- 论坛徽章:
- 0
|
求救:启动LDAP出错
@(#) $OpenLDAP: slapd 2.3.4 (Jun 30 2005 14:48:47) $
root@globus4403:/usr/hhz/openldap-2.3.4/servers/slapd
daemon: IPv6 socket() failed errno=97 (Address family not supported by protocol)
/usr/local/etc/openldap/slapd.conf: line 80: expecting <what>; got "dc"
<access clause>; ::= access to <what>; [ by <who>; <access>; [ <control>; ] ]+
<what>; ::= * | [dn[.<dnstyle>;]=<DN>;] [filter=<filter>;] [attrs=<attrlist>;]
<attrlist>; ::= <attr>; [val[.<attrstyle>;]=<value>;] | <attr>; , <attrlist>;
<attr>; ::= <attrname>; | entry | children
<who>; ::= [ * | anonymous | users | self | dn[.<dnstyle>;]=<DN>; ]
[ realanonymous | realusers | realself | realdn[.<dnstyle>;]=<DN>; ]
[dnattr=<attrname>;]
[realdnattr=<attrname>;]
[group[/<objectclass>;[/<attrname>;]][.<style>;]=<group>;]
[peername[.<peernamestyle>;]=<peer>;] [sockname[.<style>;]=<name>;]
[domain[.<domainstyle>;]=<domain>;] [sockurl[.<style>;]=<url>;]
[ssf=<n>;] [transport_ssf=<n>;] [tls_ssf=<n>;] [sasl_ssf=<n>;]
<style>; ::= exact | regex | base(Object)
<dnstyle>; ::= base(Object) | one(level) | sub(tree) | children | exact | regex
<attrstyle>; ::= exact | regex | base(Object) | one(level) | sub(tree) | children
<peernamestyle>; ::= exact | regex | ip | path
<domainstyle>; ::= exact | regex | base(Object) | sub(tree)
<access>; ::= [[real]self]{<level>;|<priv>;}
<level>; ::= none|disclose|auth|compare|search|read|{write|add|delete}|manage
<priv>; ::= {=|+|-}{0|d|x|c|s|r|{w|a|z}|m}+
<control>; ::= [ stop | continue | break ]
slapd.conf 内容如下:
76 #ACL configure 以下内容定义访问控制
77 access to dn=“.*, dc=uestc, dc=edu.cn” attr=userPassword
78 by dn=“cn=root, dc=uestc, dc=edu.cn” write
79 by self write
80 by * read
81
82 access to dn=“.*, dc=uestc, dc=edu.cn”
83 by * read |
|