GNU bug report logs - #36581
Installing 389-ds-base doesn't appear to result in a working LDAP server

Previous Next

To reply to this bug, email your comments to 36581 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: "Brant Gardner" <brantcgardner <at> brantware.com>
To: bug-guix <at> gnu.org
Subject: Installing 389-ds-base doesn't appear to result in a working LDAP server
Date: Wed, 10 Jul 2019 13:02:18 -0500

[Message part 1 (text/plain, inline)]

I used the quickstart documentation for all my testing, located here: https://directory.fedoraproject.org/docs/389ds/howto/quickstart.html

Initially I ran into trouble because the 'dirsrv' user and group are apparently expected to already exist, so I added this to my config.scm and ran guix system reconfigure:

 (groups (cons*
 ;; To support 389-ds-base 
 (user-group (name "dirsrv"))
 %base-groups))

 (users (cons*
 ...snip...
 ;; To support 389-ds-base 
 (user-account
 (name "dirsrv")
 (comment "LDAP Server User")
 (group "users")
 (supplementary-groups '("netdev" "dirsrv"))
 (home-directory "/home/dirsrv"))
 %base-user-accounts))

After this, I generated a template config file with:

# dscreate create-template > gardner.inf

Then I read through the resulting template file and modified only these values:
- password
- server FQDN
- instance name (gardner)
- selinux (False)
- suffix (dc=gardner,dc=local)

Finally I tried to create the new instance with:

# dscreate from-file /root/gardner.inf

This said "Starting installation...", then paused for about 60 seconds and then said:

Error: Failed to start DS, removing incomplete installation...
Error:

Note that even though it claims to, it did not actually remove the incomplete installation, as trying the same command again results in:

Starting installation...
Error: Another instance named 'gardner' may already exist

Checking the logs, I found only this line in /var/log/debug that seems related:

Jul 10 12:49:09 localhost ns-slapd: looking for plugins in '/usr/lib/x86_64-linux-gnu', failed to open directory, error: No such file or directory

Thanks for any suggestions,

--
Brant Gardner

[Message part 2 (text/html, inline)]

Message #8 received at 36581 <at> debbugs.gnu.org (full text, mbox):

From: Ricardo Wurmus <rekado <at> elephly.net>
To: Brant Gardner <brantcgardner <at> brantware.com>
Cc: 36581 <at> debbugs.gnu.org
Subject: Re: bug#36581: Installing 389-ds-base doesn't appear to result in a
 working LDAP server
Date: Thu, 11 Jul 2019 11:06:37 +0200

Hi Brant,

that’s right.  Installing just 389-ds-base isn’t going to be enough and
the scripts it comes with are less than helpful.

In the Guix System overarching configuration (involving configuration
files, creation of groups and user accounts, starting of daemons, etc)
is done via system services.

I was just about to recommend a certain service … but then realized that
I never actually finished it and the (gnu services ldap) module is only
provided by a file in my personal copy of the Guix repository!

I’ll make finishing this a priority once I’m back from vacation this
weekend.

--
Ricardo

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.