OpenLDAP with LDAPS and N-Way Multi-master replicationOpenLDAP with ldaps support on Debian LennySecure ldap...
aging parents with no investments
Landlord wants to switch my lease to a "Land contract" to "get back at the city"
Where to refill my bottle in India?
Extreme, but not acceptable situation and I can't start the work tomorrow morning
How to deal with fear of taking dependencies
Prime joint compound before latex paint?
Why do we use polarized capacitors?
If a centaur druid Wild Shapes into a Giant Elk, do their Charge features stack?
Can I legally use front facing blue light in the UK?
What does "enim et" mean?
How to create a consistent feel for character names in a fantasy setting?
Is Social Media Science Fiction?
Manga about a female worker who got dragged into another world together with this high school girl and she was just told she's not needed anymore
Is domain driven design an anti-SQL pattern?
When blogging recipes, how can I support both readers who want the narrative/journey and ones who want the printer-friendly recipe?
What does 'script /dev/null' do?
Why is my log file so massive? 22gb. I am running log backups
Doomsday-clock for my fantasy planet
How did the USSR manage to innovate in an environment characterized by government censorship and high bureaucracy?
Is every set a filtered colimit of finite sets?
Is ipsum/ipsa/ipse a third person pronoun, or can it serve other functions?
What is the command to reset a PC without deleting any files
Unbreakable Formation vs. Cry of the Carnarium
extract characters between two commas?
OpenLDAP with LDAPS and N-Way Multi-master replication
OpenLDAP with ldaps support on Debian LennySecure ldap problemSecuring userPassword access with OpenLDAP in RHELslapd 2.4.23 hangs on ldaps connectionsConfiguring openldap multimaster replication using cn=configopenLDAPServer: ldapsearch, ldapadd error in ubuntu 12.04LDAP Client Search with SSL - CentOS7OpenLDAP configure LDAPS, restart failsCannot run SAMBA (DC) and OpenLDAP, (The port is being used)(SOLVED) Enable SSL/LDAPS in openLDAP 2.4 on Ubuntu 16.04.5 LTS - ldap_result: Can't contact LDAP server (-1)
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}
We have the following setup:
- Two OpenLDAP servers - openldap1, openldap2
- They are to be set up as N-Way multi-master
- Certificates are all set up correctly with alternate names etc and trust each other
I want slapd to bind to all interfaces on the server, so was hoping to run the service as
/usr/sbin/slapd -u ldap -h ldaps://
However, this gives
5cabf191 <<< dnNormalize: <cn=subschema>
5cabf191 read_config: no serverID / URL match found. Check slapd -h arguments.
5cabf191 slapd destroy: freeing system resources.
5cabf191 syncinfo_free: rid=002
5cabf191 syncinfo_free: rid=002
5cabf191 slapd stopped.
5cabf191 connections_destroy: nothing to destroy.
I think i understand this to be because of our replication setup which looks like the following ServerIDs:
dn: cn=config
objectClass: olcGlobal
cn: config
..snipped..
olcTLSCertificateKeyFile: /etc/openldap/certs/keys/ldapskey.pem
olcTLSCertificateFile: /etc/openldap/certs/ldapscert.pem
olcTLSCACertificateFile: /etc/openldap/certs/cacert.pem
olcServerID: 1 ldaps://openldap1
olcServerID: 2 ldaps://openldap2
entryCSN: 20190409004218.061111Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20190409004218Z
contextCSN: 20190409004339.981340Z#000000#000#000000
I think my error is because slapd -h argument cannot match to a serverID in the list?
If this is the case, how do I work around it?
If i manually run the following it, works, but this doesn't help me bind to all interfaces.
/usr/sbin/slapd -u ldap -h ldaps://openldap1
I have an IP that floats between both servers to give high availability if one were to go down, so need slapd to listen on all interfaces.
openldap slapd
asked 3 mins ago
marcmarc
1
New contributor
marc is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
We have the following setup:
- Two OpenLDAP servers - openldap1, openldap2
- They are to be set up as N-Way multi-master
- Certificates are all set up correctly with alternate names etc and trust each other
I want slapd to bind to all interfaces on the server, so was hoping to run the service as
/usr/sbin/slapd -u ldap -h ldaps://
However, this gives
5cabf191 <<< dnNormalize: <cn=subschema>
5cabf191 read_config: no serverID / URL match found. Check slapd -h arguments.
5cabf191 slapd destroy: freeing system resources.
5cabf191 syncinfo_free: rid=002
5cabf191 syncinfo_free: rid=002
5cabf191 slapd stopped.
5cabf191 connections_destroy: nothing to destroy.
I think i understand this to be because of our replication setup which looks like the following ServerIDs:
dn: cn=config
objectClass: olcGlobal
cn: config
..snipped..
olcTLSCertificateKeyFile: /etc/openldap/certs/keys/ldapskey.pem
olcTLSCertificateFile: /etc/openldap/certs/ldapscert.pem
olcTLSCACertificateFile: /etc/openldap/certs/cacert.pem
olcServerID: 1 ldaps://openldap1
olcServerID: 2 ldaps://openldap2
entryCSN: 20190409004218.061111Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20190409004218Z
contextCSN: 20190409004339.981340Z#000000#000#000000
I think my error is because slapd -h argument cannot match to a serverID in the list?
If this is the case, how do I work around it?
If i manually run the following it, works, but this doesn't help me bind to all interfaces.
/usr/sbin/slapd -u ldap -h ldaps://openldap1
I have an IP that floats between both servers to give high availability if one were to go down, so need slapd to listen on all interfaces.
openldap slapd
asked 3 mins ago
marcmarc
1
New contributor
marc is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
We have the following setup:
- Two OpenLDAP servers - openldap1, openldap2
- They are to be set up as N-Way multi-master
- Certificates are all set up correctly with alternate names etc and trust each other
I want slapd to bind to all interfaces on the server, so was hoping to run the service as
/usr/sbin/slapd -u ldap -h ldaps://
However, this gives
5cabf191 <<< dnNormalize: <cn=subschema>
5cabf191 read_config: no serverID / URL match found. Check slapd -h arguments.
5cabf191 slapd destroy: freeing system resources.
5cabf191 syncinfo_free: rid=002
5cabf191 syncinfo_free: rid=002
5cabf191 slapd stopped.
5cabf191 connections_destroy: nothing to destroy.
I think i understand this to be because of our replication setup which looks like the following ServerIDs:
dn: cn=config
objectClass: olcGlobal
cn: config
..snipped..
olcTLSCertificateKeyFile: /etc/openldap/certs/keys/ldapskey.pem
olcTLSCertificateFile: /etc/openldap/certs/ldapscert.pem
olcTLSCACertificateFile: /etc/openldap/certs/cacert.pem
olcServerID: 1 ldaps://openldap1
olcServerID: 2 ldaps://openldap2
entryCSN: 20190409004218.061111Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20190409004218Z
contextCSN: 20190409004339.981340Z#000000#000#000000
I think my error is because slapd -h argument cannot match to a serverID in the list?
If this is the case, how do I work around it?
If i manually run the following it, works, but this doesn't help me bind to all interfaces.
/usr/sbin/slapd -u ldap -h ldaps://openldap1
I have an IP that floats between both servers to give high availability if one were to go down, so need slapd to listen on all interfaces.
openldap slapd
asked 3 mins ago
marcmarc
1
New contributor
marc is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
We have the following setup:
- Two OpenLDAP servers - openldap1, openldap2
- They are to be set up as N-Way multi-master
- Certificates are all set up correctly with alternate names etc and trust each other
I want slapd to bind to all interfaces on the server, so was hoping to run the service as
/usr/sbin/slapd -u ldap -h ldaps://
However, this gives
5cabf191 <<< dnNormalize: <cn=subschema>
5cabf191 read_config: no serverID / URL match found. Check slapd -h arguments.
5cabf191 slapd destroy: freeing system resources.
5cabf191 syncinfo_free: rid=002
5cabf191 syncinfo_free: rid=002
5cabf191 slapd stopped.
5cabf191 connections_destroy: nothing to destroy.
I think i understand this to be because of our replication setup which looks like the following ServerIDs:
dn: cn=config
objectClass: olcGlobal
cn: config
..snipped..
olcTLSCertificateKeyFile: /etc/openldap/certs/keys/ldapskey.pem
olcTLSCertificateFile: /etc/openldap/certs/ldapscert.pem
olcTLSCACertificateFile: /etc/openldap/certs/cacert.pem
olcServerID: 1 ldaps://openldap1
olcServerID: 2 ldaps://openldap2
entryCSN: 20190409004218.061111Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20190409004218Z
contextCSN: 20190409004339.981340Z#000000#000#000000
I think my error is because slapd -h argument cannot match to a serverID in the list?
If this is the case, how do I work around it?
If i manually run the following it, works, but this doesn't help me bind to all interfaces.
/usr/sbin/slapd -u ldap -h ldaps://openldap1
I have an IP that floats between both servers to give high availability if one were to go down, so need slapd to listen on all interfaces.
openldap slapd
openldap slapd
asked 3 mins ago
marcmarc
1
New contributor
marc is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 3 mins ago
marcmarc
1
New contributor
marc is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 3 mins ago
marcmarc
1
New contributor
marc is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked 3 mins ago
marcmarc
1
asked 3 mins ago
marcmarc
1
1
New contributor
marc is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
marc is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
marc is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
marc is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f962119%2fopenldap-with-ldaps-and-n-way-multi-master-replication%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
marc is a new contributor. Be nice, and check out our Code of Conduct.
marc is a new contributor. Be nice, and check out our Code of Conduct.
marc is a new contributor. Be nice, and check out our Code of Conduct.
marc is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f962119%2fopenldap-with-ldaps-and-n-way-multi-master-replication%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
