Package: slapd
Version: 2.4.7-3
Severity: important
I upgraded slapd today from slapd-2.3.38-1 to slapd-2.3.38-1+lenny1, but the
process failed
with the same issue as bug #462304, as well as being unable to restore the
database backup:
Setting up slapd (2.4.7-3) ...
Backing up /etc/ldap/slapd.conf in /var/backups/slapd-2.3.38-1+lenny1... done.
Upgrading BDB 'checkpoint' options... .
Moving old database directories to /var/backups:
- directory dc=.... done.
Loading from /var/backups/slapd-2.3.38-1+lenny1:
- directory dc=.... failed.
Loading the database from the LDIF dump failed with the following
error while running slapadd:
slapadd: line 1: database (dc=.) not configured to hold
"dc=jamie-thompson,dc=co,dc=uk"
slapadd: line 1: database (dc=.) not configured to hold
"dc=jamie-thompson,dc=co,dc=uk"
dpkg: error processing slapd (--configure):
subprocess post-installation script returned error exit status 1
Errors were encountered while processing:
slapd
E: Sub-process /usr/bin/dpkg returned an error code (1)
I looked at the backup LDIF, and as the error says, the backup contains two
entries at the top of the file with the incorrect names
"dn: dc=jamie-thompson,dc=co,dc=uk" and "dn:
cn=admin,dc=jamie-thompson,dc=co,dc=uk"
I used to use the above base without the "." before I altered my configuration
a
year or two ago to support ldapdns usage. I have my old settings in my
slapd.conf
file for reference, abet commented out. Perhaps a rexgx of some sort pulled out
the
wrong settings, as these are above the current ones in my config file.
I'm guessing the old entries still exist in my database which is why they were
backed
up successfully? I don't know, but I thought I shoudl make someone aware that
the
upgrade process is not as robust as it may seem.
Thank goodness the backups are made though (and not overwritten on subsquent
attempts),
as I was able to use these to get my system running again, eventually (losing
ldap knocked
out my pam and nss use of it). So thanks for doing that bit well!
- Jamie
-- System Information:
Debian Release: lenny/sid
APT prefers testing
APT policy: (900, 'testing'), (600, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.22-3-686 (SMP w/1 CPU core)
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash
Versions of packages slapd depends on:
ii adduser 3.105 add and remove users and groups
ii coreutils 5.97-5.3 The GNU core utilities
ii debconf [debconf-2.0] 1.5.18 Debian configuration management sy
ii libc6 2.7-6 GNU C Library: Shared libraries
ii libdb4.2 4.2.52+dfsg-4 Berkeley v4.2 Database Libraries [
ii libgnutls13 2.0.4-1 the GNU TLS library - runtime libr
ii libiodbc2 3.52.6-1 iODBC Driver Manager
ii libldap-2.4-2 2.4.7-3 OpenLDAP libraries
ii libltdl3 1.5.24-2 A system independent dlopen wrappe
ii libperl5.8 5.8.8-12 Shared Perl library
ii libsasl2-2 2.1.22.dfsg1-16 Cyrus SASL - authentication abstra
ii libslp1 1.2.1-7.1 OpenSLP libraries
ii libwrap0 7.6.dbs-14 Wietse Venema's TCP wrappers libra
ii perl [libmime-base64-per 5.8.8-12 Larry Wall's Practical Extraction
ii psmisc 22.6-1 Utilities that use the proc filesy
Versions of packages slapd recommends:
ii libsasl2-modules 2.1.22.dfsg1-16 Cyrus SASL - pluggable authenticat
-- debconf information:
* slapd/password2: (password omitted)
slapd/internal/adminpw: (password omitted)
* slapd/password1: (password omitted)
slapd/fix_directory: true
shared/organization: jamie-thompson.co.uk
slapd/upgrade_slapcat_failure:
slapd/backend: BDB
slapd/allow_ldap_v2: false
slapd/no_configuration: false
slapd/move_old_database: true
slapd/suffix_change: false
slapd/slave_databases_require_updateref:
slapd/dump_database_destdir: /var/backups/slapd-VERSION
slapd/autoconf_modules: true
slapd/domain: jamie-thompson.co.uk
slapd/password_mismatch:
slapd/invalid_config: true
slapd/slurpd_obsolete:
slapd/upgrade_slapadd_failure:
slapd/dump_database: when needed
slapd/migrate_ldbm_to_bdb: false
slapd/purge_database: false
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
