Bug 481003 - Wrong init script : slapd always starts with option "ldap:///"
Summary: Wrong init script : slapd always starts with option "ldap:///"
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: openldap
Version: 5.2
Hardware: All
OS: Linux
low
low
Target Milestone: ---
: ---
Assignee: Jan Zeleny
QA Contact: BaseOS QE
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-01-21 17:24 UTC by Jeremy
Modified: 2012-10-15 08:51 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-03-30 08:05:49 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2010:0198 0 normal SHIPPED_LIVE Moderate: openldap security and bug fix update 2010-03-29 13:22:42 UTC

Description Jeremy 2009-01-21 17:24:09 UTC
Description of problem:
slapd always starts with option ldap:/// when we use the init script.



Version-Release number of selected component (if applicable):
openldap-servers-2.3.27-8.el5_1.3

How reproducible:
Configure openldap with TLS and launch it with the init script

Steps to Reproduce:
1. activate TLS in /etc/openldap/slapd.conf
2. service ldap start
3. check with "ps -ef |grep ldap" or "netstat -puante |grep slapd"
  
Actual results:
slapd still listen on port 389 because it's launched with the following command :
/usr/sbin/slapd -h ldap:/// ldaps:/// -u ldap

Expected results:
It would only listen 636 and use "/usr/sbin/slapd -h ldaps:/// -u ldap"
Better, we should have the choice to use :
- ldap
or
- ldaps
or
- ldap & ldaps

Additional info:
The file /etc/rc.d/init.d/ldap define a variable row 146 : 
        harg="ldap:///"
The problem seems to be in the concatenation row 148 :
            harg="$harg ldaps:///"

Comment 3 Jan Zeleny 2009-11-16 09:49:42 UTC
Patch is in CVS, changing status to MODIFIED.

Comment 5 Ondrej Moriš 2010-01-12 08:50:18 UTC
Successfully verified on i386 and x86_64.

RHTS test created.

Comment 7 errata-xmlrpc 2010-03-30 08:05:49 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2010-0198.html


Note You need to log in before you can comment on or make changes to this bug.