1:olcDatabase={0}config.ldif

1:olcDatabase={0}config.ldif

我一直在努力启动 LDAP 服务器,但却失败了,从 journalctl -xn 我清楚地知道配置文件不好!但是有三个配置文件,但是缺少什么/错误什么。

我一点头绪都没有。(新手 QA 人员,在设置任何类型的服务器方面都没有什么经验,却承担了测试需要 kerberos+LDAP 设置的产品的责任)

1:olcDatabase={0}config.ldif

   1 # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
   2 # CRC32 5b8d3eae
   3 dn: olcDatabase={0}config
   4 objectClass: olcDatabaseConfig
   5 olcDatabase: {0}config
   6 olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external
   7  ,cn=auth" manage by * none
   8 structuralObjectClass: olcDatabaseConfig
   9 entryUUID: c1537b28-ed16-1034-9396-7188a52812eb
  10 creatorsName: cn=config
  11 createTimestamp: 20150911212105Z
  12 entryCSN: 20150911212105.249119Z#000000#000#000000
  13 modifiersName: cn=config
  14 modifyTimestamp: 20150911212105Z
  15 olcRootPW: {SSHA}WJTAm3glD5O87VKlhz5v3u4+1A3MVB8E

1:olcDatabase={1}monitor.ldif

   1 # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
   2 # CRC32 e5f82fb5
   3 dn: olcDatabase={1}monitor
   4 objectClass: olcDatabaseConfig
   5 olcDatabase: {1}monitor
   6 olcAccess: {0}to * by dn.base="gidNumber=0+uidNumber=0,cn=peercred,cn=external
   7  ,cn=auth" read by dn.base="cn=Manager,dc=ixsystems,dc=com" read by * none
   8 structuralObjectClass: olcDatabaseConfig
   9 entryUUID: c153c754-ed16-1034-9397-7188a52812eb
  10 creatorsName: cn=config
  11 createTimestamp: 20150911212105Z
  12 entryCSN: 20150911212105.251069Z#000000#000#000000
  13 modifiersName: cn=config
  14 modifyTimestamp: 20150911212105Z

1:olcDatabase={2}hdb.ldif

   1 # AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
   2 # CRC32 2e34b404
   3 dn: olcDatabase={2}hdb
   4 objectClass: olcDatabaseConfig
   5 objectClass: olcHdbConfig
   6 olcDatabase: {2}hdb
   7 olcDbDirectory: /var/lib/ldap
   8 olcSuffix: dc=ixsystems,dc=com
   9 olcRootDN: cn=Manager,dc=ixsystems,dc=com
  10 olcRootPW: {SSHA}WJTAm3glD5O87VKlhz5v3u4+1A3MVB8E
  11 olcDbIndex: objectClass eq,pres
  12 olcDbIndex: ou,cn,mail,surname,givenname eq,pres,sub
  13 structuralObjectClass: olcHdbConfig
  14 entryUUID: c153cf4c-ed16-1034-9398-7188a52812eb
  15 creatorsName: cn=config
  16 createTimestamp: 20150911212105Z
  17 entryCSN: 20150911212105.251273Z#000000#000#000000
  18 modifiersName: cn=config
  19 modifyTimestamp: 20150911212105Z
  20 olcAccess: {0}to attrs=userPassword by self write by dn.base="cn=Manager,dc=ixsystems,dc=com" write by anonymous auth by * none
  21 olcAccess: {1}to * by dn.base="cn=Manager,dc=ixsystems,dc=com" write by self write by * read

[root@qa-ldap-kerb cn=config]# journalctl -xn

-- Logs begin at Sun 2015-09-13 04:31:08 EDT, end at Mon 2015-09-14 20:17:13 EDT. --
Sep 14 20:17:13 qa-ldap-kerb slapd[4348]: @(#) $OpenLDAP: slapd 2.4.39 (Mar  6 2015 04:35:49) $
                                                  [email protected]:/builddir/build/BUILD/openldap-2.4.39/openldap-2.4.39/servers/slapd
Sep 14 20:17:13 qa-ldap-kerb slapd[4348]: ldif_read_file: checksum error on "/etc/openldap/slapd.d/cn=config/olcDatabase={0}config.ldif"
Sep 14 20:17:13 qa-ldap-kerb slapd[4348]: ldif_read_file: checksum error on "/etc/openldap/slapd.d/cn=config/olcDatabase={1}monitor.ldif"
Sep 14 20:17:13 qa-ldap-kerb slapd[4348]: ldif_read_file: checksum error on "/etc/openldap/slapd.d/cn=config/olcDatabase={2}hdb.ldif"
Sep 14 20:17:13 qa-ldap-kerb slapd[4348]: str2entry: entry -1 has no dn
Sep 14 20:17:13 qa-ldap-kerb slapd[4348]: slapd stopped.
Sep 14 20:17:13 qa-ldap-kerb slapd[4348]: connections_destroy: nothing to destroy.
Sep 14 20:17:13 qa-ldap-kerb systemd[1]: slapd.service: control process exited, code=exited status=1
Sep 14 20:17:13 qa-ldap-kerb systemd[1]: Failed to start OpenLDAP Server Daemon.
-- Subject: Unit slapd.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
-- 
-- Unit slapd.service has failed.
-- 
-- The result is failed.
Sep 14 20:17:13 qa-ldap-kerb systemd[1]: Unit slapd.service entered failed state.

答案1

删除 CRC 行,并且不要再手动编辑这些文件。使用 LDAP 浏览器。

相关内容