OpenLDAP check databaseOpenLdap PasswordOpenLDAP MySQL Integration - Database Location for OpenLDAP back-sql metadata mapping tablesopenldap and digest-md5: no secret in databaseHow to add ACIs to OpenLDAP properlyhow to self change attrs in openldaphow to set permission the manager in openldap?OpenLDAP: Index to olcDatabase not respectedOpenLdap. Setting a database as a branch of another databaseslapd with mozillaAbPersonAlpha schemaCreating an OpenLdap administrator group on LDAP server
Is a hash a zero-knowledge proof?
How should I push back against my job assigning "homework"?
The qvolume of an integer
What is a simple, physical situation where complex numbers emerge naturally?
How to decline physical affection from a child whose parents are pressuring them?
arcpy.GetParameterAsText not passing arguments to script?
How did the Zip Chip and RocketChip accelerators work for the Apple II?
Can an old DSLR be upgraded to match modern smartphone image quality
Rotated Position of Integers
Is American Express widely accepted in France?
Explain Ant-Man's "not it" scene from Avengers: Endgame
Did airlines fly their aircraft slower in response to oil prices in the 1970s?
California: "For quality assurance, this phone call is being recorded"
Are there regional foods in Westeros?
Can you use a concentration spell while using Mantle of Majesty?
Make a formula to get the highest score
Is it possible to kill all life on Earth?
Select row of data if next row contains zero
Is there any Biblical Basis for 400 years of silence between Old and New Testament?
What's the most polite way to tell a manager "shut up and let me work"?
Accidentally cashed a check twice
Applicants clearly not having the skills they advertise
Opposite of "Squeaky wheel gets the grease"
Do adult Russians normally hand-write Cyrillic as cursive or as block letters?
OpenLDAP check database
OpenLdap PasswordOpenLDAP MySQL Integration - Database Location for OpenLDAP back-sql metadata mapping tablesopenldap and digest-md5: no secret in databaseHow to add ACIs to OpenLDAP properlyhow to self change attrs in openldaphow to set permission the manager in openldap?OpenLDAP: Index to olcDatabase not respectedOpenLdap. Setting a database as a branch of another databaseslapd with mozillaAbPersonAlpha schemaCreating an OpenLdap administrator group on LDAP server
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
favorite
I'm using now OpenLDAP server ( slapd ) to manage my authentication / authorization mechanism. I have an issue:
something slapd process doesn't restart for error in database ( about some entry ) or configuration error.
Now, I use to check configuration sldaptest -F /etc/ldap/slapd.d/ command line, but to check any corruption errors in database ?
I have daily dump in ldif of my datas, but I would like be sure that this dump is error-free.
Thanks
Details:
OS: Ubuntu 14.04
kernel:3.13.0-43generic
slapd version: 2.4.31
My script:
dn: olcDatabase=1hdb,cn=config
changetype: modify
replace: olcAccess
olcAccess: 0to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=example,dc=com" write by * none
olcAccess: 1to dn.base="" by * read
olcAccess: 2to * by self write by dn="cn=admin,dc=example,dc=com" write by * read
olcAccess: 3to dn.subtree="dc=th,dc=company,dc=com" by set="[cn=app_all,ou=Groups,dc=th,dc=company,dc=com]/member*" write by * read
openldap
edited Jan 13 '15 at 6:48
masegaloeh
16.5k74488
asked Jan 8 '15 at 5:48
Giorgio DesideriGiorgio Desideri
15
add a comment |
favorite
I'm using now OpenLDAP server ( slapd ) to manage my authentication / authorization mechanism. I have an issue:
something slapd process doesn't restart for error in database ( about some entry ) or configuration error.
Now, I use to check configuration sldaptest -F /etc/ldap/slapd.d/ command line, but to check any corruption errors in database ?
I have daily dump in ldif of my datas, but I would like be sure that this dump is error-free.
Thanks
Details:
OS: Ubuntu 14.04
kernel:3.13.0-43generic
slapd version: 2.4.31
My script:
dn: olcDatabase=1hdb,cn=config
changetype: modify
replace: olcAccess
olcAccess: 0to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=example,dc=com" write by * none
olcAccess: 1to dn.base="" by * read
olcAccess: 2to * by self write by dn="cn=admin,dc=example,dc=com" write by * read
olcAccess: 3to dn.subtree="dc=th,dc=company,dc=com" by set="[cn=app_all,ou=Groups,dc=th,dc=company,dc=com]/member*" write by * read
openldap
edited Jan 13 '15 at 6:48
masegaloeh
16.5k74488
asked Jan 8 '15 at 5:48
Giorgio DesideriGiorgio Desideri
15
Before suspecting actual corruption, make sure that your LDAP data files are actually owned byopenldapuser (or whatever account your slapd runs as). I've been bit by "Oops, datafiles or the directory they are in is owned by root" thing way too many times.
– Janne Pikkarainen
Jan 8 '15 at 8:47
1
Instead editing title withsolvedword, please post the solution in answer section below and mark it accepted.
– masegaloeh
Jan 13 '15 at 6:48
add a comment |
favorite
I'm using now OpenLDAP server ( slapd ) to manage my authentication / authorization mechanism. I have an issue:
something slapd process doesn't restart for error in database ( about some entry ) or configuration error.
Now, I use to check configuration sldaptest -F /etc/ldap/slapd.d/ command line, but to check any corruption errors in database ?
I have daily dump in ldif of my datas, but I would like be sure that this dump is error-free.
Thanks
Details:
OS: Ubuntu 14.04
kernel:3.13.0-43generic
slapd version: 2.4.31
My script:
dn: olcDatabase=1hdb,cn=config
changetype: modify
replace: olcAccess
olcAccess: 0to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=example,dc=com" write by * none
olcAccess: 1to dn.base="" by * read
olcAccess: 2to * by self write by dn="cn=admin,dc=example,dc=com" write by * read
olcAccess: 3to dn.subtree="dc=th,dc=company,dc=com" by set="[cn=app_all,ou=Groups,dc=th,dc=company,dc=com]/member*" write by * read
openldap
edited Jan 13 '15 at 6:48
masegaloeh
16.5k74488
asked Jan 8 '15 at 5:48
Giorgio DesideriGiorgio Desideri
15
favorite
I'm using now OpenLDAP server ( slapd ) to manage my authentication / authorization mechanism. I have an issue:
something slapd process doesn't restart for error in database ( about some entry ) or configuration error.
Now, I use to check configuration sldaptest -F /etc/ldap/slapd.d/ command line, but to check any corruption errors in database ?
I have daily dump in ldif of my datas, but I would like be sure that this dump is error-free.
Thanks
Details:
OS: Ubuntu 14.04
kernel:3.13.0-43generic
slapd version: 2.4.31
My script:
dn: olcDatabase=1hdb,cn=config
changetype: modify
replace: olcAccess
olcAccess: 0to attrs=userPassword,shadowLastChange by self write by anonymous auth by dn="cn=admin,dc=example,dc=com" write by * none
olcAccess: 1to dn.base="" by * read
olcAccess: 2to * by self write by dn="cn=admin,dc=example,dc=com" write by * read
olcAccess: 3to dn.subtree="dc=th,dc=company,dc=com" by set="[cn=app_all,ou=Groups,dc=th,dc=company,dc=com]/member*" write by * read
openldap
openldap
edited Jan 13 '15 at 6:48
masegaloeh
16.5k74488
asked Jan 8 '15 at 5:48
Giorgio DesideriGiorgio Desideri
15
edited Jan 13 '15 at 6:48
masegaloeh
16.5k74488
asked Jan 8 '15 at 5:48
Giorgio DesideriGiorgio Desideri
15
edited Jan 13 '15 at 6:48
masegaloeh
16.5k74488
edited Jan 13 '15 at 6:48
masegaloeh
16.5k74488
edited Jan 13 '15 at 6:48
masegaloeh
16.5k74488
16.5k74488
asked Jan 8 '15 at 5:48
Giorgio DesideriGiorgio Desideri
15
asked Jan 8 '15 at 5:48
Giorgio DesideriGiorgio Desideri
15
asked Jan 8 '15 at 5:48
Giorgio DesideriGiorgio Desideri
15
15
Before suspecting actual corruption, make sure that your LDAP data files are actually owned byopenldapuser (or whatever account your slapd runs as). I've been bit by "Oops, datafiles or the directory they are in is owned by root" thing way too many times.
– Janne Pikkarainen
Jan 8 '15 at 8:47
1
Instead editing title withsolvedword, please post the solution in answer section below and mark it accepted.
– masegaloeh
Jan 13 '15 at 6:48
add a comment |
Before suspecting actual corruption, make sure that your LDAP data files are actually owned byopenldapuser (or whatever account your slapd runs as). I've been bit by "Oops, datafiles or the directory they are in is owned by root" thing way too many times.
– Janne Pikkarainen
Jan 8 '15 at 8:47
1
Instead editing title withsolvedword, please post the solution in answer section below and mark it accepted.
– masegaloeh
Jan 13 '15 at 6:48
Before suspecting actual corruption, make sure that your LDAP data files are actually owned by
openldap user (or whatever account your slapd runs as). I've been bit by "Oops, datafiles or the directory they are in is owned by root" thing way too many times.– Janne Pikkarainen
Jan 8 '15 at 8:47
Before suspecting actual corruption, make sure that your LDAP data files are actually owned by
openldap user (or whatever account your slapd runs as). I've been bit by "Oops, datafiles or the directory they are in is owned by root" thing way too many times.– Janne Pikkarainen
Jan 8 '15 at 8:47
1
1
Instead editing title with
solved word, please post the solution in answer section below and mark it accepted.– masegaloeh
Jan 13 '15 at 6:48
Instead editing title with
solved word, please post the solution in answer section below and mark it accepted.– masegaloeh
Jan 13 '15 at 6:48
add a comment |
1 Answer
1
active
oldest
votes
I would assume that if the dump finishes without an error, you can assume it to be correct. To be extra sure, you could configure a separate database inside OpenLDAP and import the dump back into this db.
Beside that, having random data or config errors is not normal, this should never happen. You need to investigate this and fix the problem causing it.
answered Jan 8 '15 at 8:15
Sven♦Sven
88.4k10150202
sometimes add new ACL byldapmodifyusing replace of all existing plus new ones, and during restart of slapd, error of bad configuration happens. So I need to clear dump of configuration and import again.
– Giorgio Desideri
Jan 8 '15 at 11:31
Solved. Inside script there are some spaces or white characters that I cannot see inside LDIF exports.
– Giorgio Desideri
Jan 13 '15 at 6:46
ACL script present need to have space at the end of the line, in line 2-3 dn: olcDatabase=1hdb,cn=config<space> changetype: modify<space> replace: olcAccess<space> ...
– Giorgio Desideri
Jan 13 '15 at 7:04
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f658030%2fopenldap-check-database%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
I would assume that if the dump finishes without an error, you can assume it to be correct. To be extra sure, you could configure a separate database inside OpenLDAP and import the dump back into this db.
Beside that, having random data or config errors is not normal, this should never happen. You need to investigate this and fix the problem causing it.
answered Jan 8 '15 at 8:15
Sven♦Sven
88.4k10150202
sometimes add new ACL byldapmodifyusing replace of all existing plus new ones, and during restart of slapd, error of bad configuration happens. So I need to clear dump of configuration and import again.
– Giorgio Desideri
Jan 8 '15 at 11:31
Solved. Inside script there are some spaces or white characters that I cannot see inside LDIF exports.
– Giorgio Desideri
Jan 13 '15 at 6:46
ACL script present need to have space at the end of the line, in line 2-3 dn: olcDatabase=1hdb,cn=config<space> changetype: modify<space> replace: olcAccess<space> ...
– Giorgio Desideri
Jan 13 '15 at 7:04
add a comment |
I would assume that if the dump finishes without an error, you can assume it to be correct. To be extra sure, you could configure a separate database inside OpenLDAP and import the dump back into this db.
Beside that, having random data or config errors is not normal, this should never happen. You need to investigate this and fix the problem causing it.
answered Jan 8 '15 at 8:15
Sven♦Sven
88.4k10150202
sometimes add new ACL byldapmodifyusing replace of all existing plus new ones, and during restart of slapd, error of bad configuration happens. So I need to clear dump of configuration and import again.
– Giorgio Desideri
Jan 8 '15 at 11:31
Solved. Inside script there are some spaces or white characters that I cannot see inside LDIF exports.
– Giorgio Desideri
Jan 13 '15 at 6:46
ACL script present need to have space at the end of the line, in line 2-3 dn: olcDatabase=1hdb,cn=config<space> changetype: modify<space> replace: olcAccess<space> ...
– Giorgio Desideri
Jan 13 '15 at 7:04
add a comment |
I would assume that if the dump finishes without an error, you can assume it to be correct. To be extra sure, you could configure a separate database inside OpenLDAP and import the dump back into this db.
Beside that, having random data or config errors is not normal, this should never happen. You need to investigate this and fix the problem causing it.
answered Jan 8 '15 at 8:15
Sven♦Sven
88.4k10150202
I would assume that if the dump finishes without an error, you can assume it to be correct. To be extra sure, you could configure a separate database inside OpenLDAP and import the dump back into this db.
Beside that, having random data or config errors is not normal, this should never happen. You need to investigate this and fix the problem causing it.
answered Jan 8 '15 at 8:15
Sven♦Sven
88.4k10150202
answered Jan 8 '15 at 8:15
Sven♦Sven
88.4k10150202
answered Jan 8 '15 at 8:15
Sven♦Sven
88.4k10150202
answered Jan 8 '15 at 8:15
Sven♦Sven
88.4k10150202
88.4k10150202
sometimes add new ACL byldapmodifyusing replace of all existing plus new ones, and during restart of slapd, error of bad configuration happens. So I need to clear dump of configuration and import again.
– Giorgio Desideri
Jan 8 '15 at 11:31
Solved. Inside script there are some spaces or white characters that I cannot see inside LDIF exports.
– Giorgio Desideri
Jan 13 '15 at 6:46
ACL script present need to have space at the end of the line, in line 2-3 dn: olcDatabase=1hdb,cn=config<space> changetype: modify<space> replace: olcAccess<space> ...
– Giorgio Desideri
Jan 13 '15 at 7:04
add a comment |
sometimes add new ACL byldapmodifyusing replace of all existing plus new ones, and during restart of slapd, error of bad configuration happens. So I need to clear dump of configuration and import again.
– Giorgio Desideri
Jan 8 '15 at 11:31
Solved. Inside script there are some spaces or white characters that I cannot see inside LDIF exports.
– Giorgio Desideri
Jan 13 '15 at 6:46
ACL script present need to have space at the end of the line, in line 2-3 dn: olcDatabase=1hdb,cn=config<space> changetype: modify<space> replace: olcAccess<space> ...
– Giorgio Desideri
Jan 13 '15 at 7:04
sometimes add new ACL by
ldapmodify using replace of all existing plus new ones, and during restart of slapd, error of bad configuration happens. So I need to clear dump of configuration and import again.– Giorgio Desideri
Jan 8 '15 at 11:31
sometimes add new ACL by
ldapmodify using replace of all existing plus new ones, and during restart of slapd, error of bad configuration happens. So I need to clear dump of configuration and import again.– Giorgio Desideri
Jan 8 '15 at 11:31
Solved. Inside script there are some spaces or white characters that I cannot see inside LDIF exports.
– Giorgio Desideri
Jan 13 '15 at 6:46
Solved. Inside script there are some spaces or white characters that I cannot see inside LDIF exports.
– Giorgio Desideri
Jan 13 '15 at 6:46
ACL script present need to have space at the end of the line, in line 2-3 dn: olcDatabase=1hdb,cn=config<space> changetype: modify<space> replace: olcAccess<space> ...
– Giorgio Desideri
Jan 13 '15 at 7:04
ACL script present need to have space at the end of the line, in line 2-3 dn: olcDatabase=1hdb,cn=config<space> changetype: modify<space> replace: olcAccess<space> ...
– Giorgio Desideri
Jan 13 '15 at 7:04
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f658030%2fopenldap-check-database%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Before suspecting actual corruption, make sure that your LDAP data files are actually owned by
openldapuser (or whatever account your slapd runs as). I've been bit by "Oops, datafiles or the directory they are in is owned by root" thing way too many times.– Janne Pikkarainen
Jan 8 '15 at 8:47
1
Instead editing title with
solvedword, please post the solution in answer section below and mark it accepted.– masegaloeh
Jan 13 '15 at 6:48