Greetings 389 users,
I am a sysadmin that has never really used LDAP before. I have installed 389-ds and am a
little stuck as to how to start.
I am using Debian Buster...
389-ds:
Installed: 1.4.0.21-1
From the site:
https://www.port389.org/docs/389ds/howto/howto-install-389.html
I see it recommends setting a .dsrc file to ease usage as the root user:
For local instance administration (on the server), you want to use settings like:
# cat ~/.dsrc
[localhost]
# Note that '/' is replaced to '%%2f'.
uri = ldapi://%%2fvar%%2frun%%2fslapd-localhost.socket
basedn = dc=example,dc=com
binddn = cn=Directory Manager
I don't have the socket file in my installation. I don't see any sockets owned by
the directory service:
# systemctl status dirsrv(a)gopher.service
● dirsrv(a)gopher.service - 389 Directory Server gopher.
Loaded: loaded (/lib/systemd/system/dirsrv@.service; enabled; vendor preset: enabled)
Active: active (running) since Wed 2020-05-13 12:38:22 CDT; 2h 5min ago
Main PID: 12270 (ns-slapd)
Status: "slapd started: Ready to process requests"
Tasks: 25 (limit: 4722)
Memory: 19.2M
CGroup: /system.slice/system-dirsrv.slice/dirsrv(a)gopher.service
└─12270 /usr/sbin/ns-slapd -D /etc/dirsrv/slapd-gopher -i
/var/run/dirsrv/slapd-gopher.pid
# tree /var/run/dirsrv
/var/run/dirsrv
├── slapd-gopher.pid
└── slapd-gopher.stats
The Debian package states to initialize the server to run the command: /usr/sbin/setup-ds
I don't know if that is a distribution agnostic program or not. The command did prompt
me for a password - which I entered.
When I run a command like dsidm or ldapmodify, the command prompts me for a password. I
enter the one that was prompted for with setup-ds, but I get:
SASL/SCRAM-SHA-1 authentication started
Please enter your password:
ldap_sasl_interactive_bind_s: Invalid credentials (49)
I guess I have two questions.
1. Should there be a socket somewhere owned by slapd for local communication?
2. What password should I enter for ldap<command> and dsidm?
Thanks for any pointer, advice, or help!
-m