Re: [Cpu-users] problem running cpu

[Blake M. <bma...@pu...>]

Hi Paul,
could you do me a favor and grab the latest CVS version? Then remove the 
changes you made to ldap.conf, and see if you still have the same 
issues, I think you won't. If that fixes the problem, I'll probably 
release a new version pretty soon since there are several changes in 
CVS, missing from CPU-1.3.99a. Thanks for the report.

-Blake

Paul Stevens wrote:

>
> Hi Blake,
>
> Thanks for the speedy reply. I've done some more testing.
>
>
> Blake Matheny wrote:
>
>> What happens when you specify the user base with -U at the command line?
>
>
> It lists the users just fine. Great. The grouplist is empty though. 
> Bummer.
>
> I've also tried specifying the groupbase as well. I get:
>
> slapd[14168]: conn=754 op=0 BIND dn="DC=NFG,DC=NL" method=128
> slapd[14168]: conn=754 op=0 RESULT tag=97 err=0 text=
> slapd[14170]: conn=754 op=1 SRCH base="ou=People,dc=nfg,dc=nl" scope=2 
> filter="(objectClass=posixAccount)"
> slapd[14170]: conn=754 op=1 SEARCH RESULT tag=101 err=0 text=
> slapd[13654]: conn=754 op=2 SRCH base="ou=People,dc=nfg,dc=nl" scope=2 
> filter="(objectClass=posixGroup)"
> slapd[13654]: conn=754 op=2 SEARCH RESULT tag=101 err=0 text=
> slapd[13532]: conn=-1 fd=17 closed
>
> Mmm, looks like -B is ignored and the -U optvalue is used for the 
> groupbase. Let try.
>
> Yep, when I specify -U <groupbase> I do get the groups but an empty 
> userlist.
>
> But when I do -B <groupbase> I get an ldap_search_st: no such object 
> error.
>
> Looks like my build is seriously broken when it comes to reading the 
> config. Lets run a strace....
>
> Ah problem solved, bug located :-)
>
> The machine I was testing this on didn't have a BASE defined in 
> /etc/ldap/ldap.conf. Defining the BASE makes cpu work as far as I can 
> tell. I never ran into this one before because pam-ldap and nss-ldap 
> worked just fine.
>
>
>
>
>
>>
>> -Blake
>>
>> Paul Stevens wrote:
>>
>>>
>>> Hi all,
>>>
>>> I've compiled and installed 1.3.99a
>>>
>>> I think I have it configured correctly but I keep getting
>>>
>>> #> cpu cat
>>> ldap: ldapCat: ldap_search_st: No such object (32)
>>> ldap: CPU_init: Error in ldapOperation.
>>> #>
>>>
>>> Setting the debug level on my ldap server reveals:
>>>
>>> slapd[13539]: conn=113 op=0 BIND dn="DC=NFG,DC=NL" method=128
>>> slapd[13539]: conn=113 op=0 RESULT tag=97 err=0 text=
>>> slapd[13654]: conn=113 op=1 SRCH base="" scope=2 
>>> filter="(objectClass=posixAccount)"
>>> slapd[13654]: conn=113 op=1 RESULT tag=101 err=32 text=
>>> slapd[13532]: conn=-1 fd=9 closed
>>>
>>> even though I've set cpu.conf to read:
>>>
>>> BIND_DN         = dc=nfg,dc=nl
>>> BIND_PASS       = xxxxxxx
>>> USER_BASE       = ou=People,dc=nfg,dc=nl
>>> GROUP_BASE      = ou=Groups,dc=nfg,dc=nl
>>> USER_OBJECT_CLASS       = posixAccount,shadowAccount,top
>>> GROUP_OBJECT_CLASS      = posixGroup,top
>>> USER_FILTER     = (objectClass=posixAccount)
>>> GROUP_FILTER    = (objectClass=posixGroup)
>>> CN_STRING       = cn
>>>
>>> Running
>>>
>>> ldapsearch -D dc=nfg,dc=nl -x -w xxxxxxx -b ou=People,dc=nfg,dc=nl 
>>> '(objectClass=posixAccount)'
>>>
>>> works just fine though.
>>>
>>> So why doesn't cpu sent the correct basedn ?
>>>
>>>
>>>
>>
>>
>
>