[LDAP] CentOS7安装OpenLDAP后启动报错解决

末蓝、 2022-03-29 11:56 1609阅读 0赞

### **问题** ###

CentOS7.3下yum在线安装的openldap-servers-2.4.44-20.el7.x86\_64，安装配置完成后启动报错，报错日志：

[root@openldap ~]# systemctl start slapd
    Job for slapd.service failed because the control process exited with error code. See "systemctl status slapd.service" and "journalctl -xe" for details.
    [root@openldap ~]# journalctl -xe
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    -- 
    -- Unit slapd.service has begun starting up.
    Jan 08 16:03:15 openldap runuser[20991]: pam_unix(runuser:session): session opened for user ldap by (uid=0)
    Jan 08 16:03:15 openldap runuser[20991]: pam_unix(runuser:session): session closed for user ldap
    Jan 08 16:03:15 openldap slapd[21002]: @(#) $OpenLDAP: slapd 2.4.44 (Oct 30 2018 23:14:27) $
                                                   mockbuild@x86-01.bsys.centos.org:/builddir/build/BUILD/openldap-2.4.44/openldap-2.4.44
    Jan 08 16:03:15 openldap slapd[21002]: ldif_read_file: checksum error on "/etc/openldap/slapd.d/cn=config/olcDatabase={1}monitor.ldif
    Jan 08 16:03:15 openldap slapd[21002]: ldif_read_file: checksum error on "/etc/openldap/slapd.d/cn=config/olcDatabase={2}hdb.ldif"
    Jan 08 16:03:15 openldap slapd[21002]: tlsmc_cert_create_hash_symlink: ERROR: OS error: Permission denied
    Jan 08 16:03:15 openldap slapd[21002]: main: TLS init def ctx failed: -1
    Jan 08 16:03:15 openldap slapd[21002]: slapd stopped.
    Jan 08 16:03:15 openldap slapd[21002]: connections_destroy: nothing to destroy.
    Jan 08 16:03:15 openldap systemd[1]: slapd.service: control process exited, code=exited status=1
    Jan 08 16:03:15 openldap systemd[1]: Failed to start OpenLDAP Server Daemon.
    -- Subject: Unit slapd.service has failed
    -- Defined-By: systemd
    -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
    -- 
    -- Unit slapd.service has failed.
    -- 
    -- The result is failed.
    Jan 08 16:03:15 openldap systemd[1]: Unit slapd.service entered failed state.
    Jan 08 16:03:15 openldap systemd[1]: slapd.service failed.
    Jan 08 16:03:15 openldap polkitd[778]: Unregistered Authentication Agent for unix-process:20982:1499293 (system bus name :1.187, obje
    lines 3729-3753/3753 (END)

### **解决** ###

关闭SELinux

[root@openldap ~]# vi /etc/selinux/config 
    SELINUX=disabled

修改配置后重启机器。

再次启动OpenLDAP，启动成功。

[root@openldap ~]# systemctl start slapd
    [root@openldap ~]# systemctl is-active slapd
    active
    [root@openldap ~]#