LDAP slave Mode no working

[78045807@…]

LDAP Setting: An internal error has occurred. This is most probably a bug, relevant information can be found in the logs. Please look for the details in the /var/log/zentyal/zentyal.log file and take a minute to submit a bug report so we can fix the issue as soon as possible.

2011/09/27 10:12:00 INFO> GlobalImpl?.pm:539 EBox::GlobalImpl::saveAllModules - Saving config and restarting services: firewall users 2011/09/27 10:12:00 INFO> Base.pm:228 EBox::Module::Base::save - Restarting service for module: firewall 2011/09/27 10:12:44 INFO> ServiceManager?.pm:631 EBox::ServiceManager::_getMD5 - File /etc/cron.d/zentyal-users does not exist. So we won't compute its digest 2011/09/27 10:12:44 INFO> ServiceManager?.pm:631 EBox::ServiceManager::_getMD5 - File /etc/ldap.secret does not exist. So we won't compute its digest 2011/09/27 10:12:44 INFO> ServiceManager?.pm:631 EBox::ServiceManager::_getMD5 - File /etc/cron.d/zentyal-users does not exist. So we won't compute its digest 2011/09/27 10:12:45 INFO> ServiceManager?.pm:631 EBox::ServiceManager::_getMD5 - File /etc/ldap.secret does not exist. So we won't compute its digest 2011/09/27 10:12:45 ERROR> Sudo.pm:213 EBox::Sudo::_rootError - root command set -e ldapadd -H 'ldapi://' -Y EXTERNAL -c -f /var/lib/zentyal/tmpslapd-master.ldif ldapadd -H 'ldapi://' -Y EXTERNAL -c -f /var/lib/zentyal/tmpslapd-master-db.ldif failed. Error output: ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1)

Command output: . Exit value: 255 2011/09/27 10:12:45 WARN> Setup.pm:134 EBox::UsersAndGroups::Setup::ANON - Trying to setup master ldap failed, exit value: 255 2011/09/27 10:12:45 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying 2011/09/27 10:12:47 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying 2011/09/27 10:12:48 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying 2011/09/27 10:12:49 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying 2011/09/27 10:12:50 ERROR> Ldap.pm:1107 EBox::Ldap::safeConnect - FATAL: Couldn't connect to LDAP server: ldapi://%2fvar%2frun%2fslapd%2fldapi 2011/09/27 10:12:50 ERROR> ConfigureModuleController?.pm:74 EBox::CGI::ServiceModule::ConfigureModuleController::ANON - Failed to enable: FATAL: Couldn't connect to LDAP server: ldapi://%2fvar%2frun%2fslapd%2fldapi 2011/09/27 10:13:15 INFO> GlobalImpl?.pm:539 EBox::GlobalImpl::saveAllModules - Saving config and restarting services: firewall users 2011/09/27 10:13:15 INFO> Base.pm:228 EBox::Module::Base::save - Restarting service for module: firewall 2011/09/27 10:13:45 INFO> ServiceManager?.pm:631 EBox::ServiceManager::_getMD5 - File /etc/cron.d/zentyal-users does not exist. So we won't compute its digest 2011/09/27 10:13:45 INFO> ServiceManager?.pm:631 EBox::ServiceManager::_getMD5 - File /etc/ldap.secret does not exist. So we won't compute its digest 2011/09/27 10:13:46 INFO> ServiceManager?.pm:631 EBox::ServiceManager::_getMD5 - File /etc/cron.d/zentyal-users does not exist. So we won't compute its digest 2011/09/27 10:13:46 INFO> ServiceManager?.pm:631 EBox::ServiceManager::_getMD5 - File /etc/ldap.secret does not exist. So we won't compute its digest 2011/09/27 10:13:46 INFO> ServiceManager?.pm:631 EBox::ServiceManager::_getMD5 - File /etc/cron.d/zentyal-users does not exist. So we won't compute its digest 2011/09/27 10:13:47 INFO> ServiceManager?.pm:631 EBox::ServiceManager::_getMD5 - File /etc/ldap.secret does not exist. So we won't compute its digest 2011/09/27 10:13:47 INFO> ServiceManager?.pm:631 EBox::ServiceManager::_getMD5 - File /etc/cron.d/zentyal-users does not exist. So we won't compute its digest 2011/09/27 10:13:47 INFO> ServiceManager?.pm:631 EBox::ServiceManager::_getMD5 - File /etc/ldap.secret does not exist. So we won't compute its digest 2011/09/27 10:13:53 INFO> GlobalImpl?.pm:539 EBox::GlobalImpl::saveAllModules - Saving config and restarting services: firewall users 2011/09/27 10:13:53 INFO> Base.pm:228 EBox::Module::Base::save - Restarting service for module: firewall 2011/09/27 10:13:53 INFO> Base.pm:228 EBox::Module::Base::save - Restarting service for module: users 2011/09/27 10:13:54 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying 2011/09/27 10:13:55 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying 2011/09/27 10:13:56 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying 2011/09/27 10:13:58 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying 2011/09/27 10:13:59 ERROR> Ldap.pm:1107 EBox::Ldap::safeConnect - FATAL: Couldn't connect to LDAP server: ldapi://%2fvar%2frun%2fslapd%2fldapi 2011/09/27 10:13:59 ERROR> GlobalImpl?.pm:612 EBox::GlobalImpl::ANON - Failed to save changes in module users: FATAL: Couldn't connect to LDAP server: ldapi://%2fvar%2frun%2fslapd%2fldapi 2011/09/27 10:13:59 ERROR> GlobalImpl?.pm:659 EBox::GlobalImpl::saveAllModules - The following modules failed while saving their changes, their state is unknown: users 2011/09/27 10:14:05 ERROR> Base.pm:358 EBox::CGI::Base::ANON - Software caused connection abort at /usr/share/perl5/HTML/Mason/Request.pm line 127.

Stack:

usr/share/perl5/HTML/Mason/Request.pm:127 usr/share/perl5/HTML/Mason/Request.pm:525

2011/09/27 10:14:11 ERROR> Base.pm:358 EBox::CGI::Base::ANON - Software caused connection abort at /usr/share/perl5/HTML/Mason/Request.pm line 127.

Stack:

usr/share/perl5/HTML/Mason/Request.pm:127 usr/share/perl5/HTML/Mason/Request.pm:525

2011/09/27 10:17:03 INFO> Service.pm:716 EBox::Module::Service::restartService - Restarting service for module: events 2011/09/27 10:17:05 WARN> Events.pm:572 EBox::Events::_adminDumbness - No event dispatchers have been enabled 2011/09/27 11:17:03 INFO> Service.pm:716 EBox::Module::Service::restartService - Restarting service for module: events 2011/09/27 11:17:05 WARN> Events.pm:572 EBox::Events::_adminDumbness - No event dispatchers have been enabled 2011/09/27 11:50:55 ERROR> Base.pm:358 EBox::CGI::Base::ANON - Software caused connection abort at /usr/share/perl5/HTML/Mason/Request.pm line 127.

Stack:

usr/share/perl5/HTML/Mason/Request.pm:127 usr/share/perl5/HTML/Mason/Request.pm:525

2011/09/27 11:51:07 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying 2011/09/27 11:51:08 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying 2011/09/27 11:51:09 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying 2011/09/27 11:51:11 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying 2011/09/27 11:51:12 ERROR> Ldap.pm:1107 EBox::Ldap::safeConnect - FATAL: Couldn't connect to LDAP server: ldapi://%2fvar%2frun%2fslapd%2fldapi 2011/09/27 11:51:12 DEBUG> Base.pm:577 EBox::CGI::Base::setErrorFromException - FATAL: Couldn't connect to LDAP server: ldapi://%2fvar%2frun%2fslapd%2fldapi$VAR1 = bless( {

'-stacktrace' => 'FATAL: Couldn\'t connect to LDAP server: ldapi://%2fvar%2frun%2fslapd%2fldapi at /usr/share/perl5/EBox/Ldap.pm line 1107

EBox::Ldap::safeConnect(\'ldapi://%2fvar%2frun%2fslapd%2fldapi\') called at /usr/share/perl5/EBox/Ldap.pm line 157 EBox::Ldap::anonymousLdapCon(\'EBox::Ldap=HASH(0xbb4188e8)\') called at /usr/share/perl5/EBox/Ldap.pm line 221 EBox::Ldap::dn(\'EBox::Ldap=HASH(0xbb4188e8)\') called at /usr/share/perl5/EBox/UsersAndGroups/Model/LdapInfo.pm line 119 EBox::UsersAndGroups::Model::LdapInfo::_acquirer(\'EBox::Types::Text=HASH(0xbb384ea8)\') called at /usr/share/perl5/EBox/Types/Abstract.pm line 532 EBox::Types::Abstract::restoreFromHash(\'EBox::Types::Text=HASH(0xbb384ea8)\') called at /usr/share/perl5/EBox/Model/DataForm.pm line 928 EBox::Model::DataForm::_row(\'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\') called at /usr/share/perl5/EBox/Model/DataForm/ReadOnly.pm line 137 EBox::Model::DataForm::ReadOnly::row(\'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\') called at /usr/share/zentyal/templates/ajax/form.mas line 42 HTML::Mason::Commands::ANON(\'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\', \'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\', \'hasChanged\', undef, \'action\', \'view\') called at /usr/share/perl5/HTML/Mason/Component.pm line 135 HTML::Mason::Component::run(\'HTML::Mason::Component::Subcomponent=HASH(0xbb3abfc8)\', \'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\', \'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\', \'hasChanged\', undef, \'action\', \'view\', ...) called at /usr/share/perl5/HTML/Mason/Request.pm line 1302 eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 1292 HTML::Mason::Request::comp(undef, undef, \'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\', \'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\', \'hasChanged\', undef, \'action\', ...) called at /usr/share/zentyal/templates/ajax/modelViewer.mas line 161 HTML::Mason::Commands::ANON(\'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\') called at /usr/share/perl5/HTML/Mason/Component.pm line 135 HTML::Mason::Component::run(\'HTML::Mason::Component::Subcomponent=HASH(0xbb417e28)\', \'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\') called at /usr/share/perl5/HTML/Mason/Request.pm line 1302 eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 1292 HTML::Mason::Request::comp(undef, undef, \'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\') called at /usr/share/zentyal/templates/ajax/modelViewer.mas line 75 HTML::Mason::Commands::ANON(\'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\', \'hasChanged\', undef, \'action\', \'view\') called at /usr/share/perl5/HTML/Mason/Component.pm line 135 HTML::Mason::Component::run(\'HTML::Mason::Component::Subcomponent=HASH(0xbb417f78)\', \'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\', \'hasChanged\', undef, \'action\', \'view\') called at /usr/share/perl5/HTML/Mason/Request.pm line 1302 eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 1292 HTML::Mason::Request::comp(undef, undef, \'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\', \'hasChanged\', undef, \'action\', \'view\') called at /usr/share/zentyal/templates/readOnlyForm.mas line 20 HTML::Mason::Commands::ANON(\'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\', \'hasChanged\', undef, \'action\', \'view\') called at /usr/share/perl5/HTML/Mason/Component.pm line 135 HTML::Mason::Component::run(\'HTML::Mason::Component::FileBased?=HASH(0xbb3a9900)\', \'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\', \'hasChanged\', undef, \'action\', \'view\') called at /usr/share/perl5/HTML/Mason/Request.pm line 1302 eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 1292 HTML::Mason::Request::comp(undef, undef, \'model\', \'EBox::UsersAndGroups::Model::LdapInfo?=HASH(0xbadee660)\', \'hasChanged\', undef, \'action\', \'view\') called at <anonymous component> line 63 HTML::Mason::Commands::ANON(\'model\', \'EBox::UsersAndGroups::Composite::Settings=HASH(0xbb367d98)\', \'hasChanged\', undef) called at /usr/share/perl5/HTML/Mason/Component.pm line 135 HTML::Mason::Component::run(\'HTML::Mason::Component=HASH(0xbae14260)\', \'model\', \'EBox::UsersAndGroups::Composite::Settings=HASH(0xbb367d98)\', \'hasChanged\', undef) called at /usr/share/perl5/HTML/Mason/Request.pm line 1302 eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 1292 HTML::Mason::Request::comp(undef, undef, undef, \'model\', \'EBox::UsersAndGroups::Composite::Settings=HASH(0xbb367d98)\', \'hasChanged\', undef) called at /usr/share/perl5/HTML/Mason/Request.pm line 483 eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 483 eval {...} called at /usr/share/perl5/HTML/Mason/Request.pm line 433 HTML::Mason::Request::exec(\'HTML::Mason::Request=HASH(0xbae14130)\') called at /usr/share/perl5/HTML/Mason/Interp.pm line 342 HTML::Mason::Interp::exec(undef, undef, \'model\', \'EBox::UsersAndGroups::Composite::Settings=HASH(0xbb367d98)\', \'hasChanged\', undef) called at /usr/share/perl5/EBox/CGI/Base.pm line 148 EBox::CGI::Base::_body(\'EBox::CGI::View::Composite=HASH(0xb9156530)\') called at /usr/share/perl5/EBox/CGI/Base.pm line 192 EBox::CGI::Base::_print(\'EBox::CGI::View::Composite=HASH(0xb9156530)\') called at /usr/share/perl5/EBox/CGI/Base.pm line 348 EBox::CGI::Base::run(\'EBox::CGI::View::Composite=HASH(0xb9156530)\') called at /usr/share/perl5/EBox/CGI/Run.pm line 129 EBox::CGI::Run::run(\'EBox::CGI::Run\', \'Users/Composite/Settings?\', \'EBox\') called at /usr/share/zentyal/cgi/ebox.cgi line 34 ModPerl::ROOT::ModPerl::Registry::usr_share_zentyal_cgi_ebox_2ecgi::handler(\'Apache2::RequestRec?=SCALAR(0xb90b4d38)\') called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 204 eval {...} called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 204 ModPerl::RegistryCooker::run(\'ModPerl::Registry=HASH(0xb91175c8)\') called at /usr/lib/perl5/ModPerl/RegistryCooker.pm line 170 ModPerl::RegistryCooker::default_handler(\'ModPerl::Registry=HASH(0xb91175c8)\') called at /usr/lib/perl5/ModPerl/Registry.pm line 31 ModPerl::Registry::handler(\'ModPerl::Registry\', \'Apache2::RequestRec?=SCALAR(0xb90b4d38)\') called at -e line 0 eval {...} called at -e line 0

',

'-file' => '/usr/share/perl5/EBox/Ldap.pm', '-text' => 'FATAL: Couldn\'t connect to LDAP server: ldapi://%2fvar%2frun%2fslapd%2fldapi', '-line' => 1107, '-package' => 'EBox::Ldap', 'silent' => 0

}, 'EBox::Exceptions::Internal' );

[arimanx@…]

Hi, It looks like the same bug like I had in 2.0 I waited some one to reply - when the bug is fixed -more than month I gave up. Anyway I found the fix for the issue. It should be fresh installation. Install everything you need but don't set up the slave config.

DO: Enter admin console and write " touch /etc/ldap.secret ".

It will create emtpy file ldap.secret in /etc some of the modules doesn't work correctly and the file is not created. I couldn't remmember right now but if this does not work.

OR: copy master password to /etc/ldap.secret

Hope it will help you.

good luck

[bendersky@…]

I am getting the same issue as reported. We having Direcotry Server 389 setup and I tried implement single master replication, tried set up zentyal as slave. But I am think as part of zentyal improvements for entreprise might be implementation of Directory Server 389 will very good tool for user management.

2011/10/07 12:37:18 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying
2011/10/07 12:37:19 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying
2011/10/07 12:37:20 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying
2011/10/07 12:37:21 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying
2011/10/07 12:37:22 ERROR> Ldap.pm:1107 EBox::Ldap::safeConnect - FATAL: Couldn't connect to LDAP server: ldapi://%2fvar%2frun%2fslapd%2fldapi
2011/10/07 12:37:35 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying
2011/10/07 12:37:36 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying
2011/10/07 12:37:38 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying
2011/10/07 12:37:39 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying
2011/10/07 12:37:40 ERROR> Ldap.pm:1107 EBox::Ldap::safeConnect - FATAL: Couldn't connect to LDAP server: ldapi://%2fvar%2frun%2fslapd%2fldapi

[arimanx@…]

Hi, Did you try to create the "/etc/ldap.secret", before you install set up and activate "user and group" module? I tried it: 1- Start new installation

2. When first time Zentyal graphics loads it asks what to install

skip install.

3. if you want do system update from the menu and maybe restart.
4. open administration console and enter:

"touch /etc/ldap.secret"

then login to Zentyal admin page select installation packagest one by one. Choose only "user and groups" install it.

5. Set it up as slave
6. Activate the module.

If you are using Zentyal as master - don't forget to allow ldap connection on your master ldap server. By default it is restricted. ( this is mentioned in documentation).

[bendersky@…]

I tried you suggestion and didn't work. I added ldap.secrets first and followed the all steps.

 2011/10/11 19:07:48 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying
2011/10/11 19:07:50 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying
2011/10/11 19:07:51 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying
2011/10/11 19:07:52 ERROR> Ldap.pm:1103 EBox::Ldap::safeConnect - Couldn't connect to LDAP server ldapi://%2fvar%2frun%2fslapd%2fldapi, retrying
2011/10/11 19:07:53 ERROR> Ldap.pm:1107 EBox::Ldap::safeConnect - FATAL: Couldn't connect to LDAP server: ldapi://%2fvar%2frun%2fslapd%2fldapi

[jacalvo@…]

(In [23395]) NN: Bugfix: Avoid url rewrite to ebox.cgi when requesting to /slave (closes #3343 #3345 #3346 #3351 #3276 #3279 #3286 #3318 #3332 #3350 #3358)

[unifort@…]

Replying to jacalvo@…:

(In [23395]) NN: Bugfix: Avoid url rewrite to ebox.cgi when requesting to /slave (closes #3343 #3345 #3346 #3351 #3276 #3279 #3286 #3318 #3332 #3350 #3358)

I have got such problem, but do not see where is it resolve. And why Resolution set to fixed?

[jamor@…]

Hello Unifort,

normally the majority of tickets opened for ldap slave mode are configuration/operation problems and not bugs. They could be solved reading the documentation and asking in the forum.

If the setup is correct, the more frequent error is that the master cannot resolve the slave hostname. Make sure that the master can resolve it, either using a DNS server or via /etc/hosts files, and force a resync. (page Users and groups -> Slave status).

Also a major rewrite of this is being made for 2.3 so we hope things will be more robust and easier.

The changes discussed in this ticket have been released month ago. So please, if you have information that makes you think your problem with master/slave is a bug, create a new ticket and post it.

Regards,

Javier