2 dec 2010 kl. 00.36 skrev Keith:

quoted text
> I am trying to setup LDAPD but keep running into 'Base DN' issues. My
coluege managed to get OpenLDAP working on a linux server but as LDAPD is now
available for OBSD I am keen to switch to ldap servers before we start to
populate our directory.  I've managed to get the ldap web gui phpldapadmin to
talk to LDAPD but after logging in we get the following.
quoted text
>
> ? dn=example, dn=com

Have you defined a 'dn' attribute in the schema? Otherwise this is a weird
DN.
Although ldapd might not currently check for valid attribute types allowed in
a RDN, you should stick to defined attributes with an EQUALITY matching rule.

quoted text
> This base entry does not exist. Create it ? < the 'create it' link is a
javascript link that doesn't do anything!

I don't know about phpldapadmin, but ldapd won't let you create base DNs over
LDAP. You create base DNs in the ldapd.conf file, where they're called
namespaces.


quoted text
> This page describes the issue with phpLDAPadmin and baseDN but I haven't
been able to get it to work.
quoted text
>
http://phpldapadmin.sourceforge.net/wiki/index.php/FAQ#How_does_PLA_work_out_
the_BASE_DN.3F
quoted text
>
> Our phpLDAPadmin connection is using 'ldapi://%2fvar%2frun%2fldapi/' as to
avoid ssl, sasl issues.
quoted text
> I was wondering if the issue is related to ldapd acl's and have tried
putting some entried into the ldapd.conf file but no joy. Running ldapsearch I
can see that the DN and  Base appear to be empty, My guess is that this is
where the issue is.

Unless you've defined deny rules, the root DSE is readable by anyone.


quoted text
> # ldapsearch -LLL -x -h localhost -b '' -s base +
> dn:
> supportedLDAPVersion: 3
> namingContexts: dc=nhsscotland,dc=com
> supportedExtension: 1.3.6.1.4.1.1466.20037
> supportedFeatures: 1.3.6.1.4.1.4203.1.5.1
> subschemaSubentry: cn=schema
> supportedSASLMechanisms: PLAIN

Here you have a base DN of "dc=nhsscotland,dc=com".


quoted text
> # ldapsearch -x -H 'ldapi://%2fvar%2frun%2fldapi/'
> # extended LDIF
> # LDAPv3
> # base <> with scope subtree
> # filter: (objectclass=*)
> # requesting: ALL
> # search result
> search: 2
> result: 32 No such object
> # numResponses: 1

If you want to search the root DSE, you must use a base scope (-s base).

	-martin

quoted text
> Does anyone have any ideas what the problem might be ?
>
> Thanks
> Keith