[Pkg-openldap-devel] Bug#462667: slapd: Upgrade fails as LDIF backup has incorrect names

[Jamie Thompson]

Package: slapd
Version: 2.4.7-3
Severity: important

I upgraded slapd today from slapd-2.3.38-1 to slapd-2.3.38-1+lenny1, but the process failed
with the same issue as bug #462304, as well as being unable to restore the database backup:


Setting up slapd (2.4.7-3) ...
  Backing up /etc/ldap/slapd.conf in /var/backups/slapd-2.3.38-1+lenny1... done.
  Upgrading BDB 'checkpoint' options... .
  Moving old database directories to /var/backups:
  - directory dc=.... done.
  Loading from /var/backups/slapd-2.3.38-1+lenny1:
  - directory dc=.... failed.

Loading the database from the LDIF dump failed with the following
error while running slapadd:
    slapadd: line 1: database (dc=.) not configured to hold "dc=jamie-thompson,dc=co,dc=uk"
    slapadd: line 1: database (dc=.) not configured to hold "dc=jamie-thompson,dc=co,dc=uk"
dpkg: error processing slapd (--configure):
 subprocess post-installation script returned error exit status 1
Errors were encountered while processing:
 slapd
E: Sub-process /usr/bin/dpkg returned an error code (1)


I looked at the backup LDIF, and as the error says, the backup contains two
entries at the top of the file with the incorrect names
"dn: dc=jamie-thompson,dc=co,dc=uk" and "dn: cn=admin,dc=jamie-thompson,dc=co,dc=uk"

I used to use the above base without the "."  before I altered my configuration a
year or two ago to support ldapdns usage. I have my old settings in my slapd.conf
file for reference, abet commented out. Perhaps a rexgx of some sort pulled out the
wrong settings, as these are above the current ones in my config file.

I'm guessing the old entries still exist in my database which is why they were backed
up successfully? I don't know, but I thought I shoudl make someone aware that the
upgrade process is not as robust as it may seem.

Thank goodness the backups are made though (and not overwritten on subsquent attempts),
as I was able to use these to get my system running again, eventually (losing ldap knocked
out my pam and nss use of it). So thanks for doing that bit well!

- Jamie


-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (900, 'testing'), (600, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.22-3-686 (SMP w/1 CPU core)
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash

Versions of packages slapd depends on:
ii  adduser                  3.105           add and remove users and groups
ii  coreutils                5.97-5.3        The GNU core utilities
ii  debconf [debconf-2.0]    1.5.18          Debian configuration management sy
ii  libc6                    2.7-6           GNU C Library: Shared libraries
ii  libdb4.2                 4.2.52+dfsg-4   Berkeley v4.2 Database Libraries [
ii  libgnutls13              2.0.4-1         the GNU TLS library - runtime libr
ii  libiodbc2                3.52.6-1        iODBC Driver Manager
ii  libldap-2.4-2            2.4.7-3         OpenLDAP libraries
ii  libltdl3                 1.5.24-2        A system independent dlopen wrappe
ii  libperl5.8               5.8.8-12        Shared Perl library
ii  libsasl2-2               2.1.22.dfsg1-16 Cyrus SASL - authentication abstra
ii  libslp1                  1.2.1-7.1       OpenSLP libraries
ii  libwrap0                 7.6.dbs-14      Wietse Venema's TCP wrappers libra
ii  perl [libmime-base64-per 5.8.8-12        Larry Wall's Practical Extraction 
ii  psmisc                   22.6-1          Utilities that use the proc filesy

Versions of packages slapd recommends:
ii  libsasl2-modules         2.1.22.dfsg1-16 Cyrus SASL - pluggable authenticat

-- debconf information:
* slapd/password2: (password omitted)
  slapd/internal/adminpw: (password omitted)
* slapd/password1: (password omitted)
  slapd/fix_directory: true
  shared/organization: jamie-thompson.co.uk
  slapd/upgrade_slapcat_failure:
  slapd/backend: BDB
  slapd/allow_ldap_v2: false
  slapd/no_configuration: false
  slapd/move_old_database: true
  slapd/suffix_change: false
  slapd/slave_databases_require_updateref:
  slapd/dump_database_destdir: /var/backups/slapd-VERSION
  slapd/autoconf_modules: true
  slapd/domain: jamie-thompson.co.uk
  slapd/password_mismatch:
  slapd/invalid_config: true
  slapd/slurpd_obsolete:
  slapd/upgrade_slapadd_failure:
  slapd/dump_database: when needed
  slapd/migrate_ldbm_to_bdb: false
  slapd/purge_database: false