Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- 1) Removed all files in /var/lib/openldap-data with exception of DB_CONFIG.
- 2) Removed all files in /etc/openldap/slapd.d
- 3) Execute:
- $ sudo slapadd -v -l /etc/openldap/slapd.ldif
- slapadd: line 1: databae #1 (dc=my-domain,dc=com) not configured to hold "cn=config"; did yo mean to use database #0 (cn=config)?
- _##### 25.97% eta none elapsed none spd 9.4 M/s
- Closing DB...
- It would appear as if it's using another file somewhere's, but I specifically tell it the following slapd.ldif file which has no reference of my-domain.
- ----
- #
- # See slapd.d(5) for details on configuration options.
- # This file should NOT be world readable.
- #
- dn: cn=config
- objectClass: olcGlobal
- cn: config
- #
- #
- # Define global ACLs to disable default read access.
- #
- olcArgsFile: /var/lib/run/slapd.args
- olcPidFile: /var/lib/run/slapd.pid
- #
- # Do not enable referrals until AFTER you have a working directory
- # service AND an understanding of referrals.
- #olcReferral: ldap://root.openldap.org
- #
- # Sample security restrictions
- # Require integrity protection (prevent hijacking)
- # Require 112-bit (3DES or better) encryption for updates
- # Require 64-bit encryption for simple bind
- #olcSecurity: ssf=1 update_ssf=112 simple_bind=64
- #
- # Load dynamic backend modules:
- #
- #dn: cn=module,cn=config
- #objectClass: olcModuleList
- #cn: module
- #olcModulepath: /usr/lib64/openldap/openldap
- #olcModuleload: back_bdb.la
- #olcModuleload: back_hdb.la
- #olcModuleload: back_ldap.la
- #olcModuleload: back_passwd.la
- #olcModuleload: back_shell.la
- dn: cn=schema,cn=config
- objectClass: olcSchemaConfig
- cn: schema
- include: file:///etc/openldap/schema/core.ldif
- # Frontend settings
- #
- dn: olcDatabase=frontend,cn=config
- objectClass: olcDatabaseConfig
- olcDatabase: frontend
- #
- # Sample global access control policy:
- # Root DSE: allow anyone to read it
- # Subschema (sub)entry DSE: allow anyone to read it
- # Other DSEs:
- # Allow self write access
- # Allow authenticated users read access
- # Allow anonymous users to authenticate
- #
- #olcAccess: to dn.base="" by * read
- #olcAccess: to dn.base="cn=Subschema" by * read
- #olcAccess: to *
- # by self write
- # by users read
- # by anonymous auth
- #
- # if no access controls are present, the default policy
- # allows anyone and everyone to read anything but restricts
- # updates to rootdn. (e.g., "access to * by * read")
- #
- # rootdn can always read and write EVERYTHING!
- #
- #######################################################################
- # BDB database definitions
- #######################################################################
- #
- dn: olcDatabase=bdb,cn=config
- objectClass: olcDatabaseConfig
- objectClass: olcBdbConfig
- olcDatabase: bdb
- olcSuffix: dc=mylan,dc=local
- olcRootDN: cn=Manager,dc=mylan,dc=local
- # Cleartext passwords, especially for the rootdn, should
- # be avoided. See slappasswd(8) and slapd-config(5) for details.
- # Use of strong authentication encouraged.
- olcRootPW: secret
- # The database directory MUST exist prior to running slapd AND
- # should only be accessible by the slapd and slap tools.
- # Mode 700 recommended.
- olcDbDirectory: /var/lib/openldap-data
- # Indices to maintain
- olcDbIndex: objectClass eq
Advertisement
Add Comment
Please, Sign In to add comment