Re: LDAP on AIX - the continuing tragedy...

On Feb 15, 10:44 pm, "Hajo Ehlers" <serv...@xxxxxxxxxxxxx> wrote:
Have you read tech note:
Technote (FAQ)
On UNIX systems you cannot configure the database in a location other
than /home when /home is an NFS mount

Problem
Steps to manually configure the database in a location other than /
home, when /home is an NFS mount.

http://www-1.ibm.com/support/docview.wss?rs=0&dc=DB500&q1=ldap&q2=aix&q3=%2fhome&uid=swg21079155&loc=en_US&cs=utf-8&cc=us&lang=en

Well, I just tried doing it their way:

#----------------------------------------------------------------------
# STAGE THREE-A: PRE-CONFIGURING THE DATABASE - THE WAY OF THE BARE
HAND
#----------------------------------------------------------------------

/usr/ldap/db2/instance/db2icrt -u ldapdb2 ldapdb2
cp /etc/services /etc/services.PRE-LDAP
echo "ldapdb2svc 3700/tcp" >> /etc/services
echo "ldapdb2svci 3701/tcp" >> /etc/services

# SWITCH TO THE LDAPDB2 ACCOUNT HERE
su - ldapdb2

# Create the database and set its tuning parameters
db2 create db ldapdb2 on ~ldapdb2 using codeset UTF-8
db2empfa ldapdb2
db2 update db cfg for ldapdb2 using applheapsz 4096
db2 update db cfg for ldapdb2 using pckcachesz 720

# Update the database for local loopback connections
db2 update dbm cfg using SVCENAME ldapdb2svc
db2 catalog tcpip node ldapdb2n remote localhost server ldapdb2svc
db2 catalog db ldapdb2 as ldapdb2b at node ldapdb2n authentication
server
db2set DB2COMM=TCPIP

# Restart the DB2 server to enable happiness
db2stop
db2start

# Add the following to the /usr/ldap/etc/ibmslapd.conf
# At the end of the stanza that starts:
# dn: cn=Directory,cn=RDBM Backends

# mrw added these
ibm-slapdDbInstance: ldapdb2
ibm-slapdDbAlias: ldapdb2b
ibm-slapdDbUserId: ldapdb2
ibm-slapdDbName: ldapdb2
ibm-slapdDbUserPw: p@ssw0rd
ibm-slapdDbLocation: /local/data/ldap/ldapdb2
ibm-slapdSetEnv: DB2CP=1208
# End of mrw additions

Now that last line it told me to uncomment rather than add, but I
couldn't find it. I then added the administrator account to the LDAP
config as shown here:

ldapcfg \
-u 'cn=root,dc=utopia,dc=johnguest,dc=com' \
-p 'Z@rqu0n' \
-n

And tried to start ibmslapd, which failed in a slightly different way
this time:

Plugin of type DATABASE is successfully loaded from /lib/libback-
config.a.
Error code -2 from odbc string:" SQLTransact " .
Failed to initialize be_config.
Error encountered. Server starting in configuration only mode.

Mind you, previously I hadn't added ldap to the dbsysadm group, so
maybe that's worth trying. Will report on any progress.

Cheers,
Menno

.