ClearFoundation Tracker - ClearOS
View Issue Details
0008881ClearOSapp-configuration-backup - Configuration Backuppublic2016-05-25 11:472016-05-26 13:30
bchambers 
 
normalminorsometimes
closedno change required 
7.2.0 
 
0008881: LDAP permissions issue
On a v6 to v7 restore, slapd daemon wouldn't start.

Permissions looked like this:

[root@gateway openldap]# ls -l
total 24
drwxr-xr-x. 2 1000 1000 35 May 26 01:38 cacerts
drwxr-xr-x. 2 root root 77 May 26 2016 certs
-rw-r--r--. 1 root root 121 Dec 4 08:41 check_password.conf
-rw-r--r-- 1 root root 559 May 26 00:55 clearos_anonymous.conf
-rw-r--r-- 1 root root 647 May 26 00:55 clearos_password_protected.conf
-rw-r--r-- 1 1000 1000 182 May 11 2013 ldap.conf
drwxr-xr-x. 2 root root 4096 May 26 00:55 schema
-rw-r----- 1 1000 1000 3792 Aug 23 2013 slapd.conf

As soon as I chown root * and chgrp ldap slapd.conf, slapd started up fine.
No tags attached.
Issue History
2016-05-25 11:47bchambersNew Issue
2016-05-26 09:22user2Note Added: 0003301
2016-05-26 09:23user2Statusnew => feedback
2016-05-26 09:31bchambersNote Added: 0003311
2016-05-26 09:31bchambersStatusfeedback => new
2016-05-26 13:30bchambersStatusnew => closed
2016-05-26 13:30bchambersResolutionopen => no change required

Notes
(0003301)
user2   
2016-05-26 09:22   
The UID of 1000 looks suspicious. It looks like the backup file was unpacked on a non-ClearOS system, and then packed back up again. The unknown "ldap" user during unpacking was then mapped to the UID 1000 (i.e. the first account on most Linux systems).
(0003311)
bchambers   
2016-05-26 09:31   
>> It looks like the backup file was unpacked

Haha...caught red-handed...that's exactly what I did in order to remove some files I didn't want overwritten.

Could this have been avoided? (eg. is unpacking/packing possible?).