[Freeipa-devel] rawhide's ipa-server-install fails to configure directory server

[Jim Meyering]

Rob Crittenden <rcritten at redhat.com> wrote:
...
>> Configuring directory server:
>>   [1/16]: creating directory server user
>>   [2/16]: creating directory server instance
>>   [3/16]: adding default schema
>>   [4/16]: enabling memberof plugin
>> root        : CRITICAL Failed to load memberof-conf.ldif: Command
>> '/usr/bin/ldapmodify -h 127.0.0.1 -xv -D cn=Directory Manager -w xxx -f /usr/share/ipa/memberof-conf.ldif' returned non-zero exit status 49
...
>> Unexpected error - see ipaserver-install.log for details:
>>  {'desc': 'Invalid credentials'}
>
> Hmm, very strange. Can you look in
> /var/log/dirsrv/slapd-MEYERING-NET/errors to see if it has anything?

Sure.
No trace of errors or anything suspicious in that file.

> I'm not sure how this could happen. The Directory Server install
> shouldn't have happened if you already had a server running there
> (like openldap) so I'm not sure how it isn't authenticating the
> directory manager.

Unfortunately, after upgrading to latest rawhide, now it's failing
even earlier.

  2008-03-10 22:30:54,049 DEBUG   [2/16]: creating directory server instance
  2008-03-10 22:30:54,114 INFO
  2008-03-10 22:30:54,114 INFO
  2008-03-10 22:30:54,115 DEBUG Loading StateFile from \
    '/var/cache/ipa/sysrestore.state'
  ...
  2008-03-10 22:30:54,119 DEBUG calling setup-ds.pl
  2008-03-10 22:30:54,223 INFO
  2008-03-10 22:30:54,224 INFO Can't locate Mozilla/LDAP/Conn.pm in @INC (@INC contains: /usr/lib/dirsrv/perl /usr/lib/perl5/5.10.0/i386-linux-thread-multi /usr/lib/perl5/5.10.0 /usr/lib/perl5/site_perl/5.10.0/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.10.0 /usr/lib/perl5/site_perl/5.8.8 /usr/lib/perl5/site_perl/5.8.7 /usr/lib/perl5/site_perl/5.8.6 /usr/lib/perl5/site_perl/5.8.5 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.10.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.10.0 /usr/lib/perl5/vendor_perl/5.8.8 /usr/lib/perl5/vendor_perl/5.8.7 /usr/lib/perl5/vendor_perl/5.8.6 /usr/lib/perl5/vendor_perl/5.8.5 /usr/lib/perl5/vendor_perl .) at /usr/lib/dirsrv/perl/Setup.pm line 62.
  BEGIN failed--compilation aborted at /usr/lib/dirsrv/perl/Setup.pm line 62.
  Compilation failed in require at /usr/sbin/setup-ds.pl line 44.
  BEGIN failed--compilation aborted at /usr/sbin/setup-ds.pl line 44.

  2008-03-10 22:30:54,224 CRITICAL failed to restart ds instance Command '/usr/sbin/setup-ds.pl --silent --logfile - -f /dev/shm/tmpWAoNMK' returned non-zero exit status 2

The trouble is that the only Conn.pm available here is this:

  /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/Mozilla/LDAP/Conn.pm

yet, that directory is not in @INC.
When I added the required directory manually, by adding this
line to setup-ds.pl,

  use lib qw(/usr/lib/perl5/5.8.8/i386-linux-thread-multi);

it fails differently:

  2008-03-10 22:22:24,384 INFO perl: symbol lookup error: /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/Mozilla/LDAP/API/API.so: undefined symbol: Perl_Tstack_sp_ptr