Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Slapd fails to start with new build image #42

Closed
paulkitt opened this issue Sep 1, 2022 · 4 comments
Closed

Slapd fails to start with new build image #42

paulkitt opened this issue Sep 1, 2022 · 4 comments

Comments

@paulkitt
Copy link

paulkitt commented Sep 1, 2022

We build the actual state of the repo planing to make some small changes in the user/group structure.
When starting the image with no modifications slapd fails:

openldap             | 6310a7c3 @(#) $OpenLDAP: slapd  (May 14 2022 18:35:44) $
openldap             |  Debian OpenLDAP Maintainers <pkg-openldap-devel@lists.alioth.debian.org>
openldap             | 6310a7c4 hdb_db_open: database "dc=planetexpress,dc=com": database already in use.
openldap             | 6310a7c4 backend_startup_one (type=hdb, suffix="dc=planetexpress,dc=com"): bi_db_open failed! (-1)
openldap             | 6310a7c4 slapd stopped.
@paulkitt paulkitt changed the title Fails to start with new build image Slapd fails to start with new build image Sep 1, 2022
@paulkitt
Copy link
Author

paulkitt commented Sep 1, 2022

Anybody manages to work with the current master? The project is great and it would be awesome to find a way to work with it.

@rroemhild
Copy link
Owner

This seems to be a problem with a previous error from ldapmodify while configure TLS:

Configure TLS...
+ ldapmodify -Y EXTERNAL -H ldapi:/// -f /opt/openldap/bootstrap/config/tls.ldif -Q
modifying entry "cn=config"
ldap_modify: Other (e.g., implementation specific) error (80)

The script exit early an does not shutdown the slapd process.

@jskacel
Copy link

jskacel commented Oct 26, 2022

Looks like the issue is because of missing /etc/ldap/ssl/fullchain.crt

@jskacel
Copy link

jskacel commented Oct 26, 2022

So.. if you remove these lines https://github.com/rroemhild/docker-test-openldap/blob/master/rootfs/opt/openldap/bootstrap/config/tls.ldif#L3-L5 and rebuild the image, it will start to work

Or you need to provide your certificates (with CA) and mount it to /etc/ldap/ssl

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants