[SLAPD acting weird] Locked outside - services running but permission denied to webadmin and sso

[otm33]

Could you try

# 1.
sudo /etc/init.d/slapd status
# 2. share the output
sudo /etc/init.d/slapd start
sudo /etc/init.d/slapd status
# 3. share the output

[bstn-chmpns]

root@bstn:~# sudo /etc/init.d/slapd status
sudo: ldap_sasl_bind_s(): Can't contact LDAP server
sudo: /etc/init.d/slapd: command not found

and

root@bstn:~# sudo /etc/init.d/slapd start
sudo /etc/init.d/slapd status
sudo: ldap_sasl_bind_s(): Can't contact LDAP server
sudo: /etc/init.d/slapd: command not found
sudo: ldap_sasl_bind_s(): Can't contact LDAP server
sudo: /etc/init.d/slapd: command not found

[otm33]

This is definitely weird…

sudo find / -name 'slapd'

[bstn-chmpns]

@otm33

sudo find / -name 'slapd'

sudo: ldap_sasl_bind_s(): Can't contact LDAP server
/usr/share/lintian/overrides/slapd
/usr/share/yunohost/conf/slapd
/usr/share/doc/slapd
/usr/share/slapd
/usr/sbin/slapd
/usr/lib/python3/dist-packages/fail2ban/tests/files/logs/slapd
/lost+found/#5683671/????B.?? ..?y??.?...?+?.....|?8.????D.?? ..????.?...v+?.....p?/slapd
/etc/default/slapd

[bstn-chmpns]

Wondering if something like this could help…

SLAPD can not start

Sounds like there’s already something using slapd’s port on the system … Not sure how this happened … Possibly we can try to check what process with netstat -tulpn | grep 389 Also maybe that’s another slapd service for some reason, so maybe let’s try to pkill slapd then attempt to re-restart the service : systemctl restart slapd

[otm33]

Yes, it could. Have you tried ?

[bstn-chmpns]

Yes, and … failed

root@bstn:~# pkill slapd
root@bstn:~# systemctl restart slapd
Failed to restart slapd.service: Unit slapd.service not found.

[bstn-chmpns]

Found this but don’t know if the command is trustable?

https://stackoverflow.com/questions/54060259/failed-to-start-openldap-server-daemon

[artlog]

@bstn-chmpns

/lost+found/#5683671/????B.?? ..?y??.?...?+?.....|?8.????D.?? ..????.?...v+?.....p?/slapd

this look like slapd is in lost+found, corrupted files ?

on my system

root@redacted:~# sudo find / -name 'slapd'
/var/cache/yunohost/regenconf/pending/slapd
/mnt/oldroot/var/cache/yunohost/regenconf/pending/slapd
/usr/lib/python3/dist-packages/fail2ban/tests/files/logs/slapd
/usr/share/slapd
/usr/share/lintian/overrides/slapd
/usr/share/yunohost/conf/slapd
/usr/share/doc/slapd
/usr/sbin/slapd
/run/slapd
/etc/default/slapd
/etc/init.d/slapd

[artlog]

What does return file /usr/sbin/slapd ?

[artlog]

@bstn-chmpns

root@bstn:~# sudo /etc/init.d/slapd status
sudo: ldap_sasl_bind_s(): Can't contact LDAP server

Avoid use of sudo then, since it look like it rely on ldap.

Since you are root, just run command directly without sudo and see what happens.

[bstn-chmpns]

@artlog

file /usr/sbin/slapd

returns:

/usr/sbin/slapd: ELF 64-bit LSB pie executable, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=eade1cca50755d0131ba5a81e32620aeb480a1d9, for GNU/Linux 3.7.0, stripped

[bstn-chmpns]

@artlog When avoiding sudo I get this:

root@bstn:~# /etc/init.d/slapd status
-bash: /etc/init.d/slapd: No such file or directory
root@bstn:~# /etc/init.d/slapd start /etc/init.d/slapd status
-bash: /etc/init.d/slapd: No such file or directory

[jarod5001]

@bstn-chmpns

What YunoHost version are you running: 13.0.5

YunoHost has switched to sssd-ldap on Trixie

YunoHost 13.0 / Trixie spooky beta

Hello dear self-hosterz, and welcome to this spoooOOooooking testing Following the alpha-testing opened a few months ago, we are happy to announce that we are moving to the beta-testing stage for Trixie ! We consider that it should now be okay to upgrade to or install a fresh Yunohost 13.0+ running on Trixie for a production server if you are a tech-savvy person not afraid to debug stuff if needed. However, you sh…

So check sssd status : systemctl status sssd

[bstn-chmpns]

@jarod5001

systemctl status sssd

Unit sssd.service could not be found.

[jarod5001]

I don’t have any Trixie server for the moment, so may be it’s something else. Try pushing “tab” button after sssd (for autocomplete), may be it’s sssd-ldap.
This also can help understand apt list sssd*

[bstn-chmpns]

Nothing happens when I hit ‘tab’ after sssd

@jarod5001

apt list sssd*

Listing... Done
sssd-ad-common/oldstable 2.8.2-4+deb12u1 arm64
sssd-ad-common/oldstable 2.8.2-4+deb12u1 armhf
sssd-ad/oldstable 2.8.2-4+deb12u1 arm64
sssd-ad/oldstable 2.8.2-4+deb12u1 armhf
sssd-common/oldstable 2.8.2-4+deb12u1 arm64
sssd-common/oldstable 2.8.2-4+deb12u1 armhf
sssd-dbus/oldstable 2.8.2-4+deb12u1 arm64
sssd-dbus/oldstable 2.8.2-4+deb12u1 armhf
sssd-idp/oldstable 2.8.2-4+deb12u1 arm64
sssd-idp/oldstable 2.8.2-4+deb12u1 armhf
sssd-ipa/oldstable 2.8.2-4+deb12u1 arm64
sssd-ipa/oldstable 2.8.2-4+deb12u1 armhf
sssd-kcm/oldstable 2.8.2-4+deb12u1 arm64
sssd-kcm/oldstable 2.8.2-4+deb12u1 armhf
sssd-krb5-common/oldstable 2.8.2-4+deb12u1 arm64
sssd-krb5-common/oldstable 2.8.2-4+deb12u1 armhf
sssd-krb5/oldstable 2.8.2-4+deb12u1 arm64
sssd-krb5/oldstable 2.8.2-4+deb12u1 armhf
sssd-ldap/oldstable 2.8.2-4+deb12u1 arm64
sssd-ldap/oldstable 2.8.2-4+deb12u1 armhf
sssd-proxy/oldstable 2.8.2-4+deb12u1 arm64
sssd-proxy/oldstable 2.8.2-4+deb12u1 armhf
sssd-tools/oldstable 2.8.2-4+deb12u1 arm64
sssd-tools/oldstable 2.8.2-4+deb12u1 armhf
sssd/oldstable 2.8.2-4+deb12u1 arm64
sssd/oldstable 2.8.2-4+deb12u1 armhf

[jarod5001]

Do you have migrations pending?

[bstn-chmpns]

I know how to check migrations in the admin panel, but not in console mode

[jarod5001]

yunohost tools migrations state