Re: Changes

Andreas John wrote:
> Hi Joerg,
> 
> 1.) You changed:
> # grep -ril ldapInstallPath /usr/src/ispman/*
> /usr/src/ispman/install-data/examples/openldap/slapd.ldapv3.conf.tmpl
> 
> but %ldapInstallPath% does not appear in the conf yet.

That hasn't changed, but is a leftover from the old Makefile, where this 
was used to automatically generate the LDAP configs.
As this was quite dangerous and often interfered with pre-configured 
package installations, I removed those targets.

Those files should rather serve as examples to complete your existing 
configuration.
Besides that, this forces users to switch on their brains and get a 
understanding of LDAP configuration ;)

> 2.) Please note im the docs:
> 
> /usr/src/ispman/install-data/examples/openldap/slapd.ldapv3.conf.tmpl |
> ./bin/ispman.substConf > /etc/ldap/slapd.conf

Well, that's a bit tricky, because it requires both the source and 
install ispman dirs.
This won't be the case for any packaged installs.
But I'll add it as a hint.

> 3.) I propose several changes to slapd.ldapv3.conf.tmpl.
> 
>  a) change:
>  database        ldbm
>  -> database        bdb

already changed

>  (ldbm will vanish with Openldap 2.4 at all !!)
> 
>  b) change:
>  # modulepath    /usr/local/libexec/openldap
>  -> modulepath      /usr/lib/ldap/
> 
>  c) add:
>  moduleload      back_bdb.so

The extention isn't necessary

> 4.) Here it may get difficult:
> 
> suffix "o=ispman,dc=example,dc=com"
> rootdn "cn=admin,dc=example,dc=com"
> 
> This wont work. Why?
> 
> from /var/log/syslog:
>  /etc/ldap/slapd.conf: line 67: rootpw can only be set when rootdn is
> under suffix

that should be fine as it is

Joerg