Unable to create DN

[Mark J. Pearrow]

Hi all,

I'm running LAM 2.3.0, installed from the source package, on a Debian  
Etch Xen virtual host. The ldap server is on a different host than the  
web server that runs LAM.

I can see my users and can even edit their attributes just fine, but  
if I attempt to add a new user, I get the following error in the web  
interface:

Warning: ldap_add() [function.ldap-add]: Add: Internal (implementation  
specific) error in /var/www/mindhive/lam/lib/modules.inc on line 1673
   ERROR
Was unable to create DN:  
uid=scopic,ou=People,dc=mindhive-1,dc=mit,dc=edu.

Internal (implementation specific) error


With slapd.conf logging set to 256, here is what I see correlated to  
this add-attempt:

Jul 23 14:20:44 mindhive-1 slapd[17497]: conn=2 fd=13 ACCEPT from  
IP=18.93.4.243:52013 (IP=18.93.4.248:636)
Jul 23 14:20:44 mindhive-1 slapd[17497]: conn=2 fd=13 TLS established  
tls_ssf=128 ssf=128
Jul 23 14:20:44 mindhive-1 slapd[17497]: conn=2 op=0 STARTTLS
Jul 23 14:20:44 mindhive-1 slapd[17497]: conn=2 op=0 RESULT oid= err=1  
text=TLS already started
Jul 23 14:20:44 mindhive-1 slapd[17497]: conn=2 op=1 UNBIND
Jul 23 14:20:44 mindhive-1 slapd[17497]: conn=2 fd=13 closed
Jul 23 14:20:44 mindhive-1 slapd[17497]: conn=3 fd=13 ACCEPT from  
IP=18.93.4.243:52014 (IP=18.93.4.248:636)
Jul 23 14:20:44 mindhive-1 slapd[17497]: conn=3 fd=13 TLS established  
tls_ssf=128 ssf=128
Jul 23 14:20:44 mindhive-1 slapd[17497]: conn=3 op=0 BIND  
dn="cn=admin,dc=mindhive-1,dc=mit,dc=edu" method=128
Jul 23 14:20:44 mindhive-1 slapd[17497]: conn=3 op=0 BIND  
dn="cn=admin,dc=mindhive-1,dc=mit,dc=edu" mech=SIMPLE ssf=0
Jul 23 14:20:44 mindhive-1 slapd[17497]: conn=3 op=0 RESULT tag=97  
err=0 text=
Jul 23 14:20:44 mindhive-1 slapd[17497]: conn=3 op=1 ADD  
dn="uid=scopic,ou=People,dc=mindhive-1,dc=mit,dc=edu"
Jul 23 14:20:44 mindhive-1 slapd[17497]: bdb_db_cache:  
db_open(objectClass) failed: Permission denied (13)
Jul 23 14:20:44 mindhive-1 slapd[17497]: bdb_index_read: Could not  
open DB objectClass

At first blush, I'd assume that the issue is the Permission Denied  
error, but why can I modify existing records - just not create new ones?

mjp

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Lam-public mailing list
Lam-public@...
https://lists.sourceforge.net/lists/listinfo/lam-public

[Roland Gruber (LAM)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Mark,

Mark J. Pearrow schrieb:
> Warning: ldap_add() [function.ldap-add]: Add: Internal (implementation  
> specific) error in /var/www/mindhive/lam/lib/modules.inc on line 1673
>    ERROR
> Was unable to create DN:  
> uid=scopic,ou=People,dc=mindhive-1,dc=mit,dc=edu.

this looks like a problem of your LDAP server. Maybe it cannot write the
index files. This would explain why you can modify existing accounts.

Take a look at /var/lib/ldap if the rights are correctly set.


- --

Best regards

Roland Gruber


LDAP Account Manager
http://lam.sourceforge.net

Want more? Get LDAP Account Manager Pro!
http://lam.sourceforge.net/lamPro/index.htm
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkiHYB8ACgkQq/ywNCsrGZ5lJwCfQnCOt9Aep6NY8ZIX8YoDk1sE
VzIAn17XGCZJCJc2J+caWOUGY+vxO+Cv
=8iC8
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Lam-public mailing list
Lam-public@...
https://lists.sourceforge.net/lists/listinfo/lam-public

[Mark J. Pearrow]

>>

Hi Roland, all,

Exactly right; my indexes were broken and I needed to re-index. (which  
of course I then did stupidly as root, and then had to fix the  
permissions again)

Thanks much for your help!

mjp




>
> this looks like a problem of your LDAP server. Maybe it cannot write  
> the
> index files. This would explain why you can modify existing accounts.
>
> Take a look at /var/lib/ldap if the rights are correctly set.
>
>

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Lam-public mailing list
Lam-public@...
https://lists.sourceforge.net/lists/listinfo/lam-public