FreedomTunnel/DeploymentNotes

Server setup:

1) http://www.rjsystems.nl/en/2100-d6-openldap-provider.php

2) (I had to run dpkg-reconfigure slapd) to get the ACLs tweaked.

3) Attempt to add schemas:

 581  ldapadd -x -D cn=admin,cn=config,dc=corp,dc=thefnf,dc=net -W -f openldap/goserver.ldif 

gives me the dreaded invalid credentials error. So then I find

http://www.openldap.org/lists/openldap-technical/201201/msg00045.html http://www.openldap.org/lists/openldap-technical/201201/msg00053.html

Relevant bits:

PASS=$(slappasswd) echo -e "database config\nrootpw $PASS" > /tmp/slapd-initial.conf slaptest -f /tmp/slapd-initial.conf -F /etc/*ldap/slapd.d chown -R ldap:ldap /etc/*ldap/slapd.d slapd -u ldap -g ldap ldapwhoami -x -D cn=config -W

Then I found:

http://ubuntuforums.org/showthread.php?t=1515119

and get

SASL/EXTERNAL authentication started
SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
SASL SSF: 0
modifying entry "cn=config"

modifying entry "olcDatabase={0}config,cn=config"
ldap_modify: Type or value exists (20)
	additional info: modify/add: olcRootDN: value #0 already exists

Found

http://www.saruman.biz/wiki/index.php/OpenLDAP#Adding_or_modifying_the_cn.3Dconfig_admin_password