[Pkg-openldap-devel] Bug#416272: Bug#416272: slapd -distributional script not working

[Russ Allbery]

retitle 416272 slapd: error "main: TLS init def ctx failed: -1" on start
tags 416272 -unreproducible
thanks

Mgr Peter Tuharsky <tuharsky at misbb.sk> writes:

> Hi,

> I tested the script again with NO success.
> slapd version: 2.3.30-2

> I set the ownership of /var/lib/ldap files to openldap.openldap, start 
> (as root) using
> cd /etc/init.d
> ./slapd start

> however the distributional script just displays error and dosen't start 
> the slapd at all:

> Starting OpenLDAP: slapd - failed.
> The operation failed but no output was produced. For hints on what went
> wrong please refer to the system's logfiles (e.g. /var/log/syslog) or
> try running the daemon in Debug mode like via "slapd -d 16383" (warning:
> this will create copious output).

Sounds like the init script is working just fine; your server either has a
configuration problem or something else is preventing TLS initialization
from succeeding.

Try following the advice in the message printed by the init script and see
if it explains what's wrong with your TLS configuration.

Also, if you're using nss-ldap on the same system, make sure that you list
files *before* ldap in your nsswitch.conf and make sure that the user the
OpenLDAP server is running as is defined in the local passwd file, and
you're not getting the user via LDAP.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>