Bug#502769: when adding overlay chain to the slapd.conf slapd crashes with overlay chain not found

[christian setzer]

Package: slapd
Version: 2.3.30-5+etch2
Severity: important

Subject: slapd: when adding overlay chain to the slapd.conf slapd crashes with overlay chain not found
Package: slapd
Version: 2.3.30-5+etch2
Severity: important

Added the following lines to my slapd.conf

overlay chain
chain-uri "ldap://ldap.affenfels.ape"
chain-idassert-bind bindmethod="simple"
binddn="cn=admin,dc=foobar,dc=de"
credentials="secretpw
mode="self"
chain-tls start
chain-return-error TRUE

causes the slapd to crash

bdb_back_initialize: Sleepycat Software: Berkeley DB 4.2.52: (December 3, 2003)
module back_bdb: null module registered
line 30 (moduleload syncprov)
loaded module syncprov
module syncprov: null module registered
line 33 (sizelimit 500)
line 36 (tool-threads 1)
line 38 (overlay chain)
overlay "chain" not found
/etc/ldap/slapd.conf: line 38: <overlay> handler exited with 1!
slapd destroy: freeing system resources.
slapd stopped.
connections_destroy: nothing to destroy.

The same applies to lenny.

-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-xen-amd64
Locale: LANG=de_DE.UTF8, LC_CTYPE=de_DE.UTF8 (charmap=UTF-8)
(ignored: LC_ALL set to de_DE.UTF8)

Versions of packages slapd depends on:
ii adduser 3.102 Add and remove users and groups
ii coreutils 5.97-5.3 The GNU core utilities
ii debconf [debconf-2.0] 1.5.11etch2 Debian configuration management sy
ii libc6 2.3.6.ds1-13etch7 GNU C Library: Shared libraries
ii libdb4.2 4.2.52+dfsg-2 Berkeley v4.2 Database
Libraries [
ii libiodbc2 3.52.4-5 iODBC Driver Manager
ii libldap-2.3-0 2.3.30-5+etch2 OpenLDAP libraries
ii libltdl3 1.5.22-4 A system independent
dlopen wrappe
ii libperl5.8 5.8.8-7etch3 Shared Perl library
ii libsasl2-2 2.1.22.dfsg1-8 Authentication
abstraction library
ii libslp1 1.2.1-6.2 OpenSLP libraries
ii libssl0.9.8 0.9.8c-4etch3 SSL shared libraries ii libwrap0 7.6.dbs-13 Wietse Venema's TCP wrappers libra
ii perl [libmime-base64-p 5.8.8-7etch3 Larry Wall's Practical Extraction
ii psmisc 22.3-1 Utilities that use the proc filesy
Versions of packages slapd recommends:
pn libsasl2-modules <none> (no description available)

-- debconf information:
* slapd/password1: (password omitted)
slapd/internal/adminpw: (password omitted)
* slapd/password2: (password omitted)
slapd/allow_ldap_v2: false
slapd/password_mismatch:
slapd/suffix_change: false
slapd/fix_directory: true
slapd/invalid_config: true
slapd/slave_databases_require_updateref:
shared/organization: affenfels.ape
slapd/upgrade_slapcat_failure:
slapd/dump_database_destdir:
/var/backups/slapd-VERSION
slapd/autoconf_modules: true
slapd/purge_database: false
slapd/domain: affenfels.ape
slapd/backend: BDB
slapd/no_configuration: false
slapd/migrate_ldbm_to_bdb: true
slapd/move_old_database: true
slapd/dump_database: when needed
slapd/upgrade_slapadd_failure:

--
To UNSUBSCRIBE, email to debian-bugs-...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listm...@lists.debian.org

[Hallvard B Furuseth]

Hi. It looks like you didn't moduleload back_ldap. The chain overlay
resides there because it uses back-ldap. This should be more clearly
documented, if nothing else. If that's the problem, it's now filed
upstream as OpenLDAP ITS#5829:
http://www.openldap.org/its/?findid=5829
Note, I don't know Debian - just browsing around coming from the
OpenLDAP side. I hope I'm using your bug system right.

--
Hallvard

[Steve Langasek]

forwarded 502769 http://www.openldap.org/its/?findid=5829
tags 502769 upstream
severity 502769 normal
thanks

Hi Hallvard,

On Tue, Nov 25, 2008 at 05:34:24PM +0100, Hallvard B Furuseth wrote:
> Hi. It looks like you didn't moduleload back_ldap. The chain overlay
> resides there because it uses back-ldap. This should be more clearly
> documented, if nothing else. If that's the problem, it's now filed
> upstream as OpenLDAP ITS#5829:
> http://www.openldap.org/its/?findid=5829
> Note, I don't know Debian - just browsing around coming from the
> OpenLDAP side. I hope I'm using your bug system right.

Thanks very much! Yes, you're using it just right, and this is useful
information since I wasn't familiar with the chain overlay at all. :)
Linking this report to the upstream bug.

Cheers,
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer http://www.debian.org/
slan...@ubuntu.com vor...@debian.org