LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 07-24-2014, 11:07 AM   #1
airforceboricua
LQ Newbie
 
Registered: Jul 2014
Posts: 2

Rep: Reputation: Disabled
Openldap config modify tls error


Hello All,

I have two servers, a master and a slave.

I am trying to get them to replicate over tls. I have followed everything in this guide 'https://help.ubuntu.com/14.04/serverguide/openldap-server.html#openldap-server-replication' but when I attempt to run the sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f consumer_sync_tls.ldif command I get the following error:

modifying entry "olcDatabase={1}hdb,cn=config" ldap_modify: Other (e.g., implementation specific) error (80) additional info: Error: parse_syncrepl_line: unable to parse "bindmethod=simplebinddn=cn=admin,dc=master,dc=com "

Here is a copy of my .ldif

dn: olcDatabase={1}hdb,cn=config replace: olcSyncRepl olcSyncRepl: rid=001 provider=ldap://master:389 bindmethod=simple binddn="cn=admin,dc=master,dc=com" credentials=123456 searchbase="dc=master,dc=com" logbase="cn=accesslog" logfilter="(&(objectClass=auditWriteObject)(reqRes ult=0))" schemachecking=on type=refreshAndPersist retry="60 +" syncdata=accesslog starttls=critical tls_reqcert=demand

Any help will be greatly appreciated!
 
Old 07-24-2014, 06:19 PM   #2
buttugly
Member
 
Registered: Feb 2006
Distribution: distrohopper
Posts: 58

Rep: Reputation: 16
You are way ahead of me. I did try to look at the command vs the man page and compare;

-H ldapi:///

-H ldapuri
Specify URI(s) referring to the ldap server(s); only the proto-
col/host/port fields are allowed; a list of URI, separated by
whitespace or commas is expected.

Now you maybe hiding whats really here for security reasons or something isn't quite right.

Error: parse_syncrepl_line: unable to parse "bindmethod=simplebinddn=cn=admin,dc=master,dc=com "
*^
there is a space here that doesn't appear in the .ldif (maybe nothing important)

As quickly as this fails, it looks an awful lot like it can't find the uri you have given it.

Lastly, what happens if you do this as root, not, sudo.

Figure another pair of eyes sometimes helps........

Kevin
 
Old 07-25-2014, 07:56 AM   #3
airforceboricua
LQ Newbie
 
Registered: Jul 2014
Posts: 2

Original Poster
Rep: Reputation: Disabled
I figured out what the problem was,

'modifying entry "olcDatabase={1}hdb,cn=config" ldap_modify: Other (e.g., implementation specific) error (80) additional info: Error: parse_syncrepl_line: unable to parse "bindmethod=simplebinddn=cn=admin,dc=master,dc=com "'

There needed to be a space between "bindmethod=simple binddn=cn=admin,dc=master,dc=com ". The documentation may be fixed now as I reporte this as a bug to ubuntu. Thank you for the comment.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Centos 6.4 with OpenLDAP+TLS: OpenLDAP ok, add TLS =>not ok chrism01 Linux - Server 2 10-27-2013 03:15 PM
openldap over tls achoos13 Linux - Server 5 05-08-2012 07:38 AM
openvpn error: TLS Error: TLS key negotiation failed to occur within 60 seconds pendrive Linux - Networking 1 11-02-2011 08:39 AM
openLDAP SSL/TLS error phaniakkina Linux - Software 1 05-25-2011 02:43 PM
Using TLS with Openldap - How to nqk28703 Linux - Software 2 04-25-2011 02:59 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 08:27 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration