Comments on: LDAP powered by MySQL on RHEL5

By: Brian

Brian — Mon, 05 Dec 2011 01:11:47 +0000

Good work. Thanks alot.

nathan — Wed, 06 Apr 2011 18:07:16 +0000

Thanks, I’ve found and fixed that link.

Tárikly Távora — Wed, 06 Apr 2011 17:33:03 +0000

Nice article, hope more people find it!

Regards,

Gaurav Talwar — Fri, 23 Jul 2010 01:24:54 +0000

Haven’t done this yet.. But excellent documentation anyways!

nathan — Tue, 30 Mar 2010 02:55:03 +0000

Oh, you should probably also edit the chkconfig levels in the header to /etc/init.d/ldap so that slapd starts after mysql, and stops before it.

This works in my case.

# chkconfig: - 97 33

nathan — Tue, 31 Mar 2009 00:22:31 +0000

Logging for successes and failures:

I only care about success and failure, not exhaustive debugging in the real log.

add this line to /etc/syslog.conf, so that stuff will actually go to a log, /var/log/slapd.log:
```
local4.*    /var/log/slapd.log
```
Turn the log level to 256 in /etc/openldap/slapd.conf
```
loglevel        256
```

Restart slapd and syslogd:

sudo /sbin/service syslog restart
sudo /sbin/service ldap restart

Now you can grep and tail that file and stuff. This line indicates an authentication success:

Mar 30 16:15:49 fai0v1338 slapd[29584]: conn=0 op=0 RESULT tag=97 err=0 text=

This line indicates an authentication failure:

Mar 30 16:16:01 fai0v1338 slapd[29584]: conn=1 op=0 RESULT tag=97 err=49 text=