MDS ошибки инициализации

PCLinuxOS

Модератор: Bizdelnick

adminspb
Сообщения: 25

MDS ошибки инициализации

Сообщение adminspb »

Добрый время суток.

Устанавливаю Mandriva Power Pack 2009
И настраиваю Mandriva Directory Server


Делаю по инструкции тут http://wiki.mandriva.com/ru/FAQ_по_MDS

/etc/openldap/slapd.conf

Код: Выделить всё

# slapd.conf template
include    /usr/share/openldap/schema/core.schema
include    /usr/share/openldap/schema/cosine.schema
include    /usr/share/openldap/schema/corba.schema
include    /usr/share/openldap/schema/inetorgperson.schema
include    /usr/share/openldap/schema/java.schema
include    /usr/share/openldap/schema/krb5-kdc.schema
include /usr/share/openldap/schema/kerberosobject.schema
#include    /usr/share/openldap/schema/misc.schema
include    /usr/share/openldap/schema/nis.schema
include    /usr/share/openldap/schema/openldap.schema
include /usr/share/openldap/schema/autofs.schema
include /usr/share/openldap/schema/samba.schema
#include /usr/share/openldap/schema/kolab.schema
include /usr/share/openldap/schema/evolutionperson.schema
include /usr/share/openldap/schema/calendar.schema
include /usr/share/openldap/schema/sudo.schema
#include /usr/share/openldap/schema/dnszone.schema
#include /usr/share/openldap/schema/dhcp.schema
include /usr/share/openldap/schema/dyngroup.schema
include /usr/share/openldap/schema/ppolicy.schema

include    /etc/openldap/schema/local.schema

pidfile        /var/run/ldap/slapd.pid
argsfile    /var/run/ldap/slapd.args

modulepath    /usr/lib/openldap
moduleload    back_monitor.la
moduleload    syncprov.la
moduleload    ppolicy.la
#moduleload    refint.la

TLSCertificateFile      /etc/ssl/openldap/ldap.pem
TLSCertificateKeyFile   /etc/ssl/openldap/ldap.pem
TLSCACertificateFile    /etc/ssl/openldap/ldap.pem

#loglevel 256

database    bdb
suffix        "dc=avf,dc=local"
directory    /var/lib/ldap


rootdn "cn=manager,dc=avf,dc=local"
rootpw {SSHA}xzIjHZC6DKA/r0cibJ+30SNUURhuND0m


checkpoint 256 5
# 32Mbytes, can hold about 10k posixAccount entries
dbconfig set_cachesize 0 33554432 1
dbconfig set_lg_bsize 2097152
cachesize 1000
idlcachesize 3000

index    objectClass                    eq
index    uidNumber,gidNumber,memberuid,member        eq
index    uid                        eq,subinitial
index    cn,mail,surname,givenname            eq,subinitial
index    sambaSID                    eq,sub
index    sambaDomainName,displayName,sambaGroupType    eq
index    sambaSIDList                    eq
index    krb5PrincipalName                eq
index    uniqueMember                    pres,eq
index    zoneName,relativeDomainName            eq
index    sudouser                    eq,sub
index    entryCSN,entryUUID                eq
index    dhcpHWAddress,dhcpClassData            eq

overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100

overlay ppolicy
ppolicy_default "cn=default,ou=Password Policies,dc=avf,dc=local"

# uncomment if you want to automatically update group
# memberships when an user is removed from the tree
# Also uncomment the refint.la moduleload above
#overlay refint
#refint_attributes member
#refint_nothing "uid=LDAP Admin,ou=System Accounts,dc=example,dc=com"

authz-regexp "gidNumber=0\\\+uidNumber=0,cn=peercred,cn=external,cn=auth"
    "uid=Account Admin,ou=System Accounts,dc=avf,dc=local"
authz-regexp ^uid=([^,]+),cn=[^,]+,cn=auth$ uid=$1,ou=People,dc=avf,dc=local

include /etc/openldap/mandriva-dit-access.conf

database monitor
access to dn.subtree="cn=Monitor"
    by group.exact="cn=LDAP Monitors,ou=System Groups,dc=avf,dc=local" read
    by group.exact="cn=LDAP Admins,ou=System Groups,dc=avf,dc=local" read
    by * none

host 127.0.0.1
base dc=avf,dc=local


Дошел до проверки конфигов LDAP.

Запускаею проверку конфигов LDAP:
# slaptest
и вот ответ
/etc/openldap/slapd.conf : line 96: unknown directive <host> inside baskend database definition.
slaptest:: bad configuration file!

Подскажите пожжалуйста - где ошибка?? Как ее иссправить ?
Дистрибутив устновлен с нуля - после добавлены пакеты указанные в FAQ по MDS и все. Больше никаких настроек не было.
Спасибо сказали: