[GIS.lab] GIS.lab NG - failing LDAP installation

[Ivan Mincik]

On 27/06/16 07:33, Ivan Mincik wrote:
> I have a following error when trying to install LDAP in GIS.lab NG:
> 
> """
> TASK [service-authentication : Install GIS.lab LDAP tree (run only
> once)] ******
> task path:
> /home/imincik/Projects/dev/gislab-ng/system/roles/service-authentication/tasks/main.yml:350
> fatal: [master]: FAILED! => {"changed": true, "cmd": "ldapadd -Z -w
> ZQHnhU97rt -D \"cn=admin,dc=gis,dc=lab\" -f /tmp/ldap.ldif", "delta":
> "0:00:00.010430", "end": "2016-06-26 21:21:44.003074", "failed": true,
> "rc": 49, "start": "2016-06-26 21:21:43.992644", "stderr": "ldap_bind:
> Invalid credentials (49)", "stdout": "", "stdout_lines": [], "warnings": []}
> """
> 
> When trying to change command to "ldapadd -Y EXTERNAL -H ldapi:/// -D
> "cn=admin,dc=gis,dc=lab" -f /tmp/ldap.ldif"
> 
> I have following error:
> 
> """
> SASL/EXTERNAL authentication started
> SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
> SASL SSF: 0
> adding new entry "ou=People,dc=gis,dc=lab"
> ldap_add: Server is unwilling to perform (53)
>         additional info: no global superior knowledge
> """
> 
> 
> Any thoughts ?

The problem was with fully qualified hostname which was set to incorrect
value and LDAP is using it for setting "dc" values during installation.

Quite a few hours wasted on that.


-- 
Ivan Minčík
ivan.mincik at gmail.com  GPG: 0x79529A1E
http://imincik.github.io/0x79529A1E.key

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL: <http://lists.osgeo.org/pipermail/gis.lab/attachments/20160630/27c58e15/attachment.sig>