[SOLVED] [openldap] slapd.conf

shuple · 03-02-2011, 11:03 PM

Hello Group,

I have an openldap 2.4.23 server managing linux login passwords and sudoers. I am seeing the following sudoers related message on /var/log/syslog:

/var/log/syslog:

Code:

Mar  3 12:48:50 test.example.com slapd[16813]: <= bdb_substring_candidates: (sudoUser) not indexed

I have slapd.conf and ldap.conf configured as follows:

slapd.conf:

Code:

index   objectClass                     eq
index   cn                              eq,pres,sub
index   uidNumber,gidNumber,memberUid   eq,pres
index   uniqueMember                    eq,pres
index   uid                             pres,sub,eq
index   sudoUser                        eq
index   default                         sub

ldap.conf:

Code:

sudoers_base    ou=SUDOers,dc=example,dc=com

sudo is querying the openldap server and functioning correctly. I am trying to get sudoUser indexed. I stopped openldap daemon, ran slapindex and started openldap daemon but the warning message still persists. All other attributes are indexed correctly.

Has anyone come across the same problem?

Regards,
Shuple

shuple · 03-03-2011, 11:40 PM

I was able to fix the problem by updating

Code:

# from
index   sudoUser                        eq
# to
index   sudoUser                        eq,sub

Shuple