[Pkg-openldap-devel] Bug#759362: Bug#759362: slapd: Missing objectClass olcSyncProvConfig in cn=schema.ldif

[Ruud Baart]

I assume that I was wrong. According to your explanation I made the 
mistake by copying the configuration from other LDAP servers and editing 
files. If it is correct that it is an internal schema that comes 
available with the appropriate ldapadd, I probably worked in a wrong manner:

    (1) I  copied the complete slap.d directory from a other server with
    the same LDAP
    (2) I edited cn=module{0}.ldif, added the line olcModuleLoad:
    {1}syncprov (and others)
    (3) restarted slapd

Then I wanted to configure syncprov with Softerra LDAP administrator. 
There I could not found the objectClass olcSyncProvConfig. After some 
googling I found it in the URL I mentioned. I replaced cn=schema.ldif 
and after that I was able to configure syncprov with Softerra LDAP 
administrator. This way of working is fast but probably not allowed.

So I can't give an example because I immediately made adjustments to the 
freshly installed slapd package.

Ryan Tandy schreef op 26-8-2014 21:01:
> Control: tags -1 + moreinfo unreproducible
>
> Hi Ruud,
>
> On Tue, Aug 26, 2014 at 11:01 AM, Ruud Baart <r.j.baart at prompt.nl> wrote:
>> While configuring the syncprov overlay I discovered the the objectClass olcSyncProvConfig was missing.
> Can you please provide an example of a configuration that reproduces
> this? Starting from a newly-installed slapd, the following LDIF:
>
> dn: cn=module{0},cn=config
> changetype: modify
> add: olcModuleLoad
> olcModuleLoad: syncprov
>
> dn: olcOverlay=syncprov,olcDatabase={1}hdb,cn=config
> changetype: add
> objectClass: olcSyncProvConfig
> olcSpNoPresent: TRUE
> olcSpReloadHint: TRUE
>
> works correctly for me. The olcSyncProvConfig object class and its
> attributes appear in the schema as soon as the module is loaded.
>
>> This objectclass should be available in /etc/ldap/slapd.d/cn=config/cn=schema.ldif. The solution was quite simple: replace cn=schema.ldif with the information that can be found here: http://www.zytrax.com/books/ldap/ape/cn=schema.txt.
> Thanks for the suggestion, but this is the wrong solution. For one
> thing the files under /etc/ldap/slapd.d are private data of slapd and
> should never be modified by hand; and for another thing
> olcSyncProvConfig is internal schema that should be supplied by slapd
> itself, not by the user.
>
> thanks,
> Ryan

-- 

Met vriendelijke groeten/Regards,
Tiswe/R.J. Baart Automatisering B.V.

Ruud Baart

Tel: +31 6 51318104

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-openldap-devel/attachments/20140826/826a8c08/attachment.html>