Project

General

Profile

Actions
Copy link

Bug #16432

closed

slapd configuration is not correctly updated during migration from 5.0 to 6.0

Added by François ARMAND over 4 years ago. Updated about 3 years ago.

Status:
Rejected
Priority:
N/A
Assignee:
Benoît PECCATTE
Category:
System integration
Target version:
-
Pull Request:
Severity:
Critical - prevents main use of Rudder | no workaround | data loss | security
UX impact:
User visibility:
Operational - other Techniques | Rudder settings | Plugins
Effort required:
Priority:
63
Name check:
To do
Fix check:
To do
Regression:

Description

When migrating Rudder from 5.0 to 6.0 (on centos 7, but no reason it will be better elsewhere), slapd won't start anymore.

First, it complains about right access to /opt/rudder/run/slapd.pid. It's because the line about it was removed from /opt/rudder/etc/openldap/slapd.conf.

It's because we have a new /opt/rudder/etc/openldap/slapd.conf.rpmnew.

Beut then, you move /opt/rudder/etc/openldap/slapd.conf.rpmnew to /opt/rudder/etc/openldap/slapd.conf, we still have authorisation errors:

Dec 18 12:40:30 server systemd[1]: Starting Rudder OpenLDAP Server Daemon...
Dec 18 12:40:30 server rudder-slapd[11392]: @(#) $OpenLDAP: slapd 2.4.47 (Dec 15 2019 01:39:55) $
                                                    root@centos-builder-7-64:/usr/src/rudder-packages/package/SOURCES/openldap-source/servers/slapd
Dec 18 12:40:30 server rudder-slapd[11392]: could not open config file "/opt/rudder/etc/openldap/slapd.conf": Permission denied (13)
Dec 18 12:40:30 server rudder-slapd[11392]: rudder-slapd destroy: freeing system resources.
Dec 18 12:40:30 server rudder-slapd[11392]: slapd stopped.

The file exists and is readable, and I tested with "setenforce 0".

I needed to gave read rights to "others" to be able to start slapd.

Subtasks 1 (0 open — 1 closed)

Bug #16437: rudder-webapp postinst tries to stop slapd instead of preinstReleasedBenoît PECCATTEActions
Actions
Copy link

Also available in: Atom PDF