[Pkg-openldap-devel] Bug#628825: slapd: Failure to continue with authentication as configured.

Steve Langasek vorlon at debian.org
Wed Jun 1 17:46:35 UTC 2011


tags 628825 moreinfo
thanks

On Wed, Jun 01, 2011 at 09:09:00AM -0700, Ray Klassen wrote:
> Package: slapd
> Version: 2.4.23-7
> Severity: important

> Firewalled system depending on anonymous bind to a local replicated copy
> of the ldap database.  After update to squeeze that functionality is
> removed.  No warning given, and no documentation on a simple way to
> restore it.

I'm afraid this description is far too vague to let us fix this issue for
you.  What, *exactly*, was the configuration you had in place in slapd.conf
that was silently dropped instead of being migrated?

> Don't want to have passwords littered through configuration files.  If
> you're going to enforce a funky new configuration mechanism.  (cn=config)
> you can at least replicate the actual configuration.

I realize you're frustrated at running into this problem, but this
disparaging attitude doesn't help anyone fix your bug.  The "funky" new
configuration mechanism is required in order to address a number of
longstanding bugs and issues with openldap, and it is the only configuration
mechanism that will be supported upstream in the future.  It is also, until
now, not reported to have any other problems automatically migrating
configuration from an existing slapd.conf, so we'll need some more details
to be able to isolate the bug you're describing.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 828 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-openldap-devel/attachments/20110601/508988b7/attachment.pgp>


More information about the Pkg-openldap-devel mailing list