[EMAIL PROTECTED] wrote: > Dear all > > I've had this strange problem on a new openldap (2.4.9-0ubuntu0.8.04.2) > installation: > > [EMAIL PROTECTED] # slapd -d 256 -h 'ldap://0.0.0.0:636/' -f > /etc/ldap/slapd.conf > @(#) $OpenLDAP: slapd 2.4.9 (Aug 5 2008 20:18:55) $ > [EMAIL > PROTECTED]:/build/buildd/openldap2.3-2.4.9/debian/build/servers/slapd > /etc/ldap/slapd.conf: line 126: rootdn is always granted unlimited privileges. > /etc/ldap/slapd.conf: line 143: rootdn is always granted unlimited privileges. > /etc/ldap/slapd.conf: line 158: invalid path: Permission denied > slapd stopped. > connections_destroy: nothing to destroy. > > Where: > [EMAIL PROTECTED] # sed -n 158p /etc/ldap/slapd.conf > directory "/var/lib/ldap_jxpado" > > After a lot of experiment it seems anything other than '/var/lib/ldap', when used for directory directive, would generate "invalid path: Permission denied". I also tested /var/lib/ldap/jxpado in case slapd runs in chroot by mistake (~openldap=/var/lib/ldap).
I checked the source code. I am a terrible C code reader, but I found before this error message is printed slapd check permission by creating /var/lib/ldap/jxpado/DUMMY and unlink it, if no error, go on, otherwise pop up this error. I did exactly the same with commandline without error. # su openldap $ touch /var/lib/ldap/jxpado/DUMMY $ rm /var/lib/ldap/jxpado/DUMMY $ exit # This is rather strange to me, could it be the Ubuntu server edition of slapd was modified? I configured a dozen more slapd server where I altered directory, on Gentoo Linux, this is the first time I do it on Ubuntu server.