Re: Heimdal & OpenLDAP

[Alberto Patino <jalbertop@aranea.com.mx>]

Maybe you didn't build the OpenLDAP software with the --anable-local
option so you won't be able to use Unix Domain sockets to write to the
LDAP Server.

Be certain that you turn the option from the OpenLDAP configure files.


On Mon, 2003-03-31 at 07:52, Garzon Maldonado, Jesus Javier wrote:
> Hello all:
> 
> I'm working with heimdal 0.5.1 and OpenLDAP 2.0.25 on FreeBSD 4.7. I've tried to use OpenLDAP as store for Kerberos data, but though I've followed what is told at http://www.padl.com/Research/Heimdal.html, whenever I try to initialize the database following message appears:
> kadmin: kadm5_create_principal: ldap_add_s: Can't contact LDAP server.
> 
> here is my krb5.conf file:
> [libdefaults]
>         default_realm = ITEM.INDRA.ES
> 	clockskew = 300
> 	v4_instance_resolve = false
> 	
> [realms]
> 	ITEM.INDRA.ES = {
> 		kdc = itemsp.item.indra.es
> 	}
> [domain_realm]
> 	.item.indra.es = ITEM.INDRA.ES
> 
> [kdc]
>         database = {
>                 dbname = ldap:ou=KerberosPrincpals,dc=indra,dc=es
>                 mkey_file = /var/heimdal/m-key
>         }
> 
> An here is the slapd.conf access section:
> [...]
> access to dn="" by * read
> access to *
> 	by sockurl="^ldapi:///$" write
> 	by self write
> 	by users read
> 	by anonymous auth
> 
> [...]
> 
> Do you know what can be happening?
> 
> Thank you very much.
> 
> Regards.
> 
> Javi Garzon.