On Wed, Jul 11, 2007 at 06:56:15PM +1000, Trent W. Buck wrote: > Note: I've never used LDAP before, this may be a non-bug.
> Following http://wiki.debian.org/OpenLDAPSetup, I tried the following > command (with slapd stopped): > $ sudo slapindex > WARNING! > Runnig as root! > There's a fair chance slapd will fail to start. > Check file permissions! > slapd runs as the user openldap, so naturally I tried > $ sudo -u openldap slapindex > could not open config file "/etc/ldap/slapd.conf": Permission denied (13) > slapindex: bad configuration file! > I check the config file: > $ ls -l /etc/ldap/slapd.conf > -rw------- 1 root root 4366 2007-07-11 18:37 /etc/ldap/slapd.conf > In #ldap on irc.freenode.net, _ranger_ told me that this file should > be > -rw-r----- 1 root openldap 4366 2007-07-11 18:37 /etc/ldap/slapd.conf > This wouldn't be a problem if slapd ran as root, but apparently it > runs as the user openldap by default. Right, this is a bug; openldap needs to take care that the slapd.conf file is created with permissions that allow reading by the openldap user. -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. [EMAIL PROTECTED] http://www.debian.org/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]