[Samba-it] Non riesco a fare partire il server ldap

Vincenzo Niro nirovincenzo at gmail.com
Sat Feb 10 23:59:01 MST 2007


[ERRORE]
/opt # rcldap start
Starting ldap-server/etc/openldap/slapd.conf: line 92: index attribute
"sambaSID" undefined
startproc:  exit status of parent of /usr/lib/openldap/slapd: 1
                                                                      failed


[FILE] Il mio file sldap.conf è cosi composto:


**********************************************************
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include        /etc/openldap/schema/core.schema
include        /etc/openldap/schema/cosine.schema
include        /etc/openldap/schema/inetorgperson.schema
include        /etc/openldap/schema/rfc2307bis.schema
include        /etc/openldap/schema/yast.schema

# Define global ACLs to disable default read access.

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral    ldap://root.openldap.org

pidfile        /var/run/slapd/slapd.pid
argsfile    /var/run/slapd/slapd.args

# Load dynamic backend modules:
modulepath    /usr/lib/openldap/modules
# moduleload    back_ldap.la
# moduleload    back_meta.la
# moduleload    back_monitor.la
# moduleload    back_perl.la

# Sample security restrictions
#    Require integrity protection (prevent hijacking)
#    Require 112-bit (3DES or better) encryption for updates
#    Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64

# Sample access control policy:
#       Root DSE: allow anyone to read it
#       Subschema (sub)entry DSE: allow anyone to read it
#       Other DSEs:
#               Allow self write access to user password
#               Allow anonymous users to authenticate
#               Allow read access to everything else
#       Directives needed to implement policy:
access to dn.base=""
        by * read

access to dn.base="cn=Subschema"
        by * read

access to attrs=userPassword,userPKCS12
        by self write
        by * auth

access to attrs=shadowLastChange
        by self write
        by * read

access to *
        by * read

# if no access controls are present, the default policy
# allows anyone and everyone to read anything but restricts
# updates to rootdn.  (e.g., "access to * by * read")
#
# rootdn can always read and write EVERYTHING!

#######################################################################
# BDB database definitions
#######################################################################

database    bdb
suffix        "dc=nirowork,dc=it"
checkpoint      1024    5
cachesize       10000
rootdn        "cn=admin,dc=nirowork,dc=it"
# Cleartext passwords, especially for the rootdn, should
# be avoid.  See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw        secret
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory    /var/lib/ldap
# Indices to maintain
# Indexing for faster queries ( bad indexes can slow things up )
#################################################################
index   objectClass     eq
index cn                      pres,sub,eq
index sn                      pres,sub,eq
index uid                     pres,sub,eq
index displayName             pres,sub,eq
index uidNumber               eq
index gidNumber               eq
index memberUid               eq
index   sambaSID              eq
index   sambaPrimaryGroupSID  eq
index   sambaDomainName       eq
index   default               sub
# Defining Access Control Lists for access to various parts of our
# databse. We can live without ACL's aswell, but some security should
# be in place.
# preventng users from viewing passwords, employee number ... etc
######################################################################
access to attr=userpassword,clearpassword,ldappassword
   by anonymous auth
   by self write
   by dn="cn=admin,dc=nirowork,dc=it" write
   by * none

access to *
    by dn="cn=admin,dc=nirowork,dc=it" write
    by users read
    by self write
    by * read



**********************************************************

-- 
Niro Vincenzo

Contatti:
Personal web page: http://nirovincenzo.googlepages.com/home
FAX: +391782287915
Skype: nirovi
Gaim: nirovi at virgilio.it

*********************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.samba.org/pipermail/samba-it/attachments/20070210/09b09822/attachment.html>


More information about the samba-it mailing list