[pkg-kolab] Bug#595539: Bug#595539: kolabd: kolab_bootstrap no longer works with slapd (version 2.4.23)

[Soren Stoutner]

Mathieu,

Thanks for all your work on this.

On Thursday, September 09, 2010 03:06:55 pm Mathieu Parent wrote:
> I have commited a change in SVN
> (http://svn.debian.org/wsvn/pkg-kolab/?op=comp&compare[]=%2F@1510&compare[]
> =%2F at 1511), will upload to unstable and ask for a freeze exception.
> 
> I have tested different scenarios with the patch. Can you test yourself?

I have tested kolabd 2.2.4-20100624-2 in unstable and have not been successful 
at setting up a new Kolab server.  I am using slapd 2.4.23-5 which is also in 
unstable.

After installing kolabd, slapd, kolab-webadmin, and postfix from unstable on 
an otherwise fully updated testing box that doesn't have a current kolab 
installation, I followed the Debian installation instructions on the kolab.org 
wiki [1].

The "testsaslauthd -u manager -p PASSWORD" command fails when replaced with 
the actual password with the error:

0: NO "authentication failed"

Accessing the Kolab Webadmin site displays the text "Errors: Could not bind to 
LDAP server: Invalid credentials" above the login boxes.

I don't know a lot about ldap configuration, but I'm wondering if the problem 
is in /etc/ldap/slapd.d/cn=config/olcDatabase\=\{1\}hdb.ldif.

The output of this file is below.  It seems odd to me that it wants to connect 
as cn=admin when everything I have seen in Kolab usually uses 
cn=manager,cn=internal.

dn: olcDatabase={1}hdb
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {1}hdb
olcDbDirectory: /var/lib/ldap
olcSuffix: dc=stoutner,dc=net
olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by anonymou
 s auth by dn="cn=admin,dc=stoutner,dc=net" write by * none
olcAccess: {1}to dn.base="" by * read
olcAccess: {2}to * by self write by dn="cn=admin,dc=stoutner,dc=net" write by
 * read
olcLastMod: TRUE
olcRootDN: cn=admin,dc=stoutner,dc=net
olcRootPW:: <ENCRYPTED PASSWORD>
olcDbCheckpoint: 512 30
olcDbConfig: {0}set_cachesize 0 2097152 0
olcDbConfig: {1}set_lk_max_objects 1500
olcDbConfig: {2}set_lk_max_locks 1500
olcDbConfig: {3}set_lk_max_lockers 1500
olcDbIndex: objectClass eq
structuralObjectClass: olcHdbConfig
entryUUID: 9ef6e3e0-53a0-102f-8cd4-cd9ffdc7dbe7
creatorsName: cn=admin,cn=config
createTimestamp: 20100913163510Z
entryCSN: 20100913163510.725383Z#000000#000#000000
modifiersName: cn=admin,cn=config
modifyTimestamp: 20100913163510Z


[1] http://wiki.kolab.org/index.php/Debian_-_Administrators_-
_Kolab_Installation

-- 
Soren Stoutner
Small Business Tech Solutions
623-262-6169
soren at sbtechsolutions.biz
www.sbtechsolutions.biz
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-kolab-devel/attachments/20100913/60dd7654/attachment.pgp>