[mledford]

I have also attempted to update the rootdn and rootpw that sits in slapd_macosxserver.conf in hopes that it would connect using the values I placed in there of course killing the existing slapd to have it start a new server process… did not work. Then again, I couldn’t get in via Workgroup Manager using the rootdn user either. In any case it almost appears that slapdconfig is not connecting properly to perform the authentication.

I also search the darwin repository hoping that slapdconfig would be there so I could examine the code… but I have not found it. Unfortunately this appears to be one of those Apple specific tools that they keep hidden from the open source community which could really use being open sourced.

Michael

[mledford]

After taking a day to cool off and step back from the problem I seemed to have found the bug and a solution to the problem. Thanks to MacTroll, while you didn’t answer correctly you gave me inpiration on something to try.

It seems to be that even if the SSL certificate doesn’t have an passphrase associated with it that slapconfig (the tool used to configure slapd) will place a TLSCertificatePassphraseTool line into /etc/openldap/slapd_macosxserver.conf. Somehow either not having a passphrase or the whole thing not working causes sldapd to crash in a blaze of glory. What I have done is commented out the line and everything is working great now!

Thanks,
Michael

[mledford]

The SSL cert I am using doesn’t have a passphrase.

Michael

[Author]

Posts