Re: [Debian-sf-users] Apt-get upgrade

[Christian BAYLE]

Try this:

install-ldap.sh reset
dpkg-reconfigure ldap
install-ldap.sh purge
install-ldap.sh configure

Tim Uckun wrote:

> At 11:22 PM 7/11/2002 +0200, you wrote:
> >Argh, an other victim of ldap :)
> >First double check /etc/ldap/slapd.conf
>
> I double checked this. It seems ok what should I be looking for here?
>
>
> >This error only mean that SF_Robot is not allowed has not enough
> >priviledge or a wrong password
> >to acces ldap
>
> I did this (even though it's probably a security risk)
> access to *
>          by dn="cn=admin,ou=People,dc=sf,dc=diligence,dc=com" write
>  
You should not have ou=People here, it's old ldap config, that always 
make big mess in ldap
admin is no more in People in last version of ldap from scratch, but as 
ldap doesn't reconfigure
this can stay there even in recent version.
install-ldap.sh reset completly destroy ldap db and should be efficient 
for your problem
ldpa is rebuild from postgress datas

Cheers

>         by dn="cn=SF_robot,dc=sf,dc=diligence,dc=com" write
>          by * read
>
> In effect I told ldap that SF_robot could do whatever it wants right?
>
> >If nothing seems wrong try to play with
> >/usr/lib/sourceforge/install-ldap.sh purge/reset/configure until
> >install-ldap.sh check don't complain
> >As usual stop nscd when testing
>
> Then I did a purge/reset/configure and still no luck I get this.
> sf:/etc/bind#  /usr/lib/sourceforge/bin/install-ldap.sh configure
> =====>sys_ldap_base_dn=dc=sf,dc=diligence,dc=com
> =====>sys_ldap_admin_dn=cn=admin,dc=sf,dc=diligence,dc=com
> =====>sys_ldap_bind_dn=cn=SF_robot,dc=sf,dc=diligence,dc=com
> Stopping OpenLDAP: slapd.
> Starting OpenLDAP: slapd.
> Load ldap
> Distinguished Name is dc=sf,dc=diligence,dc=com
> Creating ldif file from database
> Filling LDAP with database
> Setup SF_robot account
> =====>sys_ldap_base_dn=dc=sf,dc=diligence,dc=com
> =====>sys_ldap_admin_dn=cn=admin,dc=sf,dc=diligence,dc=com
> =====>sys_ldap_bind_dn=cn=SF_robot,dc=sf,dc=diligence,dc=com
> LDAP Server OK : dn=dc=sf,dc=diligence,dc=com
> Adding robot accounts
> adding new entry "cn=Replicator,dc=sf,dc=diligence,dc=com"
> ldap_add: Insufficient access
>          additional info: no write access to parent
>
> ldif_record() = 50
> adding new entry "cn=SF_robot,dc=sf,dc=diligence,dc=com"
> ldap_add: Insufficient access
>          additional info: no write access to parent
>
> ldif_record() = 50
> LDAP Server OK : dn=dc=sf,dc=diligence,dc=com
> Changing SF_robot passwd using admin account
> ldap_initialize( <DEFAULT> )
> replace userPassword:
>          {CRYPT}gLCdDS.gik9Bw
> modifying entry "cn=SF_robot,dc=sf,dc=diligence,dc=com"
> ldap_modify: No such object
>          matched DN: "dc=sf,dc=diligence,dc=com"
>
> ldif_record() = 32
>
>
>
>
> :wq
> Tim Uckun
> US Investigations Services/Due Diligence
>   http://www.diligence.com/