[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: kadmin: kadm5_create_principa: ldap_add_s: Can't contact LDAP server



I followed your documentation, to start slapd as
follows:
shell% slapd -h "ldapi:/// ldap:///" -d -1
-- snap --
slapd startup: initiated.
bdb_db_open: ou=KPrincipals,dc=laras,dc=com
bdb_db_open: dbenv_open(/var/lib/ldap)
slapd starting
daemon: added 6r
daemon: added 7r
daemon: select: listen=6 active_threads=0 tvp=NULL
daemon: select: listen=7 active_threads=0 tvp=NULL

It looks like it's running but when I tried to init
the REALM, it says can't contact ldap server.

ps aux | grep slapd shows that slapd -h "ldapi:///
ldap:///" -d -1 is running.

-lara-

Belos is my krb5.conf and slapd.conf:
/etc/openldap/slapd.conf:
-------------------------
[logging]
 default = FILE:/var/log/hldap_krb5lib.log
 kdc = FILE:/var/log/hldap_krb5kdc.log
 admin_server = FILE:/var/log/hldap_kadmind.log

[libdefaults]
 default_realm = LARAS.COM

[realms]
 ADIANTO.COM = {
  kdc = kerberos.laras.com
  admin_server = kerberos.laras.com
 }

[domain_realm]
 .laras.com = LARAS.COM
 laras.com = LARAS.COM

[kdc]
 database = {
	dbname = ldap:ou=KPrincipals,dc=laras,dc=com
	mkey_file = /var/heimdal/m-key
}

/etc/krb5.conf:
---------------
include		/usr/local/etc/openldap/schema/core.schema
include		/usr/local/etc/openldap/schema/cosine.schema
include	
/usr/local/etc/openldap/schema/inetorgperson.schema
include 	/usr/local/etc/openldap/schema/nis.schema
include	
/usr/local/etc/openldap/schema/krb5-kdc.schema

loglevel	256
pidfile		/usr/local/var/slapd.pid
argsfile	/usr/local/var/slapd.args

#######################################################################
# ldbm database definitions
#######################################################################

database        bdb
password-hash	{CLEARTEXT}
suffix		"ou=KPrincipals,dc=laras,dc=com"
rootdn	"cn=Manager,ou=KPrincipals,dc=laras,dc=com"
directory	"/var/lib/ldap"

index	objectClass	eq
index   cn		pres,eq
index   uid		pres,eq

access to *
	by sockurl="^ldapi:///$" write
	by * write
	by * auth
	by * read

--- Luke Howard <lukeh@PADL.COM> wrote:
> 
> Did you start slapd with -h ldapi://
> 
> -- Luke
> 


=====
------------------------------------------------------------------------------------ 
La vie, voyez-vous, ca n'est jamais si bon ni si mauvais qu'on croit
                                                                        - Guy de Maupassant -
------------------------------------------------------------------------------------

__________________________________
Do you Yahoo!?
Yahoo! Small Business $15K Web Design Giveaway 
http://promotions.yahoo.com/design_giveaway/