22-server/work/openldap-
2.2.6/servers/slapd
..........

sockstat看看还有slapd没？全杀掉

kinux

原帖由 "i2era" 发表：

sockstat看看还有slapd没？全杀掉

改是全杀掉了.. 可是还是一样..