troubleshooting.sdf 2.96 KB
Newer Older
Gavin Henry's avatar
Gavin Henry committed
1
# $OpenLDAP$
2
3
4
5
6
# Copyright 2007 The OpenLDAP Foundation, All Rights Reserved.
# COPYING RESTRICTIONS APPLY, see COPYRIGHT.

H1: Troubleshooting

Gavin Henry's avatar
Gavin Henry committed
7
8
9
10
11
12
If you're having trouble using OpenLDAP, get onto the
OpenLDAP-Software mailing list. 

Browse the list archives at {{URL:http://www.openldap.org/lists/}} 

Chances are the problem has been solved and explained in detail many times before.
13

Gavin Henry's avatar
Gavin Henry committed
14
15
16
17
18
19
20
21
22
23
24
25
26
27
H2: User or Software errors?

More often than not, an error is caused by a configuration problem or a misunderstanding
of what you are trying to implement and/or achieve. 

Sometimes you may encounter an actual OpenLDAP bug, in which case please visit 
our Issue Tracking system {{URL:http://www.openldap.org/its/}} and report it there, 
providing as much information as possible.

Note: Our Issue Tracking system is {{B:NOT}} for OpenLDAP {{B:Support}}, please join our
mailing Lists: {{URL:http://www.openldap.org/lists/}} for that

We will now attempt to discuss common user errors

28
29
H2: Checklist

Gavin Henry's avatar
Gavin Henry committed
30
31
The following checklist can help track down your problem. Please try to use if {{B:before}}
posting to the list, or in the rare circumstances of reporting a bug.
32

Gavin Henry's avatar
Gavin Henry committed
33
.{{S: }}
34
35
36
37
^{{B: Use the {{slaptest}} tool to verify configurations before starting {{slapd}}}}

.{{S: }}
+{{B: Verify that {{slapd}} is listening to the specified port(s) (389 and 636, generally) before trying the {{ldapsearch}}}}
Gavin Henry's avatar
Gavin Henry committed
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52

.{{S: }}
+{{B: Can you issue an {{ldapsearch}}?}}

.{{S: }}
+{{B: If not, have you enabled complex ACLs without fully understanding them?}}

.{{S: }}
+{{B: Do you have a system wide LDAP setting pointing to the wrong LDAP Directory?}}

.{{S: }}
+{{B: Are you using TLS?}}

.{{S: }}
+{{B: Have your certificates expired?}}
53
54


Gavin Henry's avatar
Gavin Henry committed
55
56
57
58
H2: 3rd party software error

The OpenLDAP Project only supports OpenLDAP software. 

Gavin Henry's avatar
Gavin Henry committed
59
You may however seek commercial support ({{URL:http://www.openldap.org/support/}}) or join 
Gavin Henry's avatar
Gavin Henry committed
60
61
62
63
the general LDAP forum for non-commercial discussions and information relating to LDAP at: 
{{URL:http://www.umich.edu/~dirsvcs/ldap/mailinglist.html}}


64
65
H2: How to contact the OpenLDAP Project

66
67
68
* Mailing Lists: {{URL:http://www.openldap.org/lists/}}
* Project: {{URL: http://www.openldap.org/project/}}
* Issue Tracking: {{URL:http://www.openldap.org/its/}}
Gavin Henry's avatar
Gavin Henry committed
69

70
71
72
73

H2: How to present your problem


Gavin Henry's avatar
Gavin Henry committed
74
H2: Debugging {{slapd}}(8)
75

76
77
78
79
* Loglevel 256 is generally a good first loglevel to try for getting 
  information useful to list members on issues
* Running {{slapd -d -1}} can often track down fairly simple issues, such as 
  missing schemas and incorrect file permissions for the {{slapd}} user to things like certs
80
81

H2: Commercial Support
Gavin Henry's avatar
Gavin Henry committed
82
83
84
85
86

The firms listed at {{URL:http://www.openldap.org/support/}} offer technical support services catering to OpenLDAP community. 

The listing of any given firm should not be viewed as an endorsement or recommendation of any kind, nor as otherwise indicating 
there exists a business relationship or an affiliation between any listed firm and the OpenLDAP Foundation or the OpenLDAP Project or its contributors.