From: Rich Megginson [mailto:rmeggins@redhat.com]
Sent: 30 March 2012 15:15
To: General discussion list for the 389 Directory server project.
Cc: MATON Brett
Subject: Re: [389-users] db2bak.pl Fails when secure connections are required.
Â*
On 03/30/2012 02:25 AM, MATON Brett wrote:
OS RHEL 6.2 Â*(x86_64)
Â*
Packages Installed:
389-admin-1.1.29-1.el6.x86_64
389-admin-console-1.1.8-1.el6.noarch
389-admin-console-doc-1.1.8-1.el6.noarch
389-adminutil-1.1.15-1.el6.x86_64
389-console-1.1.7-1.el6.noarch
389-ds-1.2.2-1.el6.noarch
389-ds-base-1.2.9.14-1.el6_2.2.x86_64
389-ds-base-libs-1.2.9.14-1.el6_2.2.x86_64
389-ds-console-1.2.6-1.el6.noarch
389-ds-console-doc-1.2.6-1.el6.noarch
389-dsgw-1.1.9-1.el6.x86_64
openldap-clients-2.4.23-20.el6.x86_64
Â*
Â*
Â*
/usr/lib64/dirsrv/slapd-<instance>/db2bak.pl -v -D "cn=Directory Manager" -w -
Bind Password:
Back up directory: /var/lib/dirsrv/slapd-<instance>/bak/<instance>-2012_3_30_10_13_21
ldap_initialize( ldap://<FQDN>:389 )
ldap_bind: Confidentiality required (13)
Â*Â*Â*Â*Â*Â*Â* additional info: Operation requires a secure connection
Â*
Â*
For me the following simple fix proved to be a working solution (having said that I haven’t tried a restore yet):
With ldapmodify, ldap://<host> apparently kicks off a TLS connection whereas <host> on it’s own doesn’t. All very odd, anyhoo:
Â*
db2bak.pl : Line 125 add “ldap://� before the host name.
open(FOO, "| ldapmodify -x $vstr -h ldap://<host> -p 389 -D "$rootdn" -w "$passwd" -a" );
Â*
Â*
/usr/lib64/dirsrv/slapd-<instance>/db2bak.pl -v -D "cn=Directory Manager" -w -
Bind Password:
Back up directory: /var/lib/dirsrv/slapd-<instance>/bak/<instance>-2012_3_30_10_14_14
ldap_initialize( <DEFAULT> )
add objectclass:
Â*Â*Â*Â*Â*Â*Â* top
Â*Â*Â*Â*Â*Â*Â* extensibleObject
add cn:
Â*Â*Â*Â*Â*Â*Â* backup_2012_3_30_10_14_14
add nsArchiveDir:
Â*Â*Â*Â*Â*Â*Â* /var/lib/dirsrv/slapd-<instance>/bak/<instance>-2012_3_30_10_14_14
add nsDatabaseType:
Â*Â*Â*Â*Â*Â*Â* ldbm database
adding new entry "cn=backup_2012_3_30_10_14_14, cn=backup, cn=tasks, cn=config"
modify complete
Â*
Straight forward enough to change the template…

Please file a ticket at https://fedorahosted.org/389

TRAC ticket added: https://fedorahosted.org/389/ticket/332
Â*

-------------------------------------------------------------------
GreeNRB
NRB considers its environmental responsibility and goes for green IT.
May we ask you to consider yours before printing this e-mail?Â*Â*


NRB, daring to commit
This e-mail and any attachments, which may contain information that is confidential and/or protected by intellectual property rights, are intended for the exclusive use of the above-mentioned addressee(s). Any use (including reproduction, disclosure and whole or partial distribution in any form whatsoever) of their content is prohibited without prior authorization of NRB. If you have received this message by error, please contact the sender promptly by resending this e-mail back to him (her), or by calling the above number. Thank you for subsequently deleting this e-mail and any files attached thereto.

--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users