Received: (at 36581) by debbugs.gnu.org; 11 Jul 2019 09:07:01 +0000 From debbugs-submit-bounces <at> debbugs.gnu.org Thu Jul 11 05:07:01 2019 Received: from localhost ([127.0.0.1]:37010 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1hlV2b-0004cE-BV for submit <at> debbugs.gnu.org; Thu, 11 Jul 2019 05:07:01 -0400 Received: from sender-of-o51.zoho.com ([135.84.80.216]:21258) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <rekado@HIDDEN>) id 1hlV2Z-0004c6-Ow for 36581 <at> debbugs.gnu.org; Thu, 11 Jul 2019 05:07:00 -0400 ARC-Seal: i=1; a=rsa-sha256; t=1562836004; cv=none; d=zoho.com; s=zohoarc; b=ddb4D/39bb2i1BiNhOB/jTZPo9cRIn2Hu9r+drsgsJRfCntL3Pt7nio0sgKdqVZ9uSspWQ/mzPc1Iwx1MKbFbXDpHaEDoOC7+vDIAhGinPaoXX+wkcwlzMITcbQ0haOJromviOfdVHkcwzm4gircWR0oNZCcPJqDQUDmDjHFekc= ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=zoho.com; s=zohoarc; t=1562836004; h=Content-Type:Content-Transfer-Encoding:Cc:Date:From:In-Reply-To:MIME-Version:Message-ID:References:Subject:To:ARC-Authentication-Results; bh=tYAqKeVPw6wl15kYFaXCUG14Iy7KRJsqfVF+Skx/Q2s=; b=S0vrWgdsOquJMRv3JKjq3gCW0Ki314pYsMlcAPBNVH1LC9kdcqIvPMo5uTerzrYlbWxGbF9NTzZcYOpazlCdr0sPXFyOReSnG2tU7g2xmf8DqojiYyqJ9wV4NhcWVDOvzS3eqnuMTcvNeR1//9SYpapg1TrU8YqdYbbTTUZyrws= ARC-Authentication-Results: i=1; mx.zoho.com; dkim=pass header.i=elephly.net; spf=pass smtp.mailfrom=rekado@HIDDEN; dmarc=pass header.from=<rekado@HIDDEN> header.from=<rekado@HIDDEN> DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; t=1562836004; s=zoho; d=elephly.net; i=rekado@HIDDEN; h=References:From:To:Cc:Subject:In-reply-to:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding; l=671; bh=tYAqKeVPw6wl15kYFaXCUG14Iy7KRJsqfVF+Skx/Q2s=; b=bItNXN4dAYRC1B16WNybdhgC/aPkbKSr/vNv2KPG5h6/R2CYuQqdMM1yKV81lxDw 7qu9ioTULJ1kXWxv0zRMydE8CYi32C+zMHOTM5HOA1+Sij+lsHk3446GojzMXJWapeN 3t/AUmEMeDO+5rqgMrzNXPnJn87CabpUafwxEhM0= Received: from localhost (p5df011b0.dip0.t-ipconnect.de [93.240.17.176]) by mx.zohomail.com with SMTPS id 1562836002794762.3675921641486; Thu, 11 Jul 2019 02:06:42 -0700 (PDT) References: <4edfc48b-4e18-43f4-9720-ea58370d0bf4@HIDDEN> User-agent: mu4e 1.2.0; emacs 26.2 From: Ricardo Wurmus <rekado@HIDDEN> To: Brant Gardner <brantcgardner@HIDDEN> Subject: Re: bug#36581: Installing 389-ds-base doesn't appear to result in a working LDAP server In-reply-to: <4edfc48b-4e18-43f4-9720-ea58370d0bf4@HIDDEN> X-URL: https://elephly.net X-PGP-Key: https://elephly.net/rekado.pubkey X-PGP-Fingerprint: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC Date: Thu, 11 Jul 2019 11:06:37 +0200 Message-ID: <875zo9j5ya.fsf@HIDDEN> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-ZohoMailClient: External X-Spam-Score: 0.0 (/) X-Debbugs-Envelope-To: 36581 Cc: 36581 <at> debbugs.gnu.org X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.0 (-) Hi Brant, that=E2=80=99s right. Installing just 389-ds-base isn=E2=80=99t going to b= e enough and the scripts it comes with are less than helpful. In the Guix System overarching configuration (involving configuration files, creation of groups and user accounts, starting of daemons, etc) is done via system services. I was just about to recommend a certain service =E2=80=A6 but then realized= that I never actually finished it and the (gnu services ldap) module is only provided by a file in my personal copy of the Guix repository! I=E2=80=99ll make finishing this a priority once I=E2=80=99m back from vaca= tion this weekend. -- Ricardo
bug-guix@HIDDEN:bug#36581; Package guix.
Full text available.
Received: (at submit) by debbugs.gnu.org; 10 Jul 2019 18:02:47 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Wed Jul 10 14:02:47 2019
Received: from localhost ([127.0.0.1]:36591 helo=debbugs.gnu.org)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
id 1hlGvX-0002W2-6v
for submit <at> debbugs.gnu.org; Wed, 10 Jul 2019 14:02:47 -0400
Received: from lists.gnu.org ([209.51.188.17]:54885)
by debbugs.gnu.org with esmtp (Exim 4.84_2)
(envelope-from <brantcgardner@HIDDEN>) id 1hlGvS-0002Vs-Sm
for submit <at> debbugs.gnu.org; Wed, 10 Jul 2019 14:02:43 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:33281)
by lists.gnu.org with esmtp (Exim 4.86_2)
(envelope-from <brantcgardner@HIDDEN>) id 1hlGvM-0007bB-H8
for bug-guix@HIDDEN; Wed, 10 Jul 2019 14:02:41 -0400
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level:
X-Spam-Status: No, score=-2.6 required=5.0 tests=BAYES_00,HTML_MESSAGE,
RCVD_IN_DNSWL_LOW,URIBL_BLOCKED autolearn=disabled version=3.3.2
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
(envelope-from <brantcgardner@HIDDEN>) id 1hlGvJ-0006OK-Oh
for bug-guix@HIDDEN; Wed, 10 Jul 2019 14:02:35 -0400
Received: from out5-smtp.messagingengine.com ([66.111.4.29]:47675)
by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32)
(Exim 4.71) (envelope-from <brantcgardner@HIDDEN>)
id 1hlGvJ-0006FM-7B
for bug-guix@HIDDEN; Wed, 10 Jul 2019 14:02:33 -0400
Received: from compute2.internal (compute2.nyi.internal [10.202.2.42])
by mailout.nyi.internal (Postfix) with ESMTP id 33E6821B42
for <bug-guix@HIDDEN>; Wed, 10 Jul 2019 14:02:28 -0400 (EDT)
Received: from imap2 ([10.202.2.52])
by compute2.internal (MEProxy); Wed, 10 Jul 2019 14:02:28 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=brantware.com;
h=mime-version:message-id:date:from:to:subject:content-type; s=
fm3; bh=9jQea6hH3uEGhcVhS2wUGSnwnOE8YINhrJfws182K0c=; b=Ateohrso
J4gnt3dLRj3+3jqMK5dpduwg4UGN/41W2v4LN9JXQ7gDmfNbeP79DRxuvskJ7wEc
gRC3zU0aR5iSuHGohpP1U4w1iLgs1P/7+qU5d8ImVC5XdaP6wwpkONmjtWyfVBUn
Hxqfx6DGnFU/a0KmdV4pXhkSymTObtAsmrRR6xECogS0EjU53PheDyGuMCPakxpt
IAUZy1UQ25ceBE6USBobLmbcAAzX13f97YJVniYacsda49uGPj1KNiR5d6Guug2Q
2qC0LyJef8wSULCnwtD1YqvIU+2CYHq1ykyH4bpc94xpm1mbSSXOJgGrvYlQvyAN
yS7aBVaHRPSqkQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=
messagingengine.com; h=content-type:date:from:message-id
:mime-version:subject:to:x-me-proxy:x-me-proxy:x-me-sender
:x-me-sender:x-sasl-enc; s=fm3; bh=9jQea6hH3uEGhcVhS2wUGSnwnOE8Y
INhrJfws182K0c=; b=Bhzo4agOz2d3CNxSZ3RFNK4e/P89rUoSw9xs/rC5VUIP6
ItOo3G9VSfC7LwN/YLAMak7JBYNgVspErOS8I9c9YN1rYnP42I5yPv5+r5YZrVbv
9/NINMDPBj7bpYBwHR2jMZomSFiOPMFokdj05oSuTG6/YllZgx+imdHknSrZEWnp
rGdIh4opKoj+wurUhap47VE246oThkKo5sV4zn1kVkoTiEfOQs+Lvd/btlGGM78J
uSPvw6x9a8oZTKbjE4hHhZ930HdZ55KnMzcSlCcQDyY+V9q8+ehnFoV5slG4S3Ks
1MpGN3+5VcZedNiaHIAZMchjSK7Kiffz2etvRlw7w==
X-ME-Sender: <xms:MygmXYB_4hXn77WlHKFYuUalX9jW4qV-lscDmspxdgIEUdO5ewnbiA>
X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduvddrgeeigdduvddvucetufdoteggodetrfdotf
fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen
uceurghilhhouhhtmecufedttdenucenucfjughrpefofgggkfffhffvufgtsegrtderre
erreejnecuhfhrohhmpedfuehrrghnthcuifgrrhgunhgvrhdfuceosghrrghnthgtghgr
rhgunhgvrhessghrrghnthifrghrvgdrtghomheqnecuffhomhgrihhnpehfvgguohhrrg
hprhhojhgvtghtrdhorhhgnecurfgrrhgrmhepmhgrihhlfhhrohhmpegsrhgrnhhttghg
rghrughnvghrsegsrhgrnhhtfigrrhgvrdgtohhmnecuvehluhhsthgvrhfuihiivgeptd
X-ME-Proxy: <xmx:MygmXX7JkbSOok_breIiIcIrLw1CaO8SwPYAzANXZCzMxGwne8rZYA>
<xmx:MygmXQy5P-2u6D-YL-XX1d3iIi5HI06FuT8AQ-SlwRDtyiG3Y4Qy2A>
<xmx:MygmXcKsR5bh12EweV7m65iZN5KTM2bV-CXRXYOwa1ss-Ow38pA2-w>
<xmx:NCgmXd4cA1ihES5wLmN-RekglCnsPEUm-2lAO1cKk1Qk8yRKacBzxg>
Received: by mailuser.nyi.internal (Postfix, from userid 501)
id C2D35E0193; Wed, 10 Jul 2019 14:02:27 -0400 (EDT)
X-Mailer: MessagingEngine.com Webmail Interface
User-Agent: Cyrus-JMAP/3.1.6-731-g19d3b16-fmstable-20190627v1
Mime-Version: 1.0
Message-Id: <4edfc48b-4e18-43f4-9720-ea58370d0bf4@HIDDEN>
Date: Wed, 10 Jul 2019 13:02:18 -0500
From: "Brant Gardner" <brantcgardner@HIDDEN>
To: bug-guix@HIDDEN
Subject: =?UTF-8?Q?Installing_389-ds-base_doesn't_appear_to_result_in_a_working_L?=
=?UTF-8?Q?DAP_server?=
Content-Type: multipart/alternative; boundary=8596c96ca8294260b49bdc056771869a
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-Received-From: 66.111.4.29
X-Spam-Score: -1.6 (-)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>,
<mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -2.6 (--)
--8596c96ca8294260b49bdc056771869a
Content-Type: text/plain
I used the quickstart documentation for all my testing, located here: https://directory.fedoraproject.org/docs/389ds/howto/quickstart.html
Initially I ran into trouble because the 'dirsrv' user and group are apparently expected to already exist, so I added this to my config.scm and ran guix system reconfigure:
(groups (cons*
;; To support 389-ds-base
(user-group (name "dirsrv"))
%base-groups))
(users (cons*
...snip...
;; To support 389-ds-base
(user-account
(name "dirsrv")
(comment "LDAP Server User")
(group "users")
(supplementary-groups '("netdev" "dirsrv"))
(home-directory "/home/dirsrv"))
%base-user-accounts))
After this, I generated a template config file with:
# dscreate create-template > gardner.inf
Then I read through the resulting template file and modified only these values:
- password
- server FQDN
- instance name (gardner)
- selinux (False)
- suffix (dc=gardner,dc=local)
Finally I tried to create the new instance with:
# dscreate from-file /root/gardner.inf
This said "Starting installation...", then paused for about 60 seconds and then said:
Error: Failed to start DS, removing incomplete installation...
Error:
Note that even though it claims to, it did not actually remove the incomplete installation, as trying the same command again results in:
Starting installation...
Error: Another instance named 'gardner' may already exist
Checking the logs, I found only this line in /var/log/debug that seems related:
Jul 10 12:49:09 localhost ns-slapd: looking for plugins in '/usr/lib/x86_64-linux-gnu', failed to open directory, error: No such file or directory
Thanks for any suggestions,
--
Brant Gardner
--8596c96ca8294260b49bdc056771869a
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE html><html><head><title></title><style type=3D"text/css">p.Mso=
Normal,p.MsoNoSpacing{margin:0}</style></head><body><div>I used the quic=
kstart documentation for all my testing, located here: <a href=3D"https:=
//directory.fedoraproject.org/docs/389ds/howto/quickstart.html">https://=
directory.fedoraproject.org/docs/389ds/howto/quickstart.html</a><br></di=
v><div><br></div><div>Initially I ran into trouble because the 'dirsrv' =
user and group are apparently expected to already exist, so I added this=
to my config.scm and ran guix system reconfigure:<br></div><div><br></d=
iv><div> (groups (cons*<br></div><div> &nbs=
p; ;; To support 389-ds-base &n=
bsp; &n=
bsp; &n=
bsp; &n=
bsp; &n=
bsp; &n=
bsp; &n=
bsp; &n=
bsp; &n=
bsp;<br></div><div>  =
; (user-group (name "dirsrv"))<br></div><div> &nb=
sp; %base-groups))<br></div><div><br=
></div><div> (users (cons*<br></div><div> ...snip...<b=
r></div><div> ;; T=
o support 389-ds-base &nb=
sp; &nb=
sp; &nb=
sp; &nb=
sp; &nb=
sp; &nb=
sp; &nb=
sp; &nb=
sp; <br></div><div> =
(user-account<br></div><div>&=
nbsp; (name "dirsr=
v")<br></div><div> =
(comment "LDAP Server User")<br></div><div> &nbs=
p; (group "users")<br></div><div>&nb=
sp; (supplementary=
-groups '("netdev" "dirsrv"))<br></div><div> &nbs=
p; (home-directory "/home/dirsrv"))<br></d=
iv><div> %base-use=
r-accounts))<br></div><div><br></div><div>After this, I generated a temp=
late config file with:<br></div><div><br></div><div># dscreate create-te=
mplate > gardner.inf<br></div><div><br></div><div>Then I read through=
the resulting template file and modified only these values:<br></div><d=
iv>- password<br></div><div>- server FQDN<br></div><div>- instance name =
(gardner)<br></div><div>- selinux (False)<br></div><div>- suffix (dc=3Dg=
ardner,dc=3Dlocal)<br></div><div><br></div><div>Finally I tried to creat=
e the new instance with:<br></div><div><br></div><div># dscreate from-fi=
le /root/gardner.inf<br></div><div><br></div><div>This said "Starting in=
stallation...", then paused for about 60 seconds and then said:<br></div=
><div><br></div><div>Error: Failed to start DS, removing incomplete inst=
allation...<br></div><div>Error:<br></div><div><br></div><div>Note that =
even though it claims to, it did not actually remove the incomplete inst=
allation, as trying the same command again results in:<br></div><div><br=
></div><div>Starting installation...<br></div><div>Error: Another instan=
ce named 'gardner' may already exist<br></div><div><br></div><div>Checki=
ng the logs, I found only this line in /var/log/debug that seems related=
:<br></div><div><br></div><div>Jul 10 12:49:09 localhost ns-slapd: looki=
ng for plugins in '/usr/lib/x86_64-linux-gnu', failed to open directory,=
error: No such file or directory<br></div><div><br></div><div>Thanks fo=
r any suggestions,<br></div><div><br></div><div id=3D"sig65413192"><div =
class=3D"signature">--<br></div><div class=3D"signature">Brant Gardner<b=
r></div><div class=3D"signature"><br></div><div class=3D"signature"><br>=
</div></div><div><br></div></body></html>
--8596c96ca8294260b49bdc056771869a--
"Brant Gardner" <brantcgardner@HIDDEN>:bug-guix@HIDDEN.
Full text available.bug-guix@HIDDEN:bug#36581; Package guix.
Full text available.
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.