<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>Hi,</div>
<div><br>
</div>
<div>I cannot get devstack + ldap working. I've tried on Ubuntu and CentOS vms and in both cases I get a similar error:</div>
<div>
<div><br>
</div>
<div>In Ubuntu:</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>+ ldapdelete -x -w test -D cn=Manager,dc=openstack,dc=org -H ldap://localhost -r dc=openstack,dc=org</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>ldap_search: No such object (32)</div>
</div>
<div><br>
</div>
<div>In CentOS, it's a bit more verbose, but still results in an ldap No such object (32) error:</div>
<div>
<blockquote style="margin:0 0 0 40px; border:none; padding:0px;">
<div>+ local infile=/home/vagrant/devstack/files/ldap/manager.ldif.in</div>
<div>+ sed -e '</div>
<div> s|${LDAP_OLCDB_NUMBER}|2|</div>
<div> s|${SLAPPASS}|{SSHA}ub5DT7KsuOe/t9bZM2R2xcwV3bD9DEnI|</div>
<div> s|${LDAP_ROOTPW_COMMAND}|add|</div>
<div> s|${BASE_DC}|openstack|</div>
<div> s|${BASE_DN}|dc=openstack,dc=org|</div>
<div> s|${MANAGER_DN}|cn=Manager,dc=openstack,dc=org|</div>
<div> ' /home/vagrant/devstack/files/ldap/manager.ldif.in</div>
<div>+ sudo ldapmodify -Y EXTERNAL -H ldapi:/// -f /tmp/ldap.19515.OLAEpAafC9/manager.ldif</div>
<div>SASL/EXTERNAL authentication started</div>
<div>SASL username: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth</div>
<div>SASL SSF: 0</div>
<div>modifying entry "olcDatabase={2}hdb,cn=config"</div>
<div>ldap_modify: No such object (32)</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>matched DN: cn=config</div>
</blockquote>
</div>
<div><br>
</div>
<div><br>
</div>
<div>My very simple localrc looks like this:</div>
<div>
<div>ENABLED_SERVICES=key,n-api,n-crt,n-obj,n-cpu,n-net,n-cond,cinder,c-sch,c-api,c-vol,n-sch,n-novnc,n-xvnc,n-cauth,horizon,mysql,rabbit,ldap</div>
<div>KEYSTONE_IDENTITY_BACKEND=ldap</div>
<div>KEYSTONE_CLEAR_LDAP=yes</div>
</div>
<div>
<div>DATABASE_PASSWORD=test</div>
<div>RABBIT_PASSWORD=test</div>
<div>SERVICE_TOKEN=test</div>
<div>SERVICE_PASSWORD=test</div>
<div>ADMIN_PASSWORD=test</div>
<div>LDAP_PASSWORD=test</div>
</div>
<div><br>
</div>
<div>Anyone have any ideas?</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>/Craig J</div>
</body>
</html>