1,106
edits
FeministWiki:Server setup: Difference between revisions
→Copy over LDAP databases
Technician (talk | contribs) |
Technician (talk | contribs) |
||
| Line 154: | Line 154: | ||
slapcat -n 0 | ssh feministwiki.dev 'sudo -u openldap slapadd -n 0 -F /etc/ldap/slapd.d' | slapcat -n 0 | ssh feministwiki.dev 'sudo -u openldap slapadd -n 0 -F /etc/ldap/slapd.d' | ||
slapcat -n 1 | ssh feministwiki.dev 'sudo -u openldap slapadd -n 1' | slapcat -n 1 | ssh feministwiki.dev 'sudo -u openldap slapadd -n 1' | ||
Note: | |||
'''There might be incompatible changes between OpenLDAP (aka <code>slapd</code>) versions which require manual editing of the <code>slapcat</code> output before it's read in on the new server with <code>slapadd</code>.''' | |||
Here's one example that occurs when updating from OpenLDAP 2.4.42 or earlier to 2.4.43 or later: the ppolicy overlay has a new attribute in the newer version, so if you simply run the commands above, the first one (the one that copies the config database) will produce the following error message: | |||
User Schema load failed for attribute "pwdMaxRecordedFailure". Error code 17: attribute type undefined | |||
The solution is as follows: | |||
# On the new server, open <code>/etc/ldap/schema/ppolicy.ldif</code> and search for <code>pwdMaxRecordedFailure</code>. You will note that there is a <code>olcAttributeTypes: ...</code> entry that defines it, and also it's listed in the <code>MAY</code> attributes block of the <code>olcObjectClasses: ...</code> entry that defines the <code>pwdPolicy</code> object class. | |||
# On the old server, save the output of <code>slapcat -n 0</code> to a file, open the file, and search for the block where the <code>ppolicy</code> schema is defined. It should start with the line <code>dn: cn={4}ppolicy,cn=schema,cn=config</code> (the "{4}" might contain a different integer). There, note that the <code>olcAttributeTypes: ...</code> entry for <code>pwdMaxRecordedFailure</code> is missing, and also it's not listed in the <code>MAY</code> list of the <code>pwdPolicy</code> object class definition. Copy over the attribute type definition from the <code>ppolicy.ldif</code> file on the new server, and amend the <code>MAY</code> list to include it. | |||
The above is explained only for instructive purposes, since this particular fix will already have been applied by the time someone reads this guide. It's meant to give you an idea as to how backwards incompatible changes in OpenLDAP schema files can be amended when migrating to a newer version. | |||
=== Copy over SQL databases === | === Copy over SQL databases === | ||