Activation du support ldaps, Obtenir une erreur de mise en œuvre spécifique

Système: Ubuntu 16.04 de OpenLDAP 2.4.42

Je regarde pour
https://help.ubuntu.com/lts/se ... p-tls
régler OpenLDAP pour TLS. Déposer LDIF, Ce que j'ai créé, ressemble à ceci:

dn: cn=config

changetype: modify

replace: olcTLSCACertificateFile

olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem

-

replace: olcTLSCertificateKeyFile

olcTLSCertificateKeyFile: /etc/ssl/private/mysite_slapd_key.pem

-

replace: olcTLSCertificateFile

olcTLSCertificateFile: /etc/ssl/certs/mysite_slapd_cert.pem

Le problème est que quand je cours

        sudo ldapmodify -H ldapi:/// -Y EXTERNAL -f myFile.ldif

      

, Je reçois l'erreur suivante:

$ sudo ldapmodify -H ldapi:/// -Y EXTERNAL -f myFile.ldif

SASL/EXTERNAL authentication started

SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth

SASL SSF: 0

modifying entry "cn=config"

ldap_modify: Other (e.g., implementation specific) error (80)

Je cherchais ça dans Google et trébuché sur
https://serverfault.com/questi ... ation
. J'ai essayé toutes les réponses, mais j'ai toujours une erreur.

Clarifier,

        /etc/ssl/certs/mysite_slapd_cert.pem

      

fait parti

        ssl-cert

      

Groupe, qui

        openldap

      

est membre, ainsi que des instructions sur la page spécifiée Ubuntu. En fait, j'ai terminé ces commandes:

sudo adduser openldap ssl-cert

sudo chgrp ssl-cert /etc/ssl/private/mysite_slapd_key.pem

sudo chmod g+r /etc/ssl/private/mysite_slapd_key.pem

sudo chmod o-r /etc/ssl/private/mysite_slapd_key.pem

Ci-dessous est le résultat du travail slapd Quand commence B.

        -d 65

      

mode (Comme proposé dans l'une des réponses à un autre post serverfault):

57c8c219 slap_listener_activate(8):

57c8c219 >>> slap_listener(ldapi:///)

57c8c219 connection_get(15): got connid=1000

57c8c219 connection_read(15): checking for input on id=1000

ber_get_next

ber_get_next: tag 0x30 len 24 contents:

57c8c219 op tag 0x60, time 1472774681

ber_get_next

57c8c219 conn=1000 op=0 do_bind

ber_scanf fmt ({imt) ber:

ber_scanf fmt ({m) ber:

ber_scanf fmt (m) ber:

ber_scanf fmt (}}) ber:

57c8c219 >>> dnPrettyNormal: <>

57c8c219 <<< dnPrettyNormal: <>, <>

57c8c219 do_bind: dn () SASL mech EXTERNAL

57c8c219 ==>slap_sasl2dn: converting SASL name gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth to a DN

57c8c219 <==slap_sasl2dn: Converted SASL name to <nothing>

57c8c219 SASL Authorize [conn=1000]:  proxy authorization allowed authzDN=""

57c8c219 send_ldap_sasl: err=0 len=-1

57c8c219 do_bind: SASL/EXTERNAL bind: dn="gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth" sasl_ssf=0

57c8c219 send_ldap_response: msgid=1 tag=97 err=0

ber_flush2: 14 bytes to sd 15

57c8c219 &lt;== slap_sasl_bind: rc=0

57c8c219 connection_get(15): got connid=1000

57c8c219 connection_read(15): checking for input on id=1000

ber_get_next

ber_get_next: tag 0x30 len 245 contents:

57c8c219 op tag 0x66, time 1472774681

ber_get_next

57c8c219 conn=1000 op=1 do_modify

ber_scanf fmt ({m) ber:

ber_scanf fmt ({e{m[W]}}) ber:

ber_scanf fmt ({e{m[W]}}) ber:

ber_scanf fmt ({e{m[W]}}) ber:

57c8c219 &gt;&gt;&gt; dnPrettyNormal: <cn=config>

57c8c219 &lt;&lt;&lt; dnPrettyNormal: <cn=config>, <cn=config>

57c8c219 oc_check_required entry (cn=config), objectClass "olcGlobal"

57c8c219 oc_check_allowed type "objectClass"

57c8c219 oc_check_allowed type "cn"

57c8c219 oc_check_allowed type "olcArgsFile"

57c8c219 oc_check_allowed type "olcLogLevel"

57c8c219 oc_check_allowed type "olcPidFile"

57c8c219 oc_check_allowed type "olcToolThreads"

57c8c219 oc_check_allowed type "structuralObjectClass"

57c8c219 oc_check_allowed type "entryUUID"

57c8c219 oc_check_allowed type "creatorsName"

57c8c219 oc_check_allowed type "createTimestamp"

57c8c219 oc_check_allowed type "olcTLSCACertificateFile"

57c8c219 oc_check_allowed type "olcTLSCertificateKeyFile"

57c8c219 oc_check_allowed type "olcTLSCertificateFile"

57c8c219 oc_check_allowed type "entryCSN"

57c8c219 oc_check_allowed type "modifiersName"

57c8c219 oc_check_allowed type "modifyTimestamp"

57c8c219 send_ldap_result: conn=1000 op=1 p=3

57c8c219 send_ldap_response: msgid=2 tag=103 err=80

ber_flush2: 14 bytes to sd 15

57c8c219 connection_get(15): got connid=1000

57c8c219 connection_read(15): checking for input on id=1000

ber_get_next

ber_get_next: tag 0x30 len 5 contents:

57c8c219 op tag 0x42, time 1472774681

ber_get_next

57c8c219 conn=1000 op=2 do_unbind

57c8c219 connection_close: conn=1000 sd=15

</cn=config></cn=config></cn=config></nothing>