[Samba-it] Non riesco a fare partire il server ldap
Vincenzo Niro
nirovincenzo at gmail.com
Sat Feb 10 23:59:01 MST 2007
[ERRORE]
/opt # rcldap start
Starting ldap-server/etc/openldap/slapd.conf: line 92: index attribute
"sambaSID" undefined
startproc: exit status of parent of /usr/lib/openldap/slapd: 1
failed
[FILE] Il mio file sldap.conf è cosi composto:
**********************************************************
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/rfc2307bis.schema
include /etc/openldap/schema/yast.schema
# Define global ACLs to disable default read access.
# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral ldap://root.openldap.org
pidfile /var/run/slapd/slapd.pid
argsfile /var/run/slapd/slapd.args
# Load dynamic backend modules:
modulepath /usr/lib/openldap/modules
# moduleload back_ldap.la
# moduleload back_meta.la
# moduleload back_monitor.la
# moduleload back_perl.la
# Sample security restrictions
# Require integrity protection (prevent hijacking)
# Require 112-bit (3DES or better) encryption for updates
# Require 63-bit encryption for simple bind
# security ssf=1 update_ssf=112 simple_bind=64
# Sample access control policy:
# Root DSE: allow anyone to read it
# Subschema (sub)entry DSE: allow anyone to read it
# Other DSEs:
# Allow self write access to user password
# Allow anonymous users to authenticate
# Allow read access to everything else
# Directives needed to implement policy:
access to dn.base=""
by * read
access to dn.base="cn=Subschema"
by * read
access to attrs=userPassword,userPKCS12
by self write
by * auth
access to attrs=shadowLastChange
by self write
by * read
access to *
by * read
# if no access controls are present, the default policy
# allows anyone and everyone to read anything but restricts
# updates to rootdn. (e.g., "access to * by * read")
#
# rootdn can always read and write EVERYTHING!
#######################################################################
# BDB database definitions
#######################################################################
database bdb
suffix "dc=nirowork,dc=it"
checkpoint 1024 5
cachesize 10000
rootdn "cn=admin,dc=nirowork,dc=it"
# Cleartext passwords, especially for the rootdn, should
# be avoid. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw secret
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd and slap tools.
# Mode 700 recommended.
directory /var/lib/ldap
# Indices to maintain
# Indexing for faster queries ( bad indexes can slow things up )
#################################################################
index objectClass eq
index cn pres,sub,eq
index sn pres,sub,eq
index uid pres,sub,eq
index displayName pres,sub,eq
index uidNumber eq
index gidNumber eq
index memberUid eq
index sambaSID eq
index sambaPrimaryGroupSID eq
index sambaDomainName eq
index default sub
# Defining Access Control Lists for access to various parts of our
# databse. We can live without ACL's aswell, but some security should
# be in place.
# preventng users from viewing passwords, employee number ... etc
######################################################################
access to attr=userpassword,clearpassword,ldappassword
by anonymous auth
by self write
by dn="cn=admin,dc=nirowork,dc=it" write
by * none
access to *
by dn="cn=admin,dc=nirowork,dc=it" write
by users read
by self write
by * read
**********************************************************
--
Niro Vincenzo
Contatti:
Personal web page: http://nirovincenzo.googlepages.com/home
FAX: +391782287915
Skype: nirovi
Gaim: nirovi at virgilio.it
*********************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.samba.org/pipermail/samba-it/attachments/20070210/09b09822/attachment.html>
More information about the samba-it
mailing list