Otdfbt

Multi tool use

Is a hash a zero-knowledge proof?

How should I push back against my job assigning "homework"?

The qvolume of an integer

What is a simple, physical situation where complex numbers emerge naturally?

How to decline physical affection from a child whose parents are pressuring them?

arcpy.GetParameterAsText not passing arguments to script?

How did the Zip Chip and RocketChip accelerators work for the Apple II?

Can an old DSLR be upgraded to match modern smartphone image quality

Rotated Position of Integers

Is American Express widely accepted in France?

Explain Ant-Man's "not it" scene from Avengers: Endgame

Did airlines fly their aircraft slower in response to oil prices in the 1970s?

California: "For quality assurance, this phone call is being recorded"

Are there regional foods in Westeros?

Can you use a concentration spell while using Mantle of Majesty?

Make a formula to get the highest score

Is it possible to kill all life on Earth?

Select row of data if next row contains zero

Is there any Biblical Basis for 400 years of silence between Old and New Testament?

What's the most polite way to tell a manager "shut up and let me work"?

Accidentally cashed a check twice

Applicants clearly not having the skills they advertise

Opposite of "Squeaky wheel gets the grease"

Do adult Russians normally hand-write Cyrillic as cursive or as block letters?

OpenLDAP check database

OpenLdap PasswordOpenLDAP MySQL Integration - Database Location for OpenLDAP back-sql metadata mapping tablesopenldap and digest-md5: no secret in databaseHow to add ACIs to OpenLDAP properlyhow to self change attrs in openldaphow to set permission the manager in openldap?OpenLDAP: Index to olcDatabase not respectedOpenLdap. Setting a database as a branch of another databaseslapd with mozillaAbPersonAlpha schemaCreating an OpenLdap administrator group on LDAP server

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

0

favorite

I'm using now OpenLDAP server ( slapd ) to manage my authentication / authorization mechanism. I have an issue:

something slapd process doesn't restart for error in database ( about some entry ) or configuration error.

Now, I use to check configuration sldaptest -F /etc/ldap/slapd.d/ command line, but to check any corruption errors in database ?

I have daily dump in ldif of my datas, but I would like be sure that this dump is error-free.

Thanks

Details:

OS: Ubuntu 14.04
kernel:3.13.0-43generic
slapd version: 2.4.31

My script:

dn: olcDatabase=1hdb,cn=config
changetype: modify
replace: olcAccess
olcAccess: 0to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=example,dc=com" write by * none
olcAccess: 1to dn.base="" by * read
olcAccess: 2to * by self write by dn="cn=admin,dc=example,dc=com" write by * read
olcAccess: 3to dn.subtree="dc=th,dc=company,dc=com" by set="[cn=app_all,ou=Groups,dc=th,dc=company,dc=com]/member*" write by * read

openldap

share|improve this question

edited Jan 13 '15 at 6:48

masegaloeh

16.5k74488

asked Jan 8 '15 at 5:48

Giorgio DesideriGiorgio Desideri

15

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Before suspecting actual corruption, make sure that your LDAP data files are actually owned by openldap user (or whatever account your slapd runs as). I've been bit by "Oops, datafiles or the directory they are in is owned by root" thing way too many times.
  
  – Janne Pikkarainen
  Jan 8 '15 at 8:47
  

  
  
  
  


• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  Instead editing title with solved word, please post the solution in answer section below and mark it accepted.
  
  – masegaloeh
  Jan 13 '15 at 6:48
  

  
  
  
  

add a comment | 

0

favorite

I'm using now OpenLDAP server ( slapd ) to manage my authentication / authorization mechanism. I have an issue:

something slapd process doesn't restart for error in database ( about some entry ) or configuration error.

Now, I use to check configuration sldaptest -F /etc/ldap/slapd.d/ command line, but to check any corruption errors in database ?

I have daily dump in ldif of my datas, but I would like be sure that this dump is error-free.

Thanks

Details:

OS: Ubuntu 14.04
kernel:3.13.0-43generic
slapd version: 2.4.31

My script:

dn: olcDatabase=1hdb,cn=config
changetype: modify
replace: olcAccess
olcAccess: 0to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=example,dc=com" write by * none
olcAccess: 1to dn.base="" by * read
olcAccess: 2to * by self write by dn="cn=admin,dc=example,dc=com" write by * read
olcAccess: 3to dn.subtree="dc=th,dc=company,dc=com" by set="[cn=app_all,ou=Groups,dc=th,dc=company,dc=com]/member*" write by * read

openldap

share|improve this question

edited Jan 13 '15 at 6:48

masegaloeh

16.5k74488

asked Jan 8 '15 at 5:48

Giorgio DesideriGiorgio Desideri

15

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Before suspecting actual corruption, make sure that your LDAP data files are actually owned by openldap user (or whatever account your slapd runs as). I've been bit by "Oops, datafiles or the directory they are in is owned by root" thing way too many times.
  
  – Janne Pikkarainen
  Jan 8 '15 at 8:47
  

  
  
  
  


• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  Instead editing title with solved word, please post the solution in answer section below and mark it accepted.
  
  – masegaloeh
  Jan 13 '15 at 6:48
  

  
  
  
  

add a comment | 

favorite

I'm using now OpenLDAP server ( slapd ) to manage my authentication / authorization mechanism. I have an issue:

something slapd process doesn't restart for error in database ( about some entry ) or configuration error.

Now, I use to check configuration sldaptest -F /etc/ldap/slapd.d/ command line, but to check any corruption errors in database ?

I have daily dump in ldif of my datas, but I would like be sure that this dump is error-free.

Thanks

Details:

OS: Ubuntu 14.04
kernel:3.13.0-43generic
slapd version: 2.4.31

My script:

dn: olcDatabase=1hdb,cn=config
changetype: modify
replace: olcAccess
olcAccess: 0to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=example,dc=com" write by * none
olcAccess: 1to dn.base="" by * read
olcAccess: 2to * by self write by dn="cn=admin,dc=example,dc=com" write by * read
olcAccess: 3to dn.subtree="dc=th,dc=company,dc=com" by set="[cn=app_all,ou=Groups,dc=th,dc=company,dc=com]/member*" write by * read

openldap

share|improve this question

edited Jan 13 '15 at 6:48

masegaloeh

16.5k74488

asked Jan 8 '15 at 5:48

Giorgio DesideriGiorgio Desideri

15

dn: olcDatabase=1hdb,cn=config
changetype: modify
replace: olcAccess
olcAccess: 0to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=example,dc=com" write by * none
olcAccess: 1to dn.base="" by * read
olcAccess: 2to * by self write by dn="cn=admin,dc=example,dc=com" write by * read
olcAccess: 3to dn.subtree="dc=th,dc=company,dc=com" by set="[cn=app_all,ou=Groups,dc=th,dc=company,dc=com]/member*" write by * read

share|improve this question

edited Jan 13 '15 at 6:48

masegaloeh

16.5k74488

asked Jan 8 '15 at 5:48

Giorgio DesideriGiorgio Desideri

15

share|improve this question

edited Jan 13 '15 at 6:48

masegaloeh

16.5k74488

asked Jan 8 '15 at 5:48

Giorgio DesideriGiorgio Desideri

15

edited Jan 13 '15 at 6:48

masegaloeh

16.5k74488

edited Jan 13 '15 at 6:48

masegaloeh

16.5k74488

asked Jan 8 '15 at 5:48

Giorgio DesideriGiorgio Desideri

15

asked Jan 8 '15 at 5:48

Giorgio DesideriGiorgio Desideri

15

1 Answer
1

active

oldest

votes

0

I would assume that if the dump finishes without an error, you can assume it to be correct. To be extra sure, you could configure a separate database inside OpenLDAP and import the dump back into this db.

Beside that, having random data or config errors is not normal, this should never happen. You need to investigate this and fix the problem causing it.

share|improve this answer

answered Jan 8 '15 at 8:15

Sven♦Sven

88.4k10150202

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  sometimes add new ACL by ldapmodify using replace of all existing plus new ones, and during restart of slapd, error of bad configuration happens. So I need to clear dump of configuration and import again.
  
  – Giorgio Desideri
  Jan 8 '15 at 11:31
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Solved. Inside script there are some spaces or white characters that I cannot see inside LDIF exports.
  
  – Giorgio Desideri
  Jan 13 '15 at 6:46
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  ACL script present need to have space at the end of the line, in line 2-3 dn: olcDatabase=1hdb,cn=config<space> changetype: modify<space> replace: olcAccess<space> ...
  
  – Giorgio Desideri
  Jan 13 '15 at 7:04
  

  
  
  
  

add a comment | 

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f658030%2fopenldap-check-database%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

0

I would assume that if the dump finishes without an error, you can assume it to be correct. To be extra sure, you could configure a separate database inside OpenLDAP and import the dump back into this db.

Beside that, having random data or config errors is not normal, this should never happen. You need to investigate this and fix the problem causing it.

share|improve this answer

answered Jan 8 '15 at 8:15

Sven♦Sven

88.4k10150202

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  sometimes add new ACL by ldapmodify using replace of all existing plus new ones, and during restart of slapd, error of bad configuration happens. So I need to clear dump of configuration and import again.
  
  – Giorgio Desideri
  Jan 8 '15 at 11:31
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Solved. Inside script there are some spaces or white characters that I cannot see inside LDIF exports.
  
  – Giorgio Desideri
  Jan 13 '15 at 6:46
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  ACL script present need to have space at the end of the line, in line 2-3 dn: olcDatabase=1hdb,cn=config<space> changetype: modify<space> replace: olcAccess<space> ...
  
  – Giorgio Desideri
  Jan 13 '15 at 7:04
  

  
  
  
  

add a comment | 

0

I would assume that if the dump finishes without an error, you can assume it to be correct. To be extra sure, you could configure a separate database inside OpenLDAP and import the dump back into this db.

Beside that, having random data or config errors is not normal, this should never happen. You need to investigate this and fix the problem causing it.

share|improve this answer

answered Jan 8 '15 at 8:15

Sven♦Sven

88.4k10150202

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  sometimes add new ACL by ldapmodify using replace of all existing plus new ones, and during restart of slapd, error of bad configuration happens. So I need to clear dump of configuration and import again.
  
  – Giorgio Desideri
  Jan 8 '15 at 11:31
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Solved. Inside script there are some spaces or white characters that I cannot see inside LDIF exports.
  
  – Giorgio Desideri
  Jan 13 '15 at 6:46
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  ACL script present need to have space at the end of the line, in line 2-3 dn: olcDatabase=1hdb,cn=config<space> changetype: modify<space> replace: olcAccess<space> ...
  
  – Giorgio Desideri
  Jan 13 '15 at 7:04
  

  
  
  
  

add a comment | 

I would assume that if the dump finishes without an error, you can assume it to be correct. To be extra sure, you could configure a separate database inside OpenLDAP and import the dump back into this db.

Beside that, having random data or config errors is not normal, this should never happen. You need to investigate this and fix the problem causing it.

share|improve this answer

answered Jan 8 '15 at 8:15

Sven♦Sven

88.4k10150202

share|improve this answer

answered Jan 8 '15 at 8:15

Sven♦Sven

88.4k10150202

answered Jan 8 '15 at 8:15

Sven♦Sven

88.4k10150202

answered Jan 8 '15 at 8:15

Sven♦Sven

88.4k10150202