#acl PaulHowarth:read,write,admin,revert,delete All:read

=== Wednesday 3rd January 2018 ===

==== Berkeley DB Woes ====

After updating `glibc` on my Fedora 27 server this morning, my regularly-scheduled backup of my
OpenLDAP-based contacts database started failing:
{{{
# slapcat > backup.ldif
5a4ce631 bdb(dc=city-fan,dc=org): BDB1539 Build signature doesn't match environment
5a4ce631 bdb_db_open: database "dc=city-fan,dc=org" cannot be opened, err -30969. Restore from backup!
5a4ce631 backend_startup_one (type=bdb, suffix="dc=city-fan,dc=org"): bi_db_open failed! (-30969)
slap_startup failed
}}}
Although I do have backups I could restore from, it turned out not to be necessary: simply restarting `slapd` was sufficient:
{{{
# systemctl restart slapd
# systemctl status slapd
● slapd.service - OpenLDAP Server Daemon
   Loaded: loaded (/etc/systemd/system/slapd.service; enabled; vendor preset: disabled)
   Active: active (running) since Wed 2018-01-03 14:29:35 GMT; 2min 46s ago
     Docs: man:slapd
           man:slapd-config
           man:slapd-hdb
           man:slapd-mdb
           file:///usr/share/doc/openldap-servers/guide.html
  Process: 16755 ExecStart=/usr/sbin/slapd -u ldap -h ldap:/// ldaps:/// (code=exited, status=0/SUCCESS)
  Process: 16708 ExecStartPre=/usr/libexec/openldap/check-config.sh (code=exited, status=0/SUCCESS)
 Main PID: 16756 (slapd)
    Tasks: 3 (limit: 4915)
   CGroup: /system.slice/slapd.service
           └─16756 /usr/sbin/slapd -u ldap -h ldap:/// ldaps:///

Jan 03 14:29:34 goalkeeper.city-fan.org runuser[16747]: pam_unix(runuser:session): session closed for user ldap
Jan 03 14:29:34 goalkeeper.city-fan.org runuser[16749]: pam_unix(runuser:session): session opened for user ldap by (uid=0)
Jan 03 14:29:34 goalkeeper.city-fan.org runuser[16749]: pam_unix(runuser:session): session closed for user ldap
Jan 03 14:29:34 goalkeeper.city-fan.org runuser[16751]: pam_unix(runuser:session): session opened for user ldap by (uid=0)
Jan 03 14:29:34 goalkeeper.city-fan.org runuser[16751]: pam_unix(runuser:session): session closed for user ldap
Jan 03 14:29:34 goalkeeper.city-fan.org runuser[16753]: pam_unix(runuser:session): session opened for user ldap by (uid=0)
Jan 03 14:29:34 goalkeeper.city-fan.org runuser[16753]: pam_unix(runuser:session): session closed for user ldap
Jan 03 14:29:34 goalkeeper.city-fan.org slapd[16755]: @(#) $OpenLDAP: slapd 2.4.45 (Dec  6 2017 14:25:36) $
                                                              mockbuild@buildhw-08.phx2.fedoraproject.org:/builddir/build/BUILD/openldap-2.4.45/ope
Jan 03 14:29:35 goalkeeper.city-fan.org slapd[16756]: slapd starting
Jan 03 14:29:35 goalkeeper.city-fan.org systemd[1]: Started OpenLDAP Server Daemon.
# slapcat > backup.ldif
# ls -l backup.ldif
-rw-r--r--. 1 root root 667004 Jan  3 14:32 backup.ldif
}}}

----