[midPoint] openLDAP configuration for midPoint: failing on 'Setting up Overlays' step

[Keith Hazelton]

--
email & jabber: keith.hazelton at wisc.edu<mailto:keith.hazelton at wisc.edu>
calendar: http://go.wisc.edu/i6zxx0

From: midPoint <midpoint-bounces at lists.evolveum.com> on behalf of Radovan Semancik <radovan.semancik at evolveum.com>
Reply-To: midPoint General Discussion <midpoint at lists.evolveum.com>
Date: Monday, August 15, 2016 at 03:16
To: "midpoint at lists.evolveum.com" <midpoint at lists.evolveum.com>
Subject: Re: [midPoint] openLDAP configuration for midPoint: failing on 'Setting up Overlays' step

Hi Keith,

I'm not entirely sure. I have created the slapdconf utility as one of my side projects mostly to speed up things that I'm doing with OpenLDAP frequently. I'm sure that it does not cover all the cases, but it is a very useful tool anyway. The OpenLDAP documentation for the OLC (cn=config) configuration is ... well, let's just say it has a potential for improvement.

;-)

I have discovered the configuration objects that slapdconf manipulates mostly by trial and error and by googling the mailing lists.

The OpenLDAP instances that I use already have the cn=module{0},cn=config entry. I currently use OpenLDAP 2.4.42 on Ubuntu, but I have used wide variety of OpenLDAP versions during last couple of years and all of them had the cn=module{0},cn=config entry. So naturally I haven't ever wondered how to enable it.

Maybe the OpenLDAP mailing list is the right place where to ask this question? Maybe http://www.openldap.org/lists/mm/listinfo/openldap-technical

That’s a good suggestion.


Asking for better documentation on the OpenLDAP list may put more pressure on OpenLDAP team to finally update the information on the OLC-style configuration.

If you find out that there is a bug in slapdconf I will be happy to fix it.

Many thanks.   --Keith



--

Radovan Semancik

Software Architect

evolveum.com


On 08/13/2016 02:12 AM, Keith Hazelton wrote:
I’m following the steps on installing and configuring OpenLDAP for use with midPoint that are provided at https://wiki.evolveum.com/display/midPoint/OpenLDAP+Installation+and+Configuration
I used yum to install OpenLDAP.
At the “Setting up Overlays” step I get an error trying to add modules:

midpoint#>./slapdconf add-module sssvlv
Cannot find module configuration entry (olcModuleList) at ./slapdconf line 844, <DATA> line 747.
at ./slapdconf line 107, <DATA> line 747.
     main::__ANON__('Cannot find module configuration entry (olcModuleList) at ./s...') called at ./slapdconf line 844
      main::addModule() called at ./slapdconf line 150

It’s clear enough that there is no entry under cn=config for olcModuleList so it seems my install of OpenLDAP has no support for dynamic modules

OpenLDAP 2.4 admin documentation includes the following
5.2.2. cn=module:  If support for dynamically loaded modules was enabled when configuring slapd, cn=module entries may be used to specify sets of modules to load.

Did I miss a configurations step that would have enabled dynamically loaded modules?

         Thanks in advance for any help,   --Keith Hazelton (hazelton at wisc.edu<mailto:hazelton at wisc.edu>)


--
email & jabber: keith.hazelton at wisc.edu<mailto:keith.hazelton at wisc.edu>
calendar: http://go.wisc.edu/i6zxx0




_______________________________________________

midPoint mailing list

midPoint at lists.evolveum.com<mailto:midPoint at lists.evolveum.com>

http://lists.evolveum.com/mailman/listinfo/midpoint

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160815/7a8249c1/attachment.htm>