- - PR -
OpenLDAP 起動せず
1
| 投稿者 | 投稿内容 |
|---|---|
|
投稿日時: 2006-02-28 14:20
CentOS 4.2 Final
OpenLDAP 2.2.13-4 Berkeley DB 4.2.52-7.1 Cyrus SASL 2.1.19-5.EL4 LDAP Browser\Editor 2.8.2 上記環境でLDAPを運用しています。 昨日まで問題なく稼動しておりました。 LDAP Browser\Editorで接続し、Entryを追加しようとしたら 画面がフリーズしました。 そこで、ldapaddコマンドで追加しようとしました。 # ldapadd -h localhost -x -D "cn=manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx" -W -f xxxx.ldif ---- Enter LDAP Password: ---- パスワードを入力すると、 ---- ldap_bind: Can't contact LDAP server (-1) ---- というメッセージが出ました。 LDAP Browser\Editorで接続することもできません。 再起動（# /etc/init.d/ldap restart）してから行っても同様です。 プロセスはあがっています。 ---- ldap 5826 0.0 0.7 10320 3684 pts/0 S+ 13:34 0:00 /usr/sbin/slapd -u ldap -h ldap:/// ---- # nmap localhost で、389ポートはありません。 ということで当然認証もできません。 OpenLDAPを再インストールしましたが、同様です。 インストールは、yumで行っております。 半日ほどインターネットで調べたのですが、解決に至っておりません。 ログを見てはいるのですが、私には非常に難解で、原因を特定できないでいます。 解決方法を指示していただけませんでしょうか。 よろしくお願いいたします。 長くて申し訳ございませんが、起動時のログを貼り付けさせていただきます。 ---- Feb 28 13:34:26 xxxx ldap: succeeded Feb 28 13:34:26 xxxx slapd: @(#) $OpenLDAP: slapd 2.2.13 (Oct 18 2005 10:08:34) $ Feb 28 13:34:26 xxxx slapd: buildcentos@x8664-build:/home/buildcentos/rpmbuild/BUILD/openldap-2.2.13/openldap-2.2.13/build-servers/servers/slapd Feb 28 13:34:26 xxxx slapd: daemon_init: listen on ldap:/// Feb 28 13:34:26 xxxx slapd: daemon_init: 1 listeners to open... Feb 28 13:34:26 xxxx slapd: ldap_url_parse_ext(ldap:///) Feb 28 13:34:26 xxxx slapd: daemon: initialized ldap:/// Feb 28 13:34:26 xxxx slapd: daemon_init: 2 listeners opened Feb 28 13:34:26 xxxx slapd: slapd init: initiated server. Feb 28 13:34:26 xxxx slapd: slap_sasl_init: initialized! Feb 28 13:34:26 xxxx slapd: bdb_initialize: initialize BDB backend Feb 28 13:34:26 xxxx slapd: bdb_initialize: Sleepycat Software: Berkeley DB 4.2.52: (December 3, 2003) Feb 28 13:34:26 xxxx slapd: bdb_initialize: initialize BDB backend Feb 28 13:34:26 xxxx slapd: bdb_initialize: Sleepycat Software: Berkeley DB 4.2.52: (December 3, 2003) Feb 28 13:34:26 xxxx slapd: reading config file /etc/openldap/slapd.conf Feb 28 13:34:26 xxxx slapd: line 4 (include /etc/openldap/schema/core.schema) Feb 28 13:34:26 xxxx slapd: reading config file /etc/openldap/schema/core.schema Feb 28 13:34:26 xxxx slapd: line 77 (attributetype ( 2.5.4.2 NAME 'knowledgeInformation' DESC 'RFC2256: knowledge information' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} )) Feb 28 13:34:26 xxxx slapd: line 86 (attributetype ( 2.5.4.4 NAME ( 'sn' 'surname' ) DESC 'RFC2256: last (family) name(s) for which the entity is known by' SUP name )) Feb 28 13:34:26 xxxx slapd: line 92 (attributetype ( 2.5.4.5 NAME 'serialNumber' DESC 'RFC2256: serial number of the entity' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{64} )) Feb 28 13:34:26 xxxx slapd: line 96 (attributetype ( 2.5.4.6 NAME ( 'c' 'countryName' ) DESC 'RFC2256: ISO-3166 country 2-letter code' SUP name SINGLE-VALUE )) Feb 28 13:34:26 xxxx slapd: line 100 (attributetype ( 2.5.4.7 NAME ( 'l' 'localityName' ) DESC 'RFC2256: locality which this object resides in' SUP name )) Feb 28 13:34:26 xxxx slapd: line 104 (attributetype ( 2.5.4.8 NAME ( 'st' 'stateOrProvinceName' ) DESC 'RFC2256: state or province which this object resides in' SUP name )) Feb 28 13:34:26 xxxx slapd: line 110 (attributetype ( 2.5.4.9 NAME ( 'street' 'streetAddress' ) DESC 'RFC2256: street address of this object' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )) Feb 28 13:34:26 xxxx slapd: line 114 (attributetype ( 2.5.4.10 NAME ( 'o' 'organizationName' ) DESC 'RFC2256: organization this object belongs to' SUP name )) Feb 28 13:34:26 xxxx slapd: line 118 (attributetype ( 2.5.4.11 NAME ( 'ou' 'organizationalUnitName' ) DESC 'RFC2256: organizational unit this object belongs to' SUP name )) Feb 28 13:34:26 xxxx slapd: line 122 (attributetype ( 2.5.4.12 NAME 'title' DESC 'RFC2256: title associated with the entity' SUP name )) Feb 28 13:34:26 xxxx slapd: line 128 (attributetype ( 2.5.4.13 NAME 'description' DESC 'RFC2256: descriptive information' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{1024} )) Feb 28 13:34:26 xxxx slapd: line 133 (attributetype ( 2.5.4.14 NAME 'searchGuide' DESC 'RFC2256: search guide, obsoleted by enhancedSearchGuide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.25 )) Feb 28 13:34:26 xxxx slapd: line 139 (attributetype ( 2.5.4.15 NAME 'businessCategory' DESC 'RFC2256: business category' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )) Feb 28 13:34:26 xxxx slapd: line 145 (attributetype ( 2.5.4.16 NAME 'postalAddress' DESC 'RFC2256: postal address' EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )) Feb 28 13:34:26 xxxx slapd: line 151 (attributetype ( 2.5.4.17 NAME 'postalCode' DESC 'RFC2256: postal code' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{40} )) Feb 28 13:34:26 xxxx slapd: line 157 (attributetype ( 2.5.4.18 NAME 'postOfficeBox' DESC 'RFC2256: Post Office Box' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{40} )) Feb 28 13:34:26 xxxx slapd: line 163 (attributetype ( 2.5.4.19 NAME 'physicalDeliveryOfficeName' DESC 'RFC2256: Physical Delivery Office Name' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{128} )) Feb 28 13:34:26 xxxx slapd: line 169 (attributetype ( 2.5.4.20 NAME 'telephoneNumber' DESC 'RFC2256: Telephone Number' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50{32} )) Feb 28 13:34:26 xxxx slapd: line 173 (attributetype ( 2.5.4.21 NAME 'telexNumber' DESC 'RFC2256: Telex Number' SYNTAX 1.3.6.1.4.1.1466.115.121.1.52 )) Feb 28 13:34:26 xxxx slapd: line 177 (attributetype ( 2.5.4.22 NAME 'teletexTerminalIdentifier' DESC 'RFC2256: Teletex Terminal Identifier' SYNTAX 1.3.6.1.4.1.1466.115.121.1.51 )) Feb 28 13:34:26 xxxx slapd: line 181 (attributetype ( 2.5.4.23 NAME ( 'facsimileTelephoneNumber' 'fax' ) DESC 'RFC2256: Facsimile (Fax) Telephone Number' SYNTAX 1.3.6.1.4.1.1466.115.121.1.22 )) Feb 28 13:34:26 xxxx slapd: line 187 (attributetype ( 2.5.4.24 NAME 'x121Address' DESC 'RFC2256: X.121 Address' EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{15} )) Feb 28 13:34:26 xxxx slapd: line 193 (attributetype ( 2.5.4.25 NAME 'internationaliSDNNumber' DESC 'RFC2256: international ISDN number' EQUALITY numericStringMatch SUBSTR numericStringSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.36{16} )) Feb 28 13:34:26 xxxx slapd: line 198 (attributetype ( 2.5.4.26 NAME 'registeredAddress' DESC 'RFC2256: registered postal address' SUP postalAddress SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )) Feb 28 13:34:26 xxxx slapd: line 204 (attributetype ( 2.5.4.27 NAME 'destinationIndicator' DESC 'RFC2256: destination indicator' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44{128} )) Feb 28 13:34:26 xxxx slapd: line 209 (attributetype ( 2.5.4.28 NAME 'preferredDeliveryMethod' DESC 'RFC2256: preferred delivery method' SYNTAX 1.3.6.1.4.1.1466.115.121.1.14 SINGLE-VALUE )) Feb 28 13:34:26 xxxx slapd: line 215 (attributetype ( 2.5.4.29 NAME 'presentationAddress' DESC 'RFC2256: presentation address' EQUALITY presentationAddressMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.43 SINGLE-VALUE )) Feb 28 13:34:26 xxxx slapd: line 220 (attributetype ( 2.5.4.30 NAME 'supportedApplicationContext' DESC 'RFC2256: supported application context' EQUALITY objectIdentifierMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.38 )) Feb 28 13:34:26 xxxx slapd: line 224 (attributetype ( 2.5.4.31 NAME 'member' DESC 'RFC2256: member of a group' SUP distinguishedName )) Feb 28 13:34:26 xxxx slapd: line 228 (attributetype ( 2.5.4.32 NAME 'owner' DESC 'RFC2256: owner (of the object)' SUP distinguishedName )) Feb 28 13:34:26 xxxx slapd: line 232 (attributetype ( 2.5.4.33 NAME 'roleOccupant' DESC 'RFC2256: occupant of role' SUP distinguishedName )) Feb 28 13:34:26 xxxx slapd: line 236 (attributetype ( 2.5.4.34 NAME 'seeAlso' DESC 'RFC2256: DN of related object' SUP distinguishedName )) Feb 28 13:34:26 xxxx slapd: line 249 (attributetype ( 2.5.4.36 NAME 'userCertificate' DESC 'RFC2256: X.509 user certificate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.8 )) Feb 28 13:34:26 xxxx slapd: line 256 (attributetype ( 2.5.4.37 NAME 'cACertificate' DESC 'RFC2256: X.509 CA certificate, use ;binary' EQUALITY certificateExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.8 )) Feb 28 13:34:26 xxxx slapd: line 261 (attributetype ( 2.5.4.38 NAME 'authorityRevocationList' DESC 'RFC2256: X.509 authority revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 )) Feb 28 13:34:26 xxxx slapd: line 266 (attributetype ( 2.5.4.39 NAME 'certificateRevocationList' DESC 'RFC2256: X.509 certificate revocation list, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 )) Feb 28 13:34:26 xxxx slapd: line 271 (attributetype ( 2.5.4.40 NAME 'crossCertificatePair' DESC 'RFC2256: X.509 cross certificate pair, use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.10 )) Feb 28 13:34:26 xxxx slapd: line 281 (attributetype ( 2.5.4.42 NAME ( 'givenName' 'gn' ) DESC 'RFC2256: first name(s) for which the entity is known by' SUP name )) Feb 28 13:34:26 xxxx slapd: line 285 (attributetype ( 2.5.4.43 NAME 'initials' DESC 'RFC2256: initials of some or all of names, but not the surname(s).' SUP name )) Feb 28 13:34:26 xxxx slapd: line 289 (attributetype ( 2.5.4.44 NAME 'generationQualifier' DESC 'RFC2256: name qualifier indicating a generation' SUP name )) Feb 28 13:34:26 xxxx slapd: line 294 (attributetype ( 2.5.4.45 NAME 'x500UniqueIdentifier' DESC 'RFC2256: X.500 unique identifier' EQUALITY bitStringMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.6 )) Feb 28 13:34:26 xxxx slapd: line 301 (attributetype ( 2.5.4.46 NAME 'dnQualifier' DESC 'RFC2256: DN qualifier' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.44 )) Feb 28 13:34:26 xxxx slapd: line 305 (attributetype ( 2.5.4.47 NAME 'enhancedSearchGuide' DESC 'RFC2256: enhanced search guide' SYNTAX 1.3.6.1.4.1.1466.115.121.1.21 )) Feb 28 13:34:26 xxxx slapd: line 310 (attributetype ( 2.5.4.48 NAME 'protocolInformation' DESC 'RFC2256: protocol information' EQUALITY protocolInformationMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.42 )) Feb 28 13:34:26 xxxx slapd: line 320 (attributetype ( 2.5.4.50 NAME 'uniqueMember' DESC 'RFC2256: unique member of a group' EQUALITY uniqueMemberMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.34 )) Feb 28 13:34:26 xxxx slapd: line 326 (attributetype ( 2.5.4.51 NAME 'houseIdentifier' DESC 'RFC Feb 28 13:34:26 xxxx slapd: 2256: house identifier' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{32768} )) Feb 28 13:34:26 xxxx slapd: line 331 (attributetype ( 2.5.4.52 NAME 'supportedAlgorithms' DESC 'RFC2256: supported algorithms' SYNTAX 1.3.6.1.4.1.1466.115.121.1.49 )) Feb 28 13:34:26 xxxx slapd: line 336 (attributetype ( 2.5.4.53 NAME 'deltaRevocationList' DESC 'RFC2256: delta revocation list; use ;binary' SYNTAX 1.3.6.1.4.1.1466.115.121.1.9 )) Feb 28 13:34:26 xxxx slapd: line 340 (attributetype ( 2.5.4.54 NAME 'dmdName' DESC 'RFC2256: name of DMD' SUP name )) Feb 28 13:34:26 xxxx slapd: line 355 (objectclass ( 2.5.6.2 NAME 'country' DESC 'RFC2256: a country' SUP top STRUCTURAL MUST c MAY ( searchGuide $ description ) )) Feb 28 13:34:26 xxxx slapd: line 360 (objectclass ( 2.5.6.3 NAME 'locality' DESC 'RFC2256: a locality' SUP top STRUCTURAL MAY ( street $ seeAlso $ searchGuide $ st $ l $ description ) )) Feb 28 13:34:26 xxxx slapd: line 371 (objectclass ( 2.5.6.4 NAME 'organization' DESC 'RFC2256: an organization' SUP top STRUCTURAL MUST o MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ x121Address $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) )) Feb 28 13:34:26 xxxx slapd: line 382 (objectclass ( 2.5.6.5 NAME 'organizationalUnit' DESC 'RFC2256: an organizational unit' SUP top STRUCTURAL MUST ou MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ x121Address $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) )) Feb 28 13:34:26 xxxx slapd: line 388 (objectclass ( 2.5.6.6 NAME 'person' DESC 'RFC2256: a person' SUP top STRUCTURAL MUST ( sn $ cn ) MAY ( userPassword $ telephoneNumber $ seeAlso $ description ) )) Feb 28 13:34:27 xxxx slapd: line 397 (objectclass ( 2.5.6.7 NAME 'organizationalPerson' DESC 'RFC2256: an organizational person' SUP person STRUCTURAL MAY ( title $ x121Address $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ ou $ st $ l ) )) Feb 28 13:34:27 xxxx slapd: line 408 (objectclass ( 2.5.6.8 NAME 'organizationalRole' DESC 'RFC2256: an organizational role' SUP top STRUCTURAL MUST cn MAY ( x121Address $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ seeAlso $ roleOccupant $ preferredDeliveryMethod $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ ou $ st $ l $ description ) )) Feb 28 13:34:27 xxxx slapd: line 414 (objectclass ( 2.5.6.9 NAME 'groupOfNames' DESC 'RFC2256: a group of names (DNs)' SUP top STRUCTURAL MUST ( member $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) )) Feb 28 13:34:27 xxxx slapd: line 425 (objectclass ( 2.5.6.10 NAME 'residentialPerson' DESC 'RFC2256: an residential person' SUP person STRUCTURAL MUST l MAY ( businessCategory $ x121Address $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ preferredDeliveryMethod $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l ) )) Feb 28 13:34:27 xxxx slapd: line 431 (objectclass ( 2.5.6.11 NAME 'applicationProcess' DESC 'RFC2256: an application process' SUP top STRUCTURAL MUST cn MAY ( seeAlso $ ou $ l $ description ) )) Feb 28 13:34:27 xxxx slapd: line 438 (objectclass ( 2.5.6.12 NAME 'applicationEntity' DESC 'RFC2256: an application entity' SUP top STRUCTURAL MUST ( presentationAddress $ cn ) MAY ( supportedApplicationContext $ seeAlso $ ou $ o $ l $ description ) )) Feb 28 13:34:27 xxxx slapd: line 443 (objectclass ( 2.5.6.13 NAME 'dSA' DESC 'RFC2256: a directory system agent (a server)' SUP applicationEntity STRUCTURAL MAY knowledgeInformation )) Feb 28 13:34:27 xxxx slapd: line 449 (objectclass ( 2.5.6.14 NAME 'device' DESC 'RFC2256: a device' SUP top STRUCTURAL MUST cn MAY ( serialNumber $ seeAlso $ owner $ ou $ o $ l $ description ) )) Feb 28 13:34:27 xxxx slapd: line 454 (objectclass ( 2.5.6.15 NAME 'strongAuthenticationUser' DESC 'RFC2256: a strong authentication user' SUP top AUXILIARY MUST userCertificate )) Feb 28 13:34:27 xxxx slapd: line 460 (objectclass ( 2.5.6.16 NAME 'certificationAuthority' DESC 'RFC2256: a certificate authority' SUP top AUXILIARY MUST ( authorityRevocationList $ certificateRevocationList $ cACertificate ) MAY crossCertificatePair )) Feb 28 13:34:27 xxxx slapd: line 466 (objectclass ( 2.5.6.17 NAME 'groupOfUniqueNames' DESC 'RFC2256: a group of unique names (DN and Unique Identifier)' SUP top STRUCTURAL MUST ( uniqueMember $ cn ) MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) )) Feb 28 13:34:27 xxxx slapd: line 471 (objectclass ( 2.5.6.18 NAME 'userSecurityInformation' DESC 'RFC2256: a user security information' SUP top AUXILIARY MAY ( supportedAlgorithms ) )) Feb 28 13:34:27 xxxx slapd: line 475 (objectclass ( 2.5.6.16.2 NAME 'certificationAuthority-V2' SUP certificationAuthority AUXILIARY MAY ( deltaRevocationList ) )) Feb 28 13:34:27 xxxx slapd: line 481 (objectclass ( 2.5.6.19 NAME 'cRLDistributionPoint' SUP top STRUCTURAL MUST ( cn ) MAY ( certificateRevocationList $ authorityRevocationList $ deltaRevocationList ) )) Feb 28 13:34:27 xxxx slapd: line 491 (objectclass ( 2.5.6.20 NAME 'dmd' SUP top STRUCTURAL MUST ( dmdName ) MAY ( userPassword $ searchGuide $ seeAlso $ businessCategory $ x121Address $ registeredAddress $ destinationIndicator $ preferredDeliveryMethod $ telexNumber $ teletexTerminalIdentifier $ telephoneNumber $ internationaliSDNNumber $ facsimileTelephoneNumber $ street $ postOfficeBox $ postalCode $ postalAddress $ physicalDeliveryOfficeName $ st $ l $ description ) )) Feb 28 13:34:27 xxxx slapd: line 499 (objectclass ( 2.5.6.21 NAME 'pkiUser' DESC 'RFC2587: a PKI user' SUP top AUXILIARY MAY userCertificate )) Feb 28 13:34:27 xxxx slapd: line 505 (objectclass ( 2.5.6.22 NAME 'pkiCA' DESC 'RFC2587: PKI certificate authority' SUP top AUXILIARY MAY ( authorityRevocationList $ certificateRevocationList $ cACertificate $ crossCertificatePair ) )) Feb 28 13:34:27 xxxx slapd: line 510 (objectclass ( 2.5.6.23 NAME 'deltaCRL' DESC 'RFC2587: PKI user' SUP top AUXILIARY MAY deltaRevocationList )) Feb 28 13:34:27 xxxx slapd: line 523 (objectclass ( 1.3.6.1.4.1.250.3.15 NAME 'labeledURIObject' DESC 'RFC2079: object that contains the URI attribute type' MAY ( labeledURI ) SUP top AUXILIARY )) Feb 28 13:34:27 xxxx slapd: line 533 (attributetype ( 0.9.2342.19200300.100.1.1 NAME ( 'uid' 'userid' ) DESC 'RFC1274: user identifier' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 540 (attributetype ( 0.9.2342.19200300.100.1.3 NAME ( 'mail' 'rfc822Mailbox' ) DESC 'RFC1274: RFC822 Mailbox' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )) Feb 28 13:34:27 xxxx slapd: line 545 (objectclass ( 0.9.2342.19200300.100.4.19 NAME 'simpleSecurityObject' DESC 'RFC1274: simple security object' SUP top AUXILIARY MUST userPassword )) Feb 28 13:34:27 xxxx slapd: line 553 (attributetype ( 0.9.2342.19200300.100.1.25 NAME ( 'dc' 'domainComponent' ) DESC 'RFC1274/2247: domain component' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 558 (objectclass ( 1.3.6.1.4.1.1466.344 NAME 'dcObject' DESC 'RFC2247: domain component object' SUP top AUXILIARY MUST dc )) Feb 28 13:34:27 xxxx slapd: line 563 (objectclass ( 1.3.6.1.1.3.1 NAME 'uidObject' DESC 'RFC2377: uid object' SUP top AUXILIARY MUST uid )) Feb 28 13:34:27 xxxx slapd: line 571 (attributetype ( 0.9.2342.19200300.100.1.37 NAME 'associatedDomain' DESC 'RFC1274: domain associated with object' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )) Feb 28 13:34:27 xxxx slapd: line 579 (attributetype ( 1.2.840.113549.1.9.1 NAME ( 'email' 'emailAddress' 'pkcs9email' ) DESC 'RFC2459: legacy attribute for email addresses in DNs' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )) Feb 28 13:34:27 xxxx slapd: >>> dnNormalize: <cn=Subschema> Feb 28 13:34:27 xxxx slapd: => ldap_bv2dn(cn=Subschema,0) Feb 28 13:34:27 xxxx slapd: <= ldap_bv2dn(cn=Subschema,0)=0 Feb 28 13:34:27 xxxx slapd: => ldap_dn2bv(272) Feb 28 13:34:27 xxxx slapd: <= ldap_dn2bv(cn=subschema,272)=0 Feb 28 13:34:27 xxxx slapd: <<< dnNormalize: <cn=subschema> Feb 28 13:34:27 xxxx slapd: li Feb 28 13:34:27 xxxx slapd: ne 5 (include /etc/openldap/schema/cosine.schema) Feb 28 13:34:27 xxxx slapd: reading config file /etc/openldap/schema/cosine.schema Feb 28 13:34:27 xxxx slapd: line 130 (attributetype ( 0.9.2342.19200300.100.1.2 NAME 'textEncodedORAddress' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 168 (attributetype ( 0.9.2342.19200300.100.1.4 NAME 'info' DESC 'RFC1274: general information' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{2048} )) Feb 28 13:34:27 xxxx slapd: line 187 (attributetype ( 0.9.2342.19200300.100.1.5 NAME ( 'drink' 'favouriteDrink' ) DESC 'RFC1274: favorite drink' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 205 (attributetype ( 0.9.2342.19200300.100.1.6 NAME 'roomNumber' DESC 'RFC1274: room number' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 227 (attributetype ( 0.9.2342.19200300.100.1.7 NAME 'photo' DESC 'RFC1274: photo (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23{25000} )) Feb 28 13:34:27 xxxx slapd: line 248 (attributetype ( 0.9.2342.19200300.100.1.8 NAME 'userClass' DESC 'RFC1274: categorory of user' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 264 (attributetype ( 0.9.2342.19200300.100.1.9 NAME 'host' DESC 'RFC1274: host computer' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 279 (attributetype ( 0.9.2342.19200300.100.1.10 NAME 'manager' DESC 'RFC1274: DN of manager' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )) Feb 28 13:34:27 xxxx slapd: line 296 (attributetype ( 0.9.2342.19200300.100.1.11 NAME 'documentIdentifier' DESC 'RFC1274: unique identifier of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 312 (attributetype ( 0.9.2342.19200300.100.1.12 NAME 'documentTitle' DESC 'RFC1274: title of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 329 (attributetype ( 0.9.2342.19200300.100.1.13 NAME 'documentVersion' DESC 'RFC1274: version of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 344 (attributetype ( 0.9.2342.19200300.100.1.14 NAME 'documentAuthor' DESC 'RFC1274: DN of author of document' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )) Feb 28 13:34:27 xxxx slapd: line 361 (attributetype ( 0.9.2342.19200300.100.1.15 NAME 'documentLocation' DESC 'RFC1274: location of document original' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 380 (attributetype ( 0.9.2342.19200300.100.1.20 DESC 'RFC1274: home telephone number' NAME ( 'homePhone' 'homeTelephoneNumber' ) EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 )) Feb 28 13:34:27 xxxx slapd: line 395 (attributetype ( 0.9.2342.19200300.100.1.21 NAME 'secretary' DESC 'RFC1274: DN of secretary' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )) Feb 28 13:34:27 xxxx slapd: line 411 (attributetype ( 0.9.2342.19200300.100.1.22 NAME 'otherMailbox' SYNTAX 1.3.6.1.4.1.1466.115.121.1.39 )) Feb 28 13:34:27 xxxx slapd: line 480 (attributetype ( 0.9.2342.19200300.100.1.26 NAME 'aRecord' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )) Feb 28 13:34:27 xxxx slapd: line 486 (attributetype ( 0.9.2342.19200300.100.1.27 NAME 'mDRecord' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )) Feb 28 13:34:27 xxxx slapd: line 501 (attributetype ( 0.9.2342.19200300.100.1.28 NAME 'mXRecord' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )) Feb 28 13:34:27 xxxx slapd: line 516 (attributetype ( 0.9.2342.19200300.100.1.29 NAME 'nSRecord' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )) Feb 28 13:34:27 xxxx slapd: line 531 (attributetype ( 0.9.2342.19200300.100.1.30 NAME 'sOARecord' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )) Feb 28 13:34:27 xxxx slapd: line 546 (attributetype ( 0.9.2342.19200300.100.1.31 NAME 'cNAMERecord' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )) Feb 28 13:34:27 xxxx slapd: line 581 (attributetype ( 0.9.2342.19200300.100.1.38 NAME 'associatedName' DESC 'RFC1274: DN of entry associated with domain' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )) Feb 28 13:34:27 xxxx slapd: line 599 (attributetype ( 0.9.2342.19200300.100.1.39 NAME 'homePostalAddress' DESC 'RFC1274: home postal address' EQUALITY caseIgnoreListMatch SUBSTR caseIgnoreListSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.41 )) Feb 28 13:34:27 xxxx slapd: line 616 (attributetype ( 0.9.2342.19200300.100.1.40 NAME 'personalTitle' DESC 'RFC1274: personal title' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 635 (attributetype ( 0.9.2342.19200300.100.1.41 NAME ( 'mobile' 'mobileTelephoneNumber' ) DESC 'RFC1274: mobile telephone number' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 )) Feb 28 13:34:27 xxxx slapd: line 653 (attributetype ( 0.9.2342.19200300.100.1.42 NAME ( 'pager' 'pagerTelephoneNumber' ) DESC 'RFC1274: pager telephone number' EQUALITY telephoneNumberMatch SUBSTR telephoneNumberSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.50 )) Feb 28 13:34:27 xxxx slapd: line 671 (attributetype ( 0.9.2342.19200300.100.1.43 NAME ( 'co' 'friendlyCountryName' ) DESC 'RFC1274: friendly country name' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )) Feb 28 13:34:27 xxxx slapd: line 691 (attributetype ( 0.9.2342.19200300.100.1.44 NAME 'uniqueIdentifier' DESC 'RFC1274: unique identifer' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 713 (attributetype ( 0.9.2342.19200300.100.1.45 NAME 'organizationalStatus' DESC 'RFC1274: organizational status' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 734 (attributetype ( 0.9.2342.19200300.100.1.46 NAME 'janetMailbox' DESC 'RFC1274: Janet mailbox' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{256} )) Feb 28 13:34:27 xxxx slapd: line 764 (attributetype ( 0.9.2342.19200300.100.1.47 NAME 'mailPreferenceOption' DESC 'RFC1274: mail preference option' SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 )) Feb 28 13:34:27 xxxx slapd: line 781 (attributetype ( 0.9.2342.19200300.100.1.48 NAME 'buildingName' DESC 'RFC1274: name of building' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15{256} )) Feb 28 13:34:27 xxxx slapd: line 796 (attributetype ( 0.9.2342.19200300.100.1.49 NAME 'dSAQuality' DESC 'RFC1274: DSA Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.19 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 811 (attributetype ( 0.9.2342.19200300.100.1.50 NAME 'singleLevelQuality' DESC 'RFC1274: Single Level Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 827 (attributetype ( 0.9.2342.19200300.100.1.51 NAME 'subtreeMinimumQuality' DESC 'RFC1274: Subtree Mininum Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 843 (attributetype ( 0.9.2342.19200300.100.1.52 NAME 'subtreeMaximumQuality' DESC 'RFC1274: Subtree Maximun Quality' SYNTAX 1.3.6.1.4.1.1466.115.121.1.13 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 865 (attributetype ( 0.9.2342.19200300.100.1.53 NAME 'personalSignature' DESC 'RFC1274: Personal Signature (G3 fax)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.23 )) Feb 28 13:34:27 xxxx slapd: line 884 (attributetype ( 0.9.2342.19200300.100.1.54 NAME 'dITRedirect' DESC 'RFC1274: DIT Redirect' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 )) Feb 28 13:34:27 xxxx slapd: line 900 (attributetype ( 0.9.2342.19200300.100.1.55 NAME 'audio' DESC 'RFC1274: audio (u-law)' SYNTAX 1.3.6.1.4.1.1466.115.121.1.4{25000} )) Feb 28 13:34:27 xxxx slapd: line 916 (attributetype ( 0.9.2342.19200300.100.1.56 NAME 'documentPublisher' DESC 'RFC1274: publisher of document' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )) Feb 28 13:34:27 xxxx slapd: line 1084 (objectclass ( 0.9.2342.19200300.100.4.4 NAME ( 'pilotPerson' 'newPilotPerson' ) SUP person STRUCTURAL MAY ( userid $ textEncodedORAddress $ rfc822Mailbox $ favouriteDrink $ roomNumber $ userClass $ homeTelephoneNumber $ homePostalAddress $ secretary $ personalTitle $ preferredDeliveryMethod $ businessCategory $ janetMailbox $ otherMailbox $ mobileTelephoneNumber $ pagerTelephoneNumber $ organizationalStatus $ mailPreferenceOption $ persona Feb 28 13:34:27 xxxx slapd: lSignature ) )) Feb 28 13:34:27 xxxx slapd: line 1110 (objectclass ( 0.9.2342.19200300.100.4.5 NAME 'account' SUP top STRUCTURAL MUST userid MAY ( description $ seeAlso $ localityName $ organizationName $ organizationalUnitName $ host ) )) Feb 28 13:34:27 xxxx slapd: line 1142 (objectclass ( 0.9.2342.19200300.100.4.6 NAME 'document' SUP top STRUCTURAL MUST documentIdentifier MAY ( commonName $ description $ seeAlso $ localityName $ organizationName $ organizationalUnitName $ documentTitle $ documentVersion $ documentAuthor $ documentLocation $ documentPublisher ) )) Feb 28 13:34:27 xxxx slapd: line 1165 (objectclass ( 0.9.2342.19200300.100.4.7 NAME 'room' SUP top STRUCTURAL MUST commonName MAY ( roomNumber $ description $ seeAlso $ telephoneNumber ) )) Feb 28 13:34:27 xxxx slapd: line 1191 (objectclass ( 0.9.2342.19200300.100.4.9 NAME 'documentSeries' SUP top STRUCTURAL MUST commonName MAY ( description $ seeAlso $ telephonenumber $ localityName $ organizationName $ organizationalUnitName ) )) Feb 28 13:34:27 xxxx slapd: line 1222 (objectclass ( 0.9.2342.19200300.100.4.13 NAME 'domain' SUP top STRUCTURAL MUST domainComponent MAY ( associatedName $ organizationName $ description $ businessCategory $ seeAlso $ searchGuide $ userPassword $ localityName $ stateOrProvinceName $ streetAddress $ physicalDeliveryOfficeName $ postalAddress $ postalCode $ postOfficeBox $ streetAddress $ facsimileTelephoneNumber $ internationalISDNNumber $ telephoneNumber $ teletexTerminalIdentifier $ telexNumber $ preferredDeliveryMethod $ destinationIndicator $ registeredAddress $ x121Address ) )) Feb 28 13:34:27 xxxx slapd: line 1252 (objectclass ( 0.9.2342.19200300.100.4.14 NAME 'RFC822localPart' SUP domain STRUCTURAL MAY ( commonName $ surname $ description $ seeAlso $ telephoneNumber $ physicalDeliveryOfficeName $ postalAddress $ postalCode $ postOfficeBox $ streetAddress $ facsimileTelephoneNumber $ internationalISDNNumber $ telephoneNumber $ teletexTerminalIdentifier $ telexNumber $ preferredDeliveryMethod $ destinationIndicator $ registeredAddress $ x121Address ) )) Feb 28 13:34:27 xxxx slapd: line 1275 (objectclass ( 0.9.2342.19200300.100.4.15 NAME 'dNSDomain' SUP 'domain' STRUCTURAL MAY ( ARecord $ MDRecord $ MXRecord $ NSRecord $ SOARecord $ CNAMERecord ) )) Feb 28 13:34:27 xxxx slapd: line 1293 (objectclass ( 0.9.2342.19200300.100.4.17 NAME 'domainRelatedObject' DESC 'RFC1274: an object related to an domain' SUP top AUXILIARY MUST associatedDomain )) Feb 28 13:34:27 xxxx slapd: line 1311 (objectclass ( 0.9.2342.19200300.100.4.18 NAME 'friendlyCountry' SUP country STRUCTURAL MUST friendlyCountryName )) Feb 28 13:34:27 xxxx slapd: line 1345 (objectclass ( 0.9.2342.19200300.100.4.20 NAME 'pilotOrganization' SUP ( organization $ organizationalUnit ) STRUCTURAL MAY buildingName )) Feb 28 13:34:27 xxxx slapd: line 1361 (objectclass ( 0.9.2342.19200300.100.4.21 NAME 'pilotDSA' SUP dsa STRUCTURAL MAY dSAQuality )) Feb 28 13:34:27 xxxx slapd: line 1382 (objectclass ( 0.9.2342.19200300.100.4.22 NAME 'qualityLabelledData' SUP top AUXILIARY MUST dsaQuality MAY ( subtreeMinimumQuality $ subtreeMaximumQuality ) )) Feb 28 13:34:27 xxxx slapd: line 6 (include /etc/openldap/schema/inetorgperson.schema) Feb 28 13:34:27 xxxx slapd: reading config file /etc/openldap/schema/inetorgperson.schema Feb 28 13:34:27 xxxx slapd: line 36 (attributetype ( 2.16.840.1.113730.3.1.1 NAME 'carLicense' DESC 'RFC2798: vehicle license or registration plate' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )) Feb 28 13:34:27 xxxx slapd: line 46 (attributetype ( 2.16.840.1.113730.3.1.2 NAME 'departmentNumber' DESC 'RFC2798: identifies a department within an organization' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )) Feb 28 13:34:27 xxxx slapd: line 59 (attributetype ( 2.16.840.1.113730.3.1.241 NAME 'displayName' DESC 'RFC2798: preferred name to be used when displaying entries' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 70 (attributetype ( 2.16.840.1.113730.3.1.3 NAME 'employeeNumber' DESC 'RFC2798: numerically identifies an employee within an organization' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 81 (attributetype ( 2.16.840.1.113730.3.1.4 NAME 'employeeType' DESC 'RFC2798: type of employment for a person' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )) Feb 28 13:34:27 xxxx slapd: line 92 (attributetype ( 0.9.2342.19200300.100.1.60 NAME 'jpegPhoto' DESC 'RFC2798: a JPEG image' SYNTAX 1.3.6.1.4.1.1466.115.121.1.28 )) Feb 28 13:34:27 xxxx slapd: line 107 (attributetype ( 2.16.840.1.113730.3.1.39 NAME 'preferredLanguage' DESC 'RFC2798: preferred written or spoken language for a person' EQUALITY caseIgnoreMatch SUBSTR caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 123 (attributetype ( 2.16.840.1.113730.3.1.40 NAME 'userSMIMECertificate' DESC 'RFC2798: PKCS#7 SignedData used to support S/MIME' SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )) Feb 28 13:34:27 xxxx slapd: line 135 (attributetype ( 2.16.840.1.113730.3.1.216 NAME 'userPKCS12' DESC 'RFC2798: personal identity information, a PKCS #12 PFX' SYNTAX 1.3.6.1.4.1.1466.115.121.1.5 )) Feb 28 13:34:27 xxxx slapd: line 155 (objectclass ( 2.16.840.1.113730.3.2.2 NAME 'inetOrgPerson' DESC 'RFC2798: Internet Organizational Person' SUP organizationalPerson STRUCTURAL MAY ( audio $ businessCategory $ carLicense $ departmentNumber $ displayName $ employeeNumber $ employeeType $ givenName $ homePhone $ homePostalAddress $ initials $ jpegPhoto $ labeledURI $ mail $ manager $ mobile $ o $ pager $ photo $ roomNumber $ secretary $ uid $ userCertificate $ x500uniqueIdentifier $ preferredLanguage $ userSMIMECertificate $ userPKCS12 ) )) Feb 28 13:34:27 xxxx slapd: line 7 (include /etc/openldap/schema/nis.schema) Feb 28 13:34:27 xxxx slapd: reading config file /etc/openldap/schema/nis.schema Feb 28 13:34:27 xxxx slapd: line 40 (attributetype ( 1.3.6.1.1.1.1.0 NAME 'uidNumber' DESC 'An integer uniquely identifying a user in an administrative domain' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 45 (attributetype ( 1.3.6.1.1.1.1.1 NAME 'gidNumber' DESC 'An integer uniquely identifying a group in an administrative domain' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 51 (attributetype ( 1.3.6.1.1.1.1.2 NAME 'gecos' DESC 'The GECOS field; the common name' EQUALITY caseIgnoreIA5Match SUBSTR caseIgnoreIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 56 (attributetype ( 1.3.6.1.1.1.1.3 NAME 'homeDirectory' DESC 'The absolute path to the home directory' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 61 (attributetype ( 1.3.6.1.1.1.1.4 NAME 'loginShell' DESC 'The path to the login shell' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 65 (attributetype ( 1.3.6.1.1.1.1.5 NAME 'shadowLastChange' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 69 (attributetype ( 1.3.6.1.1.1.1.6 NAME 'shadowMin' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 73 (attributetype ( 1.3.6.1.1.1.1.7 NAME 'shadowMax' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 77 (attributetype ( 1.3.6.1.1.1.1.8 NAME 'shadowWarning' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 81 (attributetype ( 1.3.6.1.1.1.1.9 NAME 'shadowInactive' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 85 (attributetype ( 1.3.6.1.1.1.1.10 NAME 'shadowExpire' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 89 (attributetype ( 1.3.6.1.1.1.1.11 NAME 'shadowFlag' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 94 (attributetype ( 1.3.6.1.1.1.1.12 NAME 'memberUid' EQUALITY caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )) Feb 28 13:34:27 xxxx slapd: line 99 (attributetype ( 1.3.6.1.1.1.1.13 NAME 'memberNisNetgroup' EQUALITY caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )) Feb 28 13:34:27 xxxx slapd: line 103 (attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple' DESC 'Netgroup triple' SYNTAX 1.3.6.1.1.1.0.0 )) Feb 28 13:34:27 xxxx slapd: line 107 (attributetype ( 1.3.6.1.1.1.1.15 NAME 'ipServicePort' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 110 (attributetype ( 1.3.6.1.1.1.1.16 NAME 'ipServiceProtocol' SUP name )) Feb 28 13:34:27 xxxx slapd: line 114 (attributetype ( 1.3.6.1.1.1.1.17 NAME 'ipProtocolNumber' EQUALITY integerMatch Feb 28 13:34:27 xxxx slapd: SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 118 (attributetype ( 1.3.6.1.1.1.1.18 NAME 'oncRpcNumber' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 123 (attributetype ( 1.3.6.1.1.1.1.19 NAME 'ipHostNumber' DESC 'IP address' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )) Feb 28 13:34:27 xxxx slapd: line 128 (attributetype ( 1.3.6.1.1.1.1.20 NAME 'ipNetworkNumber' DESC 'IP network' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 133 (attributetype ( 1.3.6.1.1.1.1.21 NAME 'ipNetmaskNumber' DESC 'IP netmask' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 138 (attributetype ( 1.3.6.1.1.1.1.22 NAME 'macAddress' DESC 'MAC address' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{128} )) Feb 28 13:34:27 xxxx slapd: line 142 (attributetype ( 1.3.6.1.1.1.1.23 NAME 'bootParameter' DESC 'rpc.bootparamd parameter' SYNTAX 1.3.6.1.1.1.0.1 )) Feb 28 13:34:27 xxxx slapd: line 147 (attributetype ( 1.3.6.1.1.1.1.24 NAME 'bootFile' DESC 'Boot image name' EQUALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )) Feb 28 13:34:27 xxxx slapd: line 150 (attributetype ( 1.3.6.1.1.1.1.26 NAME 'nisMapName' SUP name )) Feb 28 13:34:27 xxxx slapd: line 155 (attributetype ( 1.3.6.1.1.1.1.27 NAME 'nisMapEntry' EQUALITY caseExactIA5Match SUBSTR caseExactIA5SubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.26{1024} SINGLE-VALUE )) Feb 28 13:34:27 xxxx slapd: line 162 (objectclass ( 1.3.6.1.1.1.2.0 NAME 'posixAccount' SUP top AUXILIARY DESC 'Abstraction of an account with POSIX attributes' MUST ( cn $ uid $ uidNumber $ gidNumber $ homeDirectory ) MAY ( userPassword $ loginShell $ gecos $ description ) )) Feb 28 13:34:27 xxxx slapd: line 169 (objectclass ( 1.3.6.1.1.1.2.1 NAME 'shadowAccount' SUP top AUXILIARY DESC 'Additional attributes for shadow passwords' MUST uid MAY ( userPassword $ shadowLastChange $ shadowMin $ shadowMax $ shadowWarning $ shadowInactive $ shadowExpire $ shadowFlag $ description ) )) Feb 28 13:34:27 xxxx slapd: line 174 (objectclass ( 1.3.6.1.1.1.2.2 NAME 'posixGroup' SUP top STRUCTURAL DESC 'Abstraction of a group of accounts' MUST ( cn $ gidNumber ) MAY ( userPassword $ memberUid $ description ) )) Feb 28 13:34:27 xxxx slapd: line 179 (objectclass ( 1.3.6.1.1.1.2.3 NAME 'ipService' SUP top STRUCTURAL DESC 'Abstraction an Internet Protocol service' MUST ( cn $ ipServicePort $ ipServiceProtocol ) MAY ( description ) )) Feb 28 13:34:27 xxxx slapd: line 184 (objectclass ( 1.3.6.1.1.1.2.4 NAME 'ipProtocol' SUP top STRUCTURAL DESC 'Abstraction of an IP protocol' MUST ( cn $ ipProtocolNumber $ description ) MAY description )) Feb 28 13:34:27 xxxx slapd: line 189 (objectclass ( 1.3.6.1.1.1.2.5 NAME 'oncRpc' SUP top STRUCTURAL DESC 'Abstraction of an ONC/RPC binding' MUST ( cn $ oncRpcNumber $ description ) MAY description )) Feb 28 13:34:27 xxxx slapd: line 194 (objectclass ( 1.3.6.1.1.1.2.6 NAME 'ipHost' SUP top AUXILIARY DESC 'Abstraction of a host, an IP device' MUST ( cn $ ipHostNumber ) MAY ( l $ description $ manager ) )) Feb 28 13:34:27 xxxx slapd: line 199 (objectclass ( 1.3.6.1.1.1.2.7 NAME 'ipNetwork' SUP top STRUCTURAL DESC 'Abstraction of an IP network' MUST ( cn $ ipNetworkNumber ) MAY ( ipNetmaskNumber $ l $ description $ manager ) )) Feb 28 13:34:27 xxxx slapd: line 204 (objectclass ( 1.3.6.1.1.1.2.8 NAME 'nisNetgroup' SUP top STRUCTURAL DESC 'Abstraction of a netgroup' MUST cn MAY ( nisNetgroupTriple $ memberNisNetgroup $ description ) )) Feb 28 13:34:27 xxxx slapd: line 209 (objectclass ( 1.3.6.1.1.1.2.9 NAME 'nisMap' SUP top STRUCTURAL DESC 'A generic abstraction of a NIS map' MUST nisMapName MAY description )) Feb 28 13:34:27 xxxx slapd: line 214 (objectclass ( 1.3.6.1.1.1.2.10 NAME 'nisObject' SUP top STRUCTURAL DESC 'An entry in a NIS map' MUST ( cn $ nisMapEntry $ nisMapName ) MAY description )) Feb 28 13:34:27 xxxx slapd: line 218 (objectclass ( 1.3.6.1.1.1.2.11 NAME 'ieee802Device' SUP top AUXILIARY DESC 'A device with a MAC address' MAY macAddress )) Feb 28 13:34:27 xxxx slapd: line 222 (objectclass ( 1.3.6.1.1.1.2.12 NAME 'bootableDevice' SUP top AUXILIARY DESC 'A device with boot parameters' MAY ( bootFile $ bootParameter ) )) Feb 28 13:34:27 xxxx slapd: line 11 (allow bind_v2) Feb 28 13:34:27 xxxx slapd: line 17 (pidfile /var/run/slapd.pid) Feb 28 13:34:27 xxxx slapd: line 18 (argsfile /var/run/slapd.args) Feb 28 13:34:27 xxxx slapd: line 68 (database bdb) Feb 28 13:34:27 xxxx slapd: bdb_db_init: Initializing BDB database Feb 28 13:34:27 xxxx slapd: line 70 (suffix "dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx") Feb 28 13:34:27 xxxx slapd: >>> dnPrettyNormal: <dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx> Feb 28 13:34:27 xxxx slapd: => ldap_bv2dn(dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,0) Feb 28 13:34:27 xxxx slapd: <= ldap_bv2dn(dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,0)=0 Feb 28 13:34:27 xxxx slapd: => ldap_dn2bv(272) Feb 28 13:34:27 xxxx slapd: <= ldap_dn2bv(dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,272)=0 Feb 28 13:34:27 xxxx slapd: => ldap_dn2bv(272) Feb 28 13:34:27 xxxx slapd: <= ldap_dn2bv(dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,272)=0 Feb 28 13:34:27 xxxx slapd: <<< dnPrettyNormal: <dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx>, <dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx> Feb 28 13:34:27 xxxx slapd: line 72 (rootdn "cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx") Feb 28 13:34:27 xxxx slapd: >>> dnPrettyNormal: <cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx> Feb 28 13:34:27 xxxx slapd: => ldap_bv2dn(cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,0) Feb 28 13:34:27 xxxx slapd: <= ldap_bv2dn(cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,0)=0 Feb 28 13:34:27 xxxx slapd: => ldap_dn2bv(272) Feb 28 13:34:27 xxxx slapd: <= ldap_dn2bv(cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,272)=0 Feb 28 13:34:27 xxxx slapd: => ldap_dn2bv(272) Feb 28 13:34:27 xxxx slapd: <= ldap_dn2bv(cn=manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,272)=0 Feb 28 13:34:27 xxxx slapd: <<< dnPrettyNormal: <cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx>, <cn=manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx> Feb 28 13:34:27 xxxx slapd: line 78 (rootpw ***) Feb 28 13:34:27 xxxx slapd: line 83 (directory /var/lib/ldap) Feb 28 13:34:27 xxxx slapd: line 86 (index objectClass eq,pres) Feb 28 13:34:27 xxxx slapd: index objectClass 0x0006 Feb 28 13:34:27 xxxx slapd: line 87 (index ou,cn,mail,surname,givenname eq,pres,sub) Feb 28 13:34:27 xxxx slapd: index ou 0x0716 Feb 28 13:34:27 xxxx slapd: index cn 0x0716 Feb 28 13:34:27 xxxx slapd: index mail 0x0716 Feb 28 13:34:27 xxxx slapd: index sn 0x0716 Feb 28 13:34:27 xxxx slapd: index givenName 0x0716 Feb 28 13:34:27 xxxx slapd: line 88 (index uidNumber,gidNumber,loginShell eq,pres) Feb 28 13:34:27 xxxx slapd: index uidNumber 0x0006 Feb 28 13:34:27 xxxx slapd: index gidNumber 0x0006 Feb 28 13:34:27 xxxx slapd: index loginShell 0x0006 Feb 28 13:34:27 xxxx slapd: line 89 (index uid,memberUid eq,pres,sub) Feb 28 13:34:27 xxxx slapd: index uid 0x0716 Feb 28 13:34:27 xxxx slapd: index memberUid 0x0716 Feb 28 13:34:27 xxxx slapd: line 90 (index nisMapName,nisMapEntry eq,pres,sub) Feb 28 13:34:27 xxxx slapd: index nisMapName 0x0716 Feb 28 13:34:27 xxxx slapd: index nisMapEntry 0x0716 Feb 28 13:34:27 xxxx slapd: line 102 (access to attrs=userPassword by self write by dn="cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx" write by anonymous auth by * none) Feb 28 13:34:27 xxxx slapd: >>> dnNormalize: <cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx> Feb 28 13:34:27 xxxx slapd: => ldap_bv2dn(cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,0) Feb 28 13:34:27 xxxx slapd: <= ldap_bv2dn(cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,0)=0 Feb 28 13:34:27 xxxx slapd: => ldap_dn2bv(272) Feb 28 13:34:27 xxxx slapd: <= ldap_dn2bv(cn=manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,272)=0 Feb 28 13:34:27 xxxx slapd: <<< dnNormalize: <cn=manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx> Feb 28 13:34:27 xxxx slapd: line 107 (access to * by dn="cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx" write by self write by * read) Feb 28 13:34:27 xxxx slapd: >>> dnNormalize: <cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx> Feb 28 13:34:27 xxxx slapd: => ldap_bv2dn(cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,0) Feb 28 13:34:27 xxxx slapd: <= ldap_bv2dn(cn=Manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,0)=0 Feb 28 13:34:27 xxxx slapd: => ldap_dn2bv(272) Feb 28 13:34:27 xxxx slapd: <= ldap_dn2bv(cn=manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx,272)=0 Feb 28 13:34:27 xxxx slapd: <<< dnNormalize: <cn=manager,dc=xxxx,dc=xx,dc=xxxx,dc=xx,dc=xx> Feb 28 13:34:27 xxxx slapd: matching_rule_use_init Feb 28 13:34:27 xxxx slapd: 1.2.840.113556.1.4.804 (integerBitOrMatch): matchingRuleUse: ( 1.2.840.113556.1.4.804 NAME 'integerBitOrMatch' APPLIES ( oncRpcNumber $ ipProtocolNumber $ ipServicePort $ shadowFlag $ shadowExpire $ shadowInactive $ shadowWarning $ shadowMax $ shadowMin $ shadowLastChange $ gidNumber $ uidNumber $ mailPreferenceOption $ supportedLDAPVersion ) ) Feb 28 13:34:27 xxxx slapd: 1.2.840.113556.1.4.803 (integerBitAndMatch): matchingRuleUse: ( 1.2.840.113556.1.4.803 NAME 'integerBitAndMatch' APPLIES ( oncRpcNumber $ ipProtocolNumber $ ipServicePort $ shadowFlag $ shadowExpire $ shadowInactive $ shadowWarning $ shadowMax $ shadowMin $ shadowLastChange $ gidNumber $ uidNumber $ mailPreferenceOption $ supportedLDAPVersion ) ) Feb 28 13:34:27 xxxx slapd: 1.3.6.1.4.1.1466.109.114.2 (caseIgnoreIA5Match): matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.2 NAME 'caseIgnoreIA5Match' APPLIES ( nisMapEntry $ bootFile $ macAddress $ ipNetmaskNumber $ ipNetworkNumber $ ipHostNumber $ memberNisNetgroup $ memberUid $ loginShell $ homeDirectory $ gecos $ janetMailbox $ cNAMERecord $ sOARecord $ nSRecord $ mXRecord $ mDRecord $ aRecord $ email $ associatedDomain $ dc $ mail $ altServer ) ) Feb 28 13:34:27 xxxx slapd: 1.3.6.1.4.1.1466.109.114.1 (caseExactIA5Match): matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.1 NAME 'caseExactIA5Match' APPLIES ( nisMapEntry $ bootFile $ macAddress $ ipNetmaskNumber $ ipNetworkNumber $ ipHostNumber $ memberNisNetgroup $ memberUid $ loginShell $ h Feb 28 13:34:27 xxxx slapd: omeDirectory $ gecos $ janetMailbox $ cNAMERecord $ sOARecord $ nSRecord $ mXRecord $ mDRecord $ aRecord $ email $ associatedDomain $ dc $ mail $ altServer ) ) Feb 28 13:34:27 xxxx slapd: 2.5.13.35 (certificateMatch): matchingRuleUse: ( 2.5.13.35 NAME 'certificateMatch' APPLIES ( cACertificate $ userCertificate ) ) Feb 28 13:34:27 xxxx slapd: 2.5.13.34 (certificateExactMatch): matchingRuleUse: ( 2.5.13.34 NAME 'certificateExactMatch' APPLIES ( cACertificate $ userCertificate ) ) Feb 28 13:34:27 xxxx slapd: 2.5.13.30 (objectIdentifierFirstComponentMatch): matchingRuleUse: ( 2.5.13.30 NAME 'objectIdentifierFirstComponentMatch' APPLIES ( supportedApplicationContext $ ldapSyntaxes $ supportedFeatures $ supportedExtension $ supportedControl ) ) Feb 28 13:34:27 xxxx slapd: 2.5.13.29 (integerFirstComponentMatch): matchingRuleUse: ( 2.5.13.29 NAME 'integerFirstComponentMatch' APPLIES ( oncRpcNumber $ ipProtocolNumber $ ipServicePort $ shadowFlag $ shadowExpire $ shadowInactive $ shadowWarning $ shadowMax $ shadowMin $ shadowLastChange $ gidNumber $ uidNumber $ mailPreferenceOption $ supportedLDAPVersion ) ) Feb 28 13:34:27 xxxx slapd: 2.5.13.27 (generalizedTimeMatch): matchingRuleUse: ( 2.5.13.27 NAME 'generalizedTimeMatch' APPLIES ( modifyTimestamp $ createTimestamp ) ) Feb 28 13:34:27 xxxx slapd: 2.5.13.24 (protocolInformationMatch): matchingRuleUse: ( 2.5.13.24 NAME 'protocolInformationMatch' APPLIES protocolInformation ) Feb 28 13:34:27 xxxx slapd: 2.5.13.23 (uniqueMemberMatch): matchingRuleUse: ( 2.5.13.23 NAME 'uniqueMemberMatch' APPLIES uniqueMember ) Feb 28 13:34:28 xxxx slapd: 2.5.13.22 (presentationAddressMatch): matchingRuleUse: ( 2.5.13.22 NAME 'presentationAddressMatch' APPLIES presentationAddress ) Feb 28 13:34:28 xxxx slapd: 2.5.13.20 (telephoneNumberMatch): matchingRuleUse: ( 2.5.13.20 NAME 'telephoneNumberMatch' APPLIES ( pager $ mobile $ homePhone $ telephoneNumber ) ) Feb 28 13:34:28 xxxx slapd: 2.5.13.17 (octetStringMatch): matchingRuleUse: ( 2.5.13.17 NAME 'octetStringMatch' APPLIES userPassword ) Feb 28 13:34:28 xxxx slapd: 2.5.13.16 (bitStringMatch): matchingRuleUse: ( 2.5.13.16 NAME 'bitStringMatch' APPLIES x500UniqueIdentifier ) Feb 28 13:34:28 xxxx slapd: 2.5.13.14 (integerMatch): matchingRuleUse: ( 2.5.13.14 NAME 'integerMatch' APPLIES ( oncRpcNumber $ ipProtocolNumber $ ipServicePort $ shadowFlag $ shadowExpire $ shadowInactive $ shadowWarning $ shadowMax $ shadowMin $ shadowLastChange $ gidNumber $ uidNumber $ mailPreferenceOption $ supportedLDAPVersion ) ) Feb 28 13:34:28 xxxx slapd: 2.5.13.13 (booleanMatch): matchingRuleUse: ( 2.5.13.13 NAME 'booleanMatch' APPLIES hasSubordinates ) Feb 28 13:34:28 xxxx slapd: 2.5.13.11 (caseIgnoreListMatch): matchingRuleUse: ( 2.5.13.11 NAME 'caseIgnoreListMatch' APPLIES ( homePostalAddress $ registeredAddress $ postalAddress ) ) Feb 28 13:34:28 xxxx slapd: 2.5.13.8 (numericStringMatch): matchingRuleUse: ( 2.5.13.8 NAME 'numericStringMatch' APPLIES ( internationaliSDNNumber $ x121Address ) ) Feb 28 13:34:28 xxxx slapd: 2.5.13.7 (caseExactSubstringsMatch): matchingRuleUse: ( 2.5.13.7 NAME 'caseExactSubstringsMatch' APPLIES ( dnQualifier $ destinationIndicator $ serialNumber ) ) Feb 28 13:34:28 xxxx slapd: 2.5.13.6 (caseExactOrderingMatch): matchingRuleUse: ( 2.5.13.6 NAME 'caseExactOrderingMatch' APPLIES ( dnQualifier $ destinationIndicator $ serialNumber ) ) Feb 28 13:34:28 xxxx slapd: 2.5.13.5 (caseExactMatch): matchingRuleUse: ( 2.5.13.5 NAME 'caseExactMatch' APPLIES ( nisMapName $ ipServiceProtocol $ preferredLanguage $ employeeType $ employeeNumber $ displayName $ departmentNumber $ carLicense $ documentPublisher $ buildingName $ organizationalStatus $ uniqueIdentifier $ co $ personalTitle $ documentLocation $ documentVersion $ documentTitle $ documentIdentifier $ host $ userClass $ roomNumber $ drink $ info $ textEncodedORAddress $ uid $ dmdName $ houseIdentifier $ dnQualifier $ generationQualifier $ initials $ givenName $ destinationIndicator $ physicalDeliveryOfficeName $ postOfficeBox $ postalCode $ businessCategory $ description $ title $ ou $ o $ street $ st $ l $ c $ serialNumber $ sn $ knowledgeInformation $ labeledURI $ cn $ name $ ref $ vendorVersion $ vendorName $ supportedSASLMechanisms ) ) Feb 28 13:34:28 xxxx slapd: 2.5.13.4 (caseIgnoreSubstringsMatch): matchingRuleUse: ( 2.5.13.4 NAME 'caseIgnoreSubstringsMatch' APPLIES ( dnQualifier $ destinationIndicator $ serialNumber ) ) Feb 28 13:34:28 xxxx slapd: 2.5.13.3 (caseIgnoreOrderingMatch): matchingRuleUse: ( 2.5.13.3 NAME 'caseIgnoreOrderingMatch' APPLIES ( dnQualifier $ destinationIndicator $ serialNumber ) ) Feb 28 13:34:28 xxxx slapd: 2.5.13.2 (caseIgnoreMatch): matchingRuleUse: ( 2.5.13.2 NAME 'caseIgnoreMatch' APPLIES ( nisMapName $ ipServiceProtocol $ preferredLanguage $ employeeType $ employeeNumber $ displayName $ departmentNumber $ carLicense $ documentPublisher $ buildingName $ organizationalStatus $ uniqueIdentifier $ co $ personalTitle $ documentLocation $ documentVersion $ documentTitle $ documentIdentifier $ host $ userClass $ roomNumber $ drink $ info $ textEncodedORAddress $ uid $ dmdName $ houseIdentifier $ dnQualifier $ generationQualifier $ initials $ givenName $ destinationIndicator $ physicalDeliveryOfficeName $ postOfficeBox $ postalCode $ businessCategory $ description $ title $ ou $ o $ street $ st $ l $ c $ serialNumber $ sn $ knowledgeInformation $ labeledURI $ cn $ name $ ref $ vendorVersion $ vendorName $ supportedSASLMechanisms ) ) Feb 28 13:34:28 xxxx slapd: 2.5.13.1 (distinguishedNameMatch): matchingRuleUse: ( 2.5.13.1 NAME 'distinguishedNameMatch' APPLIES ( dITRedirect $ associatedName $ secretary $ documentAuthor $ manager $ seeAlso $ roleOccupant $ owner $ member $ distinguishedName $ aliasedObjectName $ namingContexts $ subschemaSubentry $ modifiersName $ creatorsName ) ) Feb 28 13:34:28 xxxx slapd: 2.5.13.0 (objectIdentifierMatch): matchingRuleUse: ( 2.5.13.0 NAME 'objectIdentifierMatch' APPLIES ( supportedApplicationContext $ supportedFeatures $ supportedExtension $ supportedControl ) ) Feb 28 13:34:28 xxxx slapd: slapd startup: initiated. Feb 28 13:34:28 xxxx slapd: bdb_db_open: dbenv_open(/var/lib/ldap) ---- |
|
投稿日時: 2006-03-01 11:23
/etc/openldap/slapd.conf
の database bdb を database ldbm に変更したら、OpenLDAPが起動するようになりました。 ただし、データは移行されないので、全て入れなおしました。 bdbが悪いのかというとそうではないと思います。 先日まではbdbで稼動していたことと、他のシステムではbdbで現在も稼動しています。 あくまでも推測ですが、 何かの操作をしたときに、bdbのデータファイルが壊れてしまいフリーズ、 再起動してもデータファイルが壊れているので起動できない、 といった状態だったのではないかと思います。 一般的にデータベースの操作はACID特性により整合性が保たれるはずですので、 ファイルシステムやハードディスクの問題かもしれません。 現在、データベースディレクトリの中身は下記のとおりです。 # ls -al /var/lib/ldap/ total 3520 drwx------ 2 ldap ldap 4096 Feb 28 18:05 . drwxr-xr-x 17 root root 4096 Feb 20 17:33 .. -rw------- 1 ldap ldap 81920 Feb 24 21:10 cn.bdb -rw------- 1 ldap ldap 77824 Feb 28 18:05 cn.dbb -rw------- 1 ldap ldap 16384 Jan 17 16:19 __db.001 -rw------- 1 ldap ldap 278528 Jan 17 16:19 __db.002 -rw------- 1 ldap ldap 98304 Jan 17 16:19 __db.003 -rw------- 1 ldap ldap 450560 Jan 17 16:19 __db.004 -rw------- 1 ldap ldap 16384 Jan 17 16:19 __db.005 -rw------- 1 ldap ldap 77824 Feb 23 11:56 dn2id.bdb -rw------- 1 ldap ldap 53248 Feb 28 18:05 dn2id.dbb -rw------- 1 ldap ldap 12288 Feb 23 11:56 gidNumber.bdb -rw------- 1 ldap ldap 12288 Feb 28 18:05 gidNumber.dbb -rw------- 1 ldap ldap 229376 Feb 23 11:20 id2entry.bdb -rw------- 1 ldap ldap 155648 Feb 28 18:05 id2entry.dbb -rw------- 1 ldap ldap 1904477 Feb 22 12:19 log.0000000001 -rw------- 1 ldap ldap 8192 Jan 30 17:27 loginShell.bdb -rw------- 1 ldap ldap 8192 Feb 28 18:05 loginShell.dbb -rw------- 1 ldap ldap 40960 Feb 23 11:56 memberUid.bdb -rw------- 1 ldap ldap 36864 Feb 28 18:05 memberUid.dbb -rw------- 1 ldap ldap 8192 Feb 28 18:05 nextid.dbb -rw------- 1 ldap ldap 32768 Feb 23 11:20 objectClass.bdb -rw------- 1 ldap ldap 16384 Feb 28 18:05 objectClass.dbb -rw------- 1 ldap ldap 8192 Jan 19 19:22 ou.bdb -rw------- 1 ldap ldap 8192 Feb 28 18:03 ou.dbb -rw------- 1 ldap ldap 8192 Jan 19 19:22 sn.bdb -rw------- 1 ldap ldap 36864 Feb 23 11:56 uid.bdb -rw------- 1 ldap ldap 36864 Feb 28 18:05 uid.dbb -rw------- 1 ldap ldap 8192 Feb 24 03:00 uidNumber.bdb -rw------- 1 ldap ldap 8192 Feb 28 18:05 uidNumber.dbb 恐らく、拡張子がbdbのファイルは今は使われていないでしょうから、消してもよいの かもしれませんが、恐くて消せません。 拡張子bdbのファイルを全て消せば、また database bdbで運用できるかもしれませんが、 現行システムの稼動が第一ということで試しておりません。 今回のトラブルで、認証ができなくなることの恐さを知りました。 認証ができなくなるとシステム全体に影響します。 リモートでログインすることさえできなくなります。 これを機会にslurpdを動かし、LDAPサーバーを二重化しようと思います。 |
1
スキルアップ／キャリアアップ（JOB@IT）
Copyright © ITmedia, Inc. All Rights Reserved.
著作権はアイティメディア株式会社またはその記事の筆者に属します。
当サイトに掲載されている記事や画像などの無断転載を禁止します。
著作権はアイティメディア株式会社またはその記事の筆者に属します。
当サイトに掲載されている記事や画像などの無断転載を禁止します。