Openldap и ldapadd

Здравствуйте, comp.

Народ помогите разобрать мледующие грабли
Хочется разобраться с работой Openldap

Вообсчем собрал я енто чудо, написал конфиг

include /opt/openldap/etc/openldap/schema/core.schema
include /opt/openldap/etc/openldap/schema/cosine.schema
include /opt/openldap/etc/openldap/schema/corba.schema
#include /opt/openldap/etc/openldap/schema/inetorgperson.schema
#include /opt/openldap/etc/openldap/schema/java.schema
#include /opt/openldap/etc/openldap/schema/misc.schema
include /opt/openldap/etc/openldap/schema/nis.schema
#include /opt/openldap/etc/openldap/schema/openldap.schema
#include /opt/openldap/etc/openldap/schema/misc-mail.schema
#include /opt/openldap/etc/openldap/schema/samba.schema

pidfile /opt/openldap/var/run/slapd.pid
argsfile /opt/openldap/var/run/slapd.args

database ldbm
suffix "dc=test,dc=by"
rootdn "cn=root,dc=test,dc=by"
rootpw *****
directory /opt/openldap/var/openldap-data
index default eq
loglevel 1

access to *
by dn="uid=root,dc=test,dc=by" write
by * read

стартую сервис

# /opt/openldap/libexec/slapd -u ldap -g ldap

группа и пользователь ldap созданы

В логах следующее
Jan 27 09:35:32 jakavuk_test slapd[11770]: @(#) $OpenLDAP: slapd 2.2.20 (Jan
25 2005 13:36:38) $
^Iroot@jakavuk_test:/usr/src/openldap-2.2.20/servers/slapd
Jan 27 09:35:32 jakavuk_test slapd[11770]: daemon: IPv6 socket() failed errno=97
(Address family not supported by protocol)
Jan 27 09:35:32 jakavuk_test slapd[11770]: bdb_back_initialize: Sleepycat Software:
Berkeley DB 4.2.52: (December 3, 2003)
Янв 27 09:35:32 jakavuk_test slapd[11770]: >>> dnNormalize:<cn=root,dc=test,dc=by>
Янв 27 09:35:32 jakavuk_test slapd[11770]: <<< dnNormalize:<cn=root,dc=test,dc=by>
Янв 27 09:35:32 jakavuk_test slapd[11770]: matching_rule_use_init
Янв 27 09:35:32 jakavuk_test slapd[11770]: 1.2.840.113556.1.4.804 (integerBitOrMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 1.2.840.113556.1.4.804
NAME 'integerBitOrMatch' APPLIES ( oncRpcNumber $
ipProtocolNumber $ ipServicePort $ shadowFlag $ shadowExpire $ shadowInactive
$ shadowWarning $ shadowMax $ shadowMin $ shadowLastChange $
gidNumber $ uidNumber $ mailPreferenceOption $ supportedLDAPVersion ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 1.2.840.113556.1.4.803 (integerBitAndMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 1.2.840.113556.1.4.803
NAME 'integerBitAndMatch' APPLIES ( oncRpcNumber $
ipProtocolNumber $ ipServicePort $ shadowFlag $ shadowExpire $ shadowInactive
$ shadowWarning $ shadowMax $ shadowMin $ shadowLastChange $
gidNumber $ uidNumber $ mailPreferenceOption $ supportedLDAPVersion ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 1.3.6.1.4.1.1466.109.114.2 (caseIgnoreIA5Match):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.2
NAME 'caseIgnoreIA5Match' APPLIES ( nisMapEntry $
bootFile $ macAddress $ ipNetmaskNumber $ ipNetworkNumber $ ipHostNumber $ memberNisNetgroup
$ memberUid $ loginShell $ homeDirectory $
gecos $ corbaIor $ janetMailbox $ cNAMERecord $ sOARecord $ nSRecord $ mXRecord
$ mDRecord $ aRecord $ email $ associatedDomain $ dc $ mail
$ altServer ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 1.3.6.1.4.1.1466.109.114.1 (caseExactIA5Match):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 1.3.6.1.4.1.1466.109.114.1
NAME 'caseExactIA5Match' APPLIES ( nisMapEntry $
bootFile $ macAddress $ ipNetmaskNumber $ ipNetworkNumber $ ipHostNumber $ memberNisNetgroup
$ memberUid $ loginShell $ homeDirectory $
gecos $ corbaIor $ janetMailbox $ cNAMERecord $ sOARecord $ nSRecord $ mXRecord
$ mDRecord $ aRecord $ email $ associatedDomain $ dc $ mail
$ altServer ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.35 (certificateMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.35 NAME
'certificateMatch' APPLIES ( cACertificate $ userCertificate
) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.34 (certificateExactMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.34 NAME
'certificateExactMatch' APPLIES ( cACertificate $
userCertificate ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.30 (objectIdentifierFirstComponentMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.30 NAME
'objectIdentifierFirstComponentMatch' APPLIES (
supportedApplicationContext $ ldapSyntaxes $ supportedFeatures $ supportedExtension
$ supportedControl ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.29 (integerFirstComponentMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.29 NAME
'integerFirstComponentMatch' APPLIES ( oncRpcNumber $
ipProtocolNumber $ ipServicePort $ shadowFlag $ shadowExpire $ shadowInactive
$ shadowWarning $ shadowMax $ shadowMin $ shadowLastChange $
gidNumber $ uidNumber $ mailPreferenceOption $ supportedLDAPVersion ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.27 (generalizedTimeMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.27 NAME
'generalizedTimeMatch' APPLIES ( modifyTimestamp $
createTimestamp ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.24 (protocolInformationMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.24 NAME
'protocolInformationMatch' APPLIES protocolInformation )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.23 (uniqueMemberMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.23 NAME
'uniqueMemberMatch' APPLIES uniqueMember )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.22 (presentationAddressMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.22 NAME
'presentationAddressMatch' APPLIES presentationAddress )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.20 (telephoneNumberMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.20 NAME
'telephoneNumberMatch' APPLIES ( pager $ mobile $ homePhone $
telephoneNumber ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.17 (octetStringMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.17 NAME
'octetStringMatch' APPLIES userPassword )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.16 (bitStringMatch):
Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.16 NAME
'bitStringMatch' APPLIES x500UniqueIdentifier )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.14 (integerMatch):
Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.14 NAME
'integerMatch' APPLIES ( oncRpcNumber $ ipProtocolNumber $
ipServicePort $ shadowFlag $ shadowExpire $ shadowInactive $ shadowWarning $
shadowMax $ shadowMin $ shadowLastChange $ gidNumber $
uidNumber $ mailPreferenceOption $ supportedLDAPVersion ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.13 (booleanMatch):
Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.13 NAME
'booleanMatch' APPLIES hasSubordinates )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.11 (caseIgnoreListMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.11 NAME
'caseIgnoreListMatch' APPLIES ( homePostalAddress $
registeredAddress $ postalAddress ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.8 (numericStringMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.8 NAME 'numericStringMatch'
APPLIES ( internationaliSDNNumber $
x121Address ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.7 (caseExactSubstringsMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.7 NAME 'caseExactSubstringsMatch'
APPLIES ( dnQualifier $
destinationIndicator $ serialNumber ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.6 (caseExactOrderingMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.6 NAME 'caseExactOrderingMatch'
APPLIES ( dnQualifier $
destinationIndicator $ serialNumber ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.5 (caseExactMatch):
Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.5 NAME 'caseExactMatch'
APPLIES ( nisMapName $ ipServiceProtocol $
corbaRepositoryId $ documentPublisher $ buildingName $ organizationalStatus $
uniqueIdentifier $ co $ personalTitle $ documentLocation $
documentVersion $ documentTitle $ documentIdentifier $ host $ userClass $ roomNumber
$ drink $ info $ textEncodedORAddress $ uid $ dmdName
$ houseIdentifier $ dnQualifier $ generationQualifier $ initials $ givenName
$ destinationIndicator $ physicalDeliveryOfficeName $
postOfficeBox $ postalCode $ businessCategory $ description $ title $ ou $ o
$ street $ st $ l $ c $ serialNumber $ sn $
knowledgeInformation $ labeledURI $ cn $ name $ ref $ vendorVersion $ vendorName
$ supportedSASLMechanisms ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.4 (caseIgnoreSubstringsMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.4 NAME 'caseIgnoreSubstringsMatch'
APPLIES ( dnQualifier $
destinationIndicator $ serialNumber ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.3 (caseIgnoreOrderingMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.3 NAME 'caseIgnoreOrderingMatch'
APPLIES ( dnQualifier $
destinationIndicator $ serialNumber ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.2 (caseIgnoreMatch):
Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.2 NAME 'caseIgnoreMatch'
APPLIES ( nisMapName $ ipServiceProtocol $
corbaRepositoryId $ documentPublisher $ buildingName $ organizationalStatus $
uniqueIdentifier $ co $ personalTitle $ documentLocation $
documentVersion $ documentTitle $ documentIdentifier $ host $ userClass $ roomNumber
$ drink $ info $ textEncodedORAddress $ uid $ dmdName
$ houseIdentifier $ dnQualifier $ generationQualifier $ initials $ givenName
$ destinationIndicator $ physicalDeliveryOfficeName $
postOfficeBox $ postalCode $ businessCategory $ description $ title $ ou $ o
$ street $ st $ l $ c $ serialNumber $ sn $
knowledgeInformation $ labeledURI $ cn $ name $ ref $ vendorVersion $ vendorName
$ supportedSASLMechanisms ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.1 (distinguishedNameMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.1 NAME 'distinguishedNameMatch'
APPLIES ( dITRedirect $
associatedName $ secretary $ documentAuthor $ manager $ seeAlso $ roleOccupant
$ owner $ member $ distinguishedName $ aliasedObjectName $
namingContexts $ subschemaSubentry $ modifiersName $ creatorsName ) )
Янв 27 09:35:32 jakavuk_test slapd[11770]: 2.5.13.0 (objectIdentifierMatch):

Янв 27 09:35:32 jakavuk_test slapd[11770]: matchingRuleUse: ( 2.5.13.0 NAME 'objectIdentifierMatch'
APPLIES ( supportedApplicationContext
$ supportedFeatures $ supportedExtension $ supportedControl ) )
Янв 27 09:35:32 jakavuk_test slapd[11773]: slapd startup: initiated.
Янв 27 09:35:32 jakavuk_test slapd[11773]: backend_startup: starting "dc=test,dc=by"
Янв 27 09:35:33 jakavuk_test slapd[11773]: slapd starting

Далее пытаюсь создать базу из следующего ldif файла
-- init.ldif -- begin --
dn: dc=test,dc=by
objectclass: dcObject
objectclass: organization
dc: example
o: LDAP Mail system Inc.
description: Experimental LDAP

dn: cn=admin,dc=test,dc=by
objectclass: organizationalRole
cn: admin
--end --

делаю это так
# ldapadd -x -D "cn=root,dc=test,dc=by" -W -f /opt/openldap/etc/openldap/init.ldif
Enter LDAP Password:
ldapadd: no attributes to change or add (entry="dc=test,dc=by
objectclass: dcObject objectclass: organization dc: test o:LDAP Mail
system Inc. description: Experimental LDAP1" )

Вот что в Логах по поводу поиска

Янв 27 09:35:53 jakavuk_test slapd[11775]: connection_get(9): got connid=0
Янв 27 09:35:53 jakavuk_test slapd[11775]: connection_read(9): checking for input
on id=0
Янв 27 09:35:53 jakavuk_test slapd[11775]: ber_get_next on fd 9 failed errno=11
(Resource temporarily unavailable)
Янв 27 09:35:53 jakavuk_test slapd[11779]: do_bind
Янв 27 09:35:53 jakavuk_test slapd[11779]: >>> dnPrettyNormal: <cn=root,dc=test,dc=by>
Янв 27 09:35:53 jakavuk_test slapd[11779]: <<< dnPrettyNormal: <cn=root,dc=test,dc=by>,
<cn=root,dc=test,dc=by>
Янв 27 09:35:53 jakavuk_test slapd[11779]: do_bind: version=3 dn="cn=root,dc=test,dc=by"
method=128
Янв 27 09:35:53 jakavuk_test slapd[11779]: do_bind: v3 bind: "cn=root,dc=test,dc=by"
to "cn=root,dc=test,dc=by"
Янв 27 09:35:53 jakavuk_test slapd[11779]: send_ldap_result: conn=0 op=0 p=3

Янв 27 09:35:53 jakavuk_test slapd[11779]: send_ldap_response: msgid=1 tag=97
err=0
Янв 27 09:35:53 jakavuk_test slapd[11775]: connection_get(9): got connid=0
Янв 27 09:35:53 jakavuk_test slapd[11775]: connection_read(9): checking for input
on id=0
Янв 27 09:35:53 jakavuk_test slapd[11775]: ber_get_next on fd 9 failed errno=0
(Success)
Янв 27 09:35:53 jakavuk_test slapd[11775]: connection_read(9): input error=-2
id=0, closing.
Янв 27 09:35:53 jakavuk_test slapd[11775]: connection_closing: readying conn=0
sd=9 for close
Янв 27 09:35:53 jakavuk_test slapd[11775]: connection_close: deferring conn=0
sd=9
Янв 27 09:35:53 jakavuk_test slapd[11779]: do_unbind
Янв 27 09:35:53 jakavuk_test slapd[11779]: connection_resched: attempting closing
conn=0 sd=9
Янв 27 09:35:53 jakavuk_test slapd[11779]: connection_close: conn=0 sd=9

Когда пытаюсь поиск сделать в базе след образом
# lpadsearch -x -b "dc=test.dc=by" "(objectclass=*)"
# extended LDIF
#
# LDAPv3
# base <dc=test,dc=by> with scope sub
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 32 No such object

# numResponces: 1
в логах по этому поводу

Янв 27 09:44:55 jakavuk_test slapd[11775]: connection_get(9): got connid=1
Янв 27 09:44:55 jakavuk_test slapd[11775]: connection_read(9): checking for input
on id=1
Янв 27 09:44:55 jakavuk_test slapd[11779]: do_bind
Янв 27 09:44:55 jakavuk_test slapd[11775]: ber_get_next on fd 9 failed errno=11
(Resource temporarily unavailable)
Янв 27 09:44:55 jakavuk_test slapd[11779]: >>> dnPrettyNormal: <>
Янв 27 09:44:55 jakavuk_test slapd[11779]: <<< dnPrettyNormal: <>, <>
Янв 27 09:44:55 jakavuk_test slapd[11779]: do_bind: version=3 dn="" method=128

Янв 27 09:44:55 jakavuk_test slapd[11779]: send_ldap_result: conn=1 op=0 p=3

Янв 27 09:44:55 jakavuk_test slapd[11779]: send_ldap_response: msgid=1 tag=97
err=0
Янв 27 09:44:55 jakavuk_test slapd[11779]: do_bind: v3 anonymous bind
Янв 27 09:44:55 jakavuk_test slapd[11775]: connection_get(9): got connid=1
Янв 27 09:44:55 jakavuk_test slapd[11775]: connection_read(9): checking for input
on id=1
Янв 27 09:44:55 jakavuk_test slapd[11779]: do_search
Янв 27 09:44:55 jakavuk_test slapd[11779]: >>> dnPrettyNormal: <dc=test,dc=by>
Янв 27 09:44:55 jakavuk_test slapd[11779]: <<< dnPrettyNormal: <dc=test,dc=by>,
<dc=summit,dc=by>
Янв 27 09:44:55 jakavuk_test slapd[11779]: ==> limits_get: conn=1 op=1 dn="[anonymous]"

Янв 27 09:44:55 jakavuk_test slapd[11779]: => ldbm_back_search
Янв 27 09:44:55 jakavuk_test slapd[11779]: dn2entry_r: dn: "dc=test,dc=by"
Янв 27 09:44:55 jakavuk_test slapd[11779]: => dn2id( "dc=test,dc=by" )
Янв 27 09:44:55 jakavuk_test slapd[11779]: => ldbm_cache_open( "dn2id.dbb", 73,
600 )
Янв 27 09:44:55 jakavuk_test slapd[11775]: ber_get_next on fd 9 failed errno=11
(Resource temporarily unavailable)
Янв 27 09:44:55 jakavuk_test slapd[11779]: <= ldbm_cache_open (opened 0)
Янв 27 09:44:55 jakavuk_test slapd[11779]: <= dn2id NOID
Янв 27 09:44:55 jakavuk_test slapd[11779]: send_ldap_result: conn=1 op=1 p=3

Янв 27 09:44:55 jakavuk_test slapd[11779]: send_ldap_response: msgid=2 tag=101
err=32
Янв 27 09:44:56 jakavuk_test slapd[11775]: connection_get(9): got connid=1
Янв 27 09:44:56 jakavuk_test slapd[11775]: connection_read(9): checking for input
on id=1
Янв 27 09:44:56 jakavuk_test slapd[11775]: ber_get_next on fd 9 failed errno=0
(Success)
Янв 27 09:44:56 jakavuk_test slapd[11775]: connection_read(9): input error=-2
id=1, closing.
Янв 27 09:44:56 jakavuk_test slapd[11775]: connection_closing: readying conn=1
sd=9 for close
Янв 27 09:44:56 jakavuk_test slapd[11779]: do_unbind
Янв 27 09:44:56 jakavuk_test slapd[11775]: connection_close: deferring conn=1
sd=9
Янв 27 09:44:56 jakavuk_test slapd[11779]: connection_resched: attempting closing
conn=1 sd=9
Янв 27 09:44:56 jakavuk_test slapd[11779]: connection_close: conn=1 sd=9

Буду очень признателен если уважаемый ALL наставит на путь истинный