Hello,

I am trying to set up OpenLDAP on Arch Linux on my server, following instruction on Arch Wiki[1]. I prepared the config.ldif file, replacing every $BASEDN and $PASSWD in the example configuration:

    # The root config entry
    dn: cn=config
    objectClass: olcGlobal
    cn: config
    olcArgsFile: /run/openldap/slapd.args
    olcPidFile: /run/openldap/slapd.pid

    # Schemas
    dn: cn=schema,cn=config
    objectClass: olcSchemaConfig
    cn: schema

    # TODO: Include further schemas as necessary
    include: file:///etc/openldap/schema/core.ldif

    # The config database
    dn: olcDatabase=config,cn=config
    objectClass: olcDatabaseConfig
    olcDatabase: config
    olcRootDN: cn=Manager,dc=example,dc=com

    # The database for our entries
    dn: olcDatabase=mdb,cn=config
    objectClass: olcDatabaseConfig
    objectClass: olcMdbConfig
    olcDatabase: mdb
    olcSuffix: dc=example,dc=com
    olcRootDN: cn=Manager,dc=example,dc=com
    olcRootPW: {SSHA}xZqSQN4wG4+C5I57dB/Qm02vJ+kQcwd7
    olcDbDirectory: /var/lib/openldap/openldap-data
    # TODO: Create further indexes
    olcDbIndex: objectClass eq

Then I executed the following command:

    sudo -u ldap slapadd -n 0 -F /etc/openldap/slapd.d/ -l ./config.ldif

This gave me the following error:

    invalid config directory /etc/openldap/slapd.d/, error 2
    slapadd: bad configuration directory!

I checked that the directory did not exist, so I created it and changed owner to `ldap`. The wiki page did not mention that the directory should be created earlier, so maybe it should have been created by a post installation script. If that's the case, I will report it to package maintainers.

After I created the directory, I ran the command again, this time having a different error message:

    slapadd: could not add entry dn="cn=config" (line=1):
    Closing DB...

I have no idea what is wrong now and I cannot find anything useful on the internet. Does anyone have an idea what I may be doing wrong here?

[1]: https://wiki.archlinux.org/title/OpenLDAP

Reply via email to