Comments on: RHCSA Series: Setting Up LDAP-based Authentication in RHEL 7 – Part 14

By: Tomas

Tomas — Mon, 08 Oct 2018 18:53:17 +0000

This is about eighth tutorial on LDAP I have tried. Yet again, suffering by some issues – this time “ldap_bind: Invalid credentials (49)” while running query. The LDAP solution is so fragile and pain to administer. Looking at the logs – no suggestion at all that could go wrong. Considering the fact that the LDAP setup is “ten” commands and still going wrong is a joke.

By: Sriram

Sriram — Mon, 27 Aug 2018 15:39:37 +0000

Hi, I got this error

[root@mspildapsrv cn=config]# setsebool -P allow_ypbind=0 authlogin_nsswitch_use_ldap=0
[root@mspildapsrv cn=config]# systemctl enable slapd.service

Created symlink from /etc/systemd/system/multi-user.target.wants/slapd.service to /usr/lib/systemd/system/slapd.service.

[root@mspildapsrv cn=config]# systemctl start slapd.service

Job for slapd.service failed because the control process exited with error code. See "systemctl status slapd.service" and "journalctl -xe" for details.

[root@mspildapsrv cn=config]# systemctl restart slapd

Job for slapd.service failed because the control process exited with error code. See "systemctl status slapd.service" and "journalctl -xe" for details.

By: Ravi Saive

Ravi Saive — Mon, 13 Aug 2018 08:51:54 +0000

In reply to sriram.

@Sriram,

Please check your slapd.conf configuration and correct if any errors and restart the service again.

Check this thread – https://unix.stackexchange.com/questions/443528/failed-to-start-openldap-server-daemon

By: sriram

sriram — Mon, 13 Aug 2018 07:17:51 +0000

Hi, I am using CentOS 7, and getting the below error

# systemctl start slapd
Job for slapd.service failed because the control process exited with error code. 
See "systemctl status slapd.service" and "journalctl -xe" for

Please let me know what to do.

By: david1024

david1024 — Mon, 09 Jul 2018 15:52:47 +0000

I get "ldap_sasl_interactive_bind_sL Local error (-2)" when I try to "ldapadd -H ldap:/// -f ldaprootpasswd.ldif" following the recipe here. Shouldn't it be something like "ldapmodify" with EXTERNAL, etc... ? Maybe you guys should verify this stuff.