Hello:
I am trying to set up an openLDAP server to use for openca's initializing(RA 
initialization), but I am running onto some problems.

When I point the browser to
   https://ra.results-security.de/ra_node/
   -> Server init -> Initialize Database -> Import Configuration
I got only an error:
Cannot write CA-Certificate cc45eff55b11d9d661a091a43539cc75 to LDAP
So I look my slapd with debug(./slapd -d 255):
some important content:
ldap_read: want=8 error=Resource temporarily unavailable
ber_get_next on fd 12 failed errno=11 (Resource temporarily unavailable)
daemon: select: listen=6 active_threads=1 tvp=NULL
do_bind
ber_scanf fmt ({imt) ber:
ber_dump: buf=0x081e6520 ptr=0x081e6523 end=0x081e6564 len=65
  0000:  60 3f 02 01 02 04 2e 63  6e 3d 4d 61 6e 61 67 65   `?.....cn=Manage
  0010:  72 2c 6f 75 3d 73 65 63  75 72 69 74 79 2c 6f 3d   r,ou=security,o=
  0020:  72 65 73 75 6c 74 73 2d  68 61 6e 6e 6f 76 65 72   results-hannover
  0030:  2c 63 3d 63 6e 80 0a 6c  64 61 70 70 61 73 73 77   ,c=cn..ldappassw
  0040:  64                                                 d
ber_scanf fmt (m}) ber:
ber_dump: buf=0x081e6520 ptr=0x081e6558 end=0x081e6564 len=12
  0000:  00 0a 6c 64 61 70 70 61  73 73 77 64               ..ldappasswd
>>> dnPrettyNormal: <cn=Manager,ou=security,o=results-hannover,c=cn>
=> ldap_bv2dn(cn=Manager,ou=security,o=results-hannover,c=cn,0)
<= ldap_bv2dn(cn=Manager,ou=security,o=results-hannover,c=cn,0)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=Manager,ou=security,o=results-hannover,c=cn,272)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(cn=manager,ou=security,o=results-hannover,c=cn,272)=0
<<< dnPrettyNormal: <cn=Manager,ou=security,o=results-hannover,c=cn>, 
<cn=manager,ou=security,o=results-hannover,c=cn>
do_bind: version=2 dn="cn=Manager,ou=security,o=results-hannover,c=cn" method=128
==> bdb_bind: dn: cn=Manager,ou=security,o=results-hannover,c=cn
bdb_dn2entry_rw("cn=manager,ou=security,o=results-hannover,c=cn")
=> bdb_dn2id_matched( "cn=manager,ou=security,o=results-hannover,c=cn" )
<= bdb_dn2id_matched: no match
do_bind: v2 bind: "cn=Manager,ou=security,o=results-hannover,c=cn" to 
"cn=Manager,ou=security,o=results-hannover,c=cn"
send_ldap_result: conn=0 op=0 p=2
send_ldap_result: err=0 matched="" text=""
send_ldap_response: msgid=1 tag=97 err=0
ber_flush: 14 bytes to sd 12
  0000:  30 0c 02 01 01 61 07 0a  01 00 04 00 04 00         0....a........
ldap_write: want=14, written=14
  0000:  30 0c 02 01 01 61 07 0a  01 00 04 00 04 00         0....a........
daemon: activity on 1 descriptors
daemon: activity on: 12r
daemon: read activity on 12
connection_get(12)
connection_get(12): got connid=0
connection_read(12): checking for input on id=0
ber_get_next
ldap_read: want=8, got=0

ber_get_next on fd 12 failed errno=0 (Success)
connection_read(12): input error=-2 id=0, closing.
connection_closing: readying conn=0 sd=12 for close
connection_close: conn=0 sd=12
daemon: removing 12
daemon: select: listen=6 active_threads=0 tvp=NULL
daemon: activity on 1 descriptors
daemon: select: listen=6 active_threads=0 tvp=NULL

Ok, so this is my slapd.conf (edited , shortened)

include         /usr/local/openldap-2.1.22/etc/openldap/schema/core.schema
include         /usr/local/openldap-2.1.22/etc/openldap/schema/cosine.schema
include         /usr/local/openldap-2.1.22/etc/openldap/schema/inetorgperson.schema
pidfile         /usr/local/openldap-2.1.22/var/slapd.pid
argsfile        /usr/local/openldap-2.1.22/var/slapd.args
allow           bind_v2
database        bdb
suffix          "ou=security,o=results-hannover,c=cn"
rootdn          "cn=Manager,ou=security,o=results-hannover,c=cn"
rootpw          ldappasswd
directory       /usr/local/openldap-2.1.22/var/openldap-data
# Indices to maintain
index   objectClass     eq

Can anyone help me out on this one, I am a CA beginner :)

Thanks,
alan cn.




-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to