[pkg-kolab] Problem kolab_bootstrap destroy ldap-db

[joerbram at hrz.fh-lausitz.de]

Hallo Maintainers!

Please check this memo.
respective summary/Fazit.

Which parts can do you and which parts must I too kolab send?

regards Joerg

---------------------------------------------------------------------------
070409.kolab_bootstrap_ldapdb

Problem:
- kolab_bootstrap destroy ldap-db
  - details s. slap_startup_failed

System:
- Debian testing (date: 070321)
- kolabd 1.9.4-20060707.dfsg-2
- kolab_bootstrap Version 0.93


workaround
- patch kolab_bootstrap (comment out: remove ldapdb)
  - details: s.u.

---------------------------------------------------------------------------
- kolab_bootstrap_out
-----------------------
v1:~# /usr/share/kolabd/kolab_bootstrap
...
Bootstrapping Kolab will overwrite old configuration

Continue [n] (y/n): y
Creating backup of old configuration (LDAP, kolab.conf and certificates
creating backup of LDAP repository
creating backup of CA data
Cleaning up LDAP
Please enter Hostname including Domain Name (e.g. thishost.domain.tld) [v1]:

...
CA and certificate creation complete.

You can install /etc/kolab/ca/cacert.pem on your clients to allow them
to verify the validity of your server certificates.

kolab is now ready to run!
please run '/etc/init.d/$DAEMONs start'
Use login=manager and passwd=meinpasswort when you log into
the webinterface https://kolab.launic.de/admin !


- slap_startup_failed
v1:~# slapcat
bdb_db_open: Warning - No DB_CONFIG file found in directory /var/lib/ldap:
(2)
Expect poor performance for suffix dc=launic,dc=de.
bdb_db_open: db_open(/var/lib/ldap/id2entry.bdb) failed: No such file or
directo
ry (2)
backend_startup_one: bi_db_open failed! (2)
slap_startup failed

-----------------------------------------------------------------------
- kolab_bootstrap_flowchart
 ...
 - backup ldapdb,ca etc. to /etc/kolab/backup$timestamp
 - remove ldapdb (2x)
 - if ($opt_b)
   - rewrite /etc/ldap/slapd.conf
   - temporarily starting slapd
 ...


-----------------------------------------------------------------------
- Fazit:

1. ldap-db  should be can running outside this host
   - extract config ldap-db  from bootstrap
2. bootstrap line 437
  - defined $ldap_uri, but not using
3. bootstrap init ldap-db only, if use opt "-b". Bad docu...
4. bootstrap line 438
  - starting slapd as root. should be "-u openldap -g openldap"
5. bootstrap line 217
  - backupdir should be never under /etc. better: /var/backup/kolab
6. bootstrap overwrite slapd.conf without make backup before.
7. bootstrap line 438
   - starting slapd: Could not start temporary slapd
   - s. core.schema_nsfod
     - bootstrap reads from 
/usr/share/doc/kolabd/templates/slapd.conf.template
       and write to /etc/ldap/slapd.conf without changed /etc/openldap to
/etc/l
dap
8. bootstrap without "-b" will destroy ldap-db (s. kolab_bootstrap_flowchart)


- core.schema_nsfod
# slapcat
could not stat config file "@l_prefix@/etc/openldap/schema/core.schema":
No such
 file or directory (2)
slapcat: bad configuration file!