[389-users] db2bak.pl Fails when secure connections are required.

[MATON Brett]

From: Rich Megginson [mailto:rmeggins at redhat.com] 
Sent: 30 March 2012 15:15
To: General discussion list for the 389 Directory server project.
Cc: MATON Brett
Subject: Re: [389-users] db2bak.pl Fails when secure connections are required.

 

On 03/30/2012 02:25 AM, MATON Brett wrote: 

OS RHEL 6.2  (x86_64)

 

Packages Installed:

389-admin-1.1.29-1.el6.x86_64

389-admin-console-1.1.8-1.el6.noarch

389-admin-console-doc-1.1.8-1.el6.noarch

389-adminutil-1.1.15-1.el6.x86_64

389-console-1.1.7-1.el6.noarch

389-ds-1.2.2-1.el6.noarch

389-ds-base-1.2.9.14-1.el6_2.2.x86_64

389-ds-base-libs-1.2.9.14-1.el6_2.2.x86_64

389-ds-console-1.2.6-1.el6.noarch

389-ds-console-doc-1.2.6-1.el6.noarch

389-dsgw-1.1.9-1.el6.x86_64

openldap-clients-2.4.23-20.el6.x86_64

 

 

 

/usr/lib64/dirsrv/slapd-<instance>/db2bak.pl -v -D "cn=Directory Manager" -w -

Bind Password:

Back up directory: /var/lib/dirsrv/slapd-<instance>/bak/<instance>-2012_3_30_10_13_21

ldap_initialize( ldap://<FQDN>:389 )

ldap_bind: Confidentiality required (13)

        additional info: Operation requires a secure connection

 

 

For me the following simple fix proved to be a working solution (having said that I haven’t tried a restore yet):

With ldapmodify, ldap://<host> apparently kicks off a TLS connection whereas <host> on it’s own doesn’t. All very odd, anyhoo:

 

db2bak.pl : Line 125 add “ldap://” before the host name.

open(FOO, "| ldapmodify -x $vstr -h ldap://<host> -p 389 -D \"$rootdn\" -w \"$passwd\" -a" );

 

 

/usr/lib64/dirsrv/slapd-<instance>/db2bak.pl -v -D "cn=Directory Manager" -w -

Bind Password:

Back up directory: /var/lib/dirsrv/slapd-<instance>/bak/<instance>-2012_3_30_10_14_14

ldap_initialize( <DEFAULT> )

add objectclass:

        top

        extensibleObject

add cn:

        backup_2012_3_30_10_14_14

add nsArchiveDir:

        /var/lib/dirsrv/slapd-<instance>/bak/<instance>-2012_3_30_10_14_14

add nsDatabaseType:

        ldbm database

adding new entry "cn=backup_2012_3_30_10_14_14, cn=backup, cn=tasks, cn=config"

modify complete

 

Straight forward enough to change the template…


Please file a ticket at https://fedorahosted.org/389

TRAC ticket added: https://fedorahosted.org/389/ticket/332

 


-------------------------------------------------------------------
This e-mail and any attachments, which may contain information that is confidential and/or protected by intellectual property rights, are intended for the exclusive use of the above-mentioned addressee(s). Any use (including reproduction, disclosure and whole or partial distribution in any form whatsoever) of their content is prohibited without prior authorization of NRB. If you have received this message by error, please contact the sender promptly by resending this e-mail back to him (her), or by calling the above number. Thank you for subsequently deleting this e-mail and any files attached thereto.
-------------------------------------------------------------------

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20120330/2a658c11/attachment.html>