Apple Event: May 7th at 7 am PT

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Level 1

11 points

LDAP is not running after 10.6.5 update - Help!

After10.6.5 update to LDAP doesen't run. This means the Server is practically dead, because no one can connect to it's services anymore.

Does anyone can help - PLEASE!

+Nov 11 13:44:56 server slapd[68]: @(#) $OpenLDAP: slapd 2.4.11 (Aug 12 2010 17:17:10) $+
+Nov 11 13:44:59 server slapd[68]: daemon: SLAP SOCKINIT: dtblsize=8192+
+Nov 11 13:45:08 server slapd[68]: main: TLS init def ctx failed: -1+
+Nov 11 13:45:08 server slapd[68]: slapd stopped.+
+Nov 11 13:45:08 server slapd[68]: connections_destroy: nothing to destroy.+
+Nov 11 13:45:09 server slapd[194]: @(#) $OpenLDAP: slapd 2.4.11 (Aug 12 2010 17:17:10) $+
+Nov 11 13:45:09 server slapd[194]: daemon: SLAP SOCKINIT: dtblsize=8192+
+Nov 11 13:45:10 server slapd[194]: main: TLS init def ctx failed: -1+
+Nov 11 13:45:10 server slapd[194]: slapd stopped.+

Mac OS X (10.6.3)

Posted on Nov 11, 2010 5:08 AM

28 replies

Feb 10, 2011 11:08 PM in response to B. Kennedy

Rrrr.. This one is a little over my head. Same problem. The update was never applied with the "In Progress" being displayed in server admin 12 hours later it was still there. I did a reboot and was locked out of work group manager and no more ssh. This turned out to be a DNS related issue. as the reverse lookup on my local network was returning the servers external IP rather than the local one causing any authentication to fail. After restoring and fixing DNS I could use screen sharing and got a terminal on the server fro the local host and have server admin up. LDAP service are stopped and my root certificate is not valid. / Created a new one and trusted it in the keychain. reboot. LDAP still not started and I am here...

Feb 10, 2011 11:38 PM in response to aliveonearth

Any advice on what this actually means.. ??
It looks to be like I don't have a configuration set up at all ?
This is out side of the scope of my knowledge.... So if there are any one out there who know suggestions welcome.

/usr/libexec/slapd -d -1
@(#) $OpenLDAP: slapd 2.4.11 (Aug 12 2010 17:17:10) $
daemon_init: <null>
ODNodeCustomCall node(/Cache) - ERROR (4001)
daemon: SLAP SOCKINIT: dtblsize=256
daemon_init: listen on ldap:///
daemon_init: 1 listeners to open...
ldap url_parseext(ldap:///)
daemon: bind(8) failed errno=13 (Permission denied)
daemon: bind(8) failed errno=13 (Permission denied)
slap openlistener: failed on ldap:///
slapd stopped.
connections_destroy: nothing to destroy.
ODNodeCustomCall node(/Cache) - ERROR (4001)

Feb 11, 2011 9:18 PM in response to aliveonearth

Success .. Removed the 5 offending lines with reference to my old root certificate and .. LDAP is up and runnig again...

perigean

Level 1

0 points

Feb 18, 2011 7:06 AM in response to aliveonearth

I'm attempting this fix, but received a "Permission Denied" response after entering the "...cn=config.ldif".

Any suggestions?

Dr Mike

Level 1

119 points

Apr 11, 2011 7:39 AM in response to root 66

Absolute gold. I can't thank you enough for posting this!

Dr Mike

Level 1

119 points

Apr 11, 2011 7:45 AM in response to perigean

You need root permissions to edit this file. Try using sudo or su to switch to the root account first.

Jan 3, 2012 12:42 PM in response to root 66

Second Day of 2012! Certificate about to expire. Updated the Self-assigned Cert. Boom! Dead in the water. Running Snow Leopard (10.6.8).

Well thanks to root66 Problem solved!

Thanks a million!

-Bao

ruluk7

Level 1

0 points

Jul 30, 2012 12:49 AM in response to root 66

works also for me, thanks root 66!

Sep 28, 2012 9:39 AM in response to root 66

Root 66, you saved the day with your response!!! Apple phone support told me I was going to have to rebuild my LDAP from scratch. Following your approach saved me countless hours, not to mention my job. THANK YOU!!

Sellers

Level 1

14 points

Oct 15, 2012 7:34 PM in response to RobFerguson

Thanks much - this was very helpful even in 10.8.

Jun 4, 2013 4:28 PM in response to Sellers

Even after updating to 10.8.4 !! Thanks a lot!

Jul 8, 2013 11:37 PM in response to B. Kennedy

Thankyou so much everyone, and particularly root66! This post saved my bacon BIG TIME when my certificate update went terribly wrong.... Note that this worked in OS X server 10.7.4...

Hurray!!! Thanks again!

jhdore

Level 1

0 points

Jan 14, 2014 4:02 PM in response to root 66

Get In my son! Having trawled t'internet for nearly six hours, found your posting re the contents of /etc/openldap/slapd.d/cn=config.ldif containing outdated SSL certificate references. They do not match current SSL certificates, which was preventing my Lion Server LDAP and Open Directory from starting.

deleting the outdated references cured the problem. Many thanks, dude!

LDAP is not running after 10.6.5 update - Help!