[Fedora-directory-users] Creating backup LDAP server.

[Rich Megginson]

John Oliver wrote:
> One of the projects on my plate is to have a working backup of an
> existing fedora-ds server.  I installed fedora-ds under CentOS 5.2 and
> copied over the files that result from ns-slapd db2archive from the
> existing server to the new machine.
>
> First off, I know nothing about LDAP or fedora-ds in particular :-)
>
> After looking at the existing server and what I had after installing on
> the new server, I decided that running /usr/sbin/setup-ds-admin.pl was
> probably necessary.  I went through, answering the questions as best I
> could (and figuring that the answers would be overwritten when I
> restored the backup).  I got this:
>
> [08/07/10:10:18:52] - [Setup] Info Are you ready to set up your servers?
> [08/07/10:10:18:56] - [Setup] Info yes
> [08/07/10:10:18:56] - [Setup] Info Creating directory server . . .
> [08/07/10:10:18:59] - [Setup] Info Your new DS instance 'unix-services2'
> was suc
> cessfully created.
> [08/07/10:10:18:59] - [Setup] Info Creating the configuration directory
> server .
>  . .
> [08/07/10:10:22:08] - [Setup] Fatal Error: failed to open an LDAP
> connection to
> host 'unix-services2.my.domain.com.com' port '389' as user
> 'cn=Directory Ma
> nager'.  Error: unknown.
> [08/07/10:10:22:08] - [Setup] Fatal Failed to create the configuration
> directory
>  server
> [08/07/10:10:22:08] - [Setup] Fatal Exiting . . .
> Log file is '/tmp/setupVSpvCl.log
>
>
> Yes, that's two ".com"s  No idea why.
>   
Check /etc/hosts, /etc/nsswitch.conf, and /etc/resolv.conf, and check 
that against what you typed in as your hostname and what DNS resolves it to.
> So, I stop the dirsrv process and try:
>
> [root at localhost ~]# ns-slapd archive2db -D
> /etc/dirsrv/slapd-unix-services2 -a
> /var/lib/dirsrv/slapd-unix-services2/in
> [10/Jul/2008:11:05:39 -0700] - ERROR: target server has no NetscapeRoot
> configured
> [10/Jul/2008:11:05:39 -0700] - archive2db: Failed to read backup file
> set. Either the directory specified doesn't exist, or it exists but
> doesn't contain a valid backup set, or file permissions prevent the
> server reading the backup set.  error=53 (Invalid request descriptor)
>   
Don't use ns-slapd archive2db directly - use the scripts in 
/usr/lib/dirsrv/slapd-instance (db2bak, bak2db, etc.) instead.
>
> I have no idea what a NetscapeRoot is, why I would want one, or how I'd
> get it.  Googling didn't help me... I found many references to "-0
> netscaperoot", but that seems to be in reference to
> /etc/dirsrv/admin-serv/adm.conf which does not exist on my new server.
>
> What is the easiest way for me to do this?  Can I simply copy adm.conf
> (and other files? Which ones?) from the existing server?  Or is there
> some mysterious problem about why the setup script couldn't contact the
> LDAP server which is to blame?
>
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3258 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20080710/639d2264/attachment.bin>