Your message dated Tue, 25 Aug 2026 01:18:49 +0000
with message-id <[email protected]>
and subject line Bug#1144741: fixed in openldap 2.6.14+dfsg-2
has caused the Debian Bug report #1144741,
regarding slapd: /var/lib/ldap is not created when slapd/no_configuration is set
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1144741: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1144741
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: slapd
Version: 2.6.14+dfsg-1
Severity: important
Tags: patch
slapd: /var/lib/ldap is not created when slapd/no_configuration is set
When slapd is installed with “slapd/no_configuration=true” (manual
configuration, as done e.g. by the Debian Edu installer for the main server
Tjener), /var/lib/ldap is no longer created since openldap 2.6.13+dfsg-1,
breaking slapadd, slapd itself and the Debian Edu tjener LDAP bootstrap.
Since 2.6.13+dfsg-1 the openldap user is created via systemd-sysusers
(debian/slapd.sysusers) instead of adduser.
The previous code ran |# adduser --system --home /var/lib/ldap --shell
/bin/false ...| which creates the home directory as a side effect.
systemd-sysusers only sets the home directory field in the user database and
does not create the directory.
The postinst only creates /var/lib/ldap via create_ldap_directories() in the
initial debconf-driven configuration path, which is skipped when manual
configuration is requested.
Nothing creates the directory then, so slapadd fails with “mdb_open: cannot
open database directory /var/lib/ldap” and the Debian Edu Tjener LDAP bootstrap
aborts during installation.
How to reproduce
1.
|# debootstrap forky ./tmp-forky-bootstrap http://deb.debian.org/debian|
2.
|# chroot ./tmp-forky-bootstrap /bin/bash|
3.
Preseed:
|# echo "slapd slapd/no_configuration boolean true" | debconf-set-selections|
(the full main-server preseed is in debian-edu-install package at
preseed-values/defaults.main-server)
4.
|# DEBIAN_FRONTEND=noninteractive apt-get install -y slapd|
5.
|# ls -ld /var/lib/ldap| # -> No such file or directory
With 2.6.10+dfsg-1 (trixie) the directory exists after installation (created by
adduser), so this is a regression introduced by 2.6.13+dfsg-1.
--
Daniel Teichmann
DAS-NETZWERKTEAM
Telefon: 0176 322 774 51
GnuPG Key ID: ED9F2F7A36E0D99349CC1940B500EFC78100A778
[email protected],https://das-netzwerkteam.de
​
From: Daniel Teichmann <[email protected]>
Date: Tue, 18 Aug 2026 14:35:28 +0200
Subject: [PATCH] Ensure /var/lib/ldap is created even with manual
configuration
Since 2.6.13+dfsg-1 the openldap user is created via systemd-sysusers,
which only sets the home directory field in the user database but does
not create the directory, unlike the adduser call it replaced. When
slapd/no_configuration is set (manual configuration, as done by Debian
Edu), create_ldap_directories was never reached, so /var/lib/ldap was
not created, breaking slapadd and the Debian Edu tjener LDAP bootstrap.
Create the directory unconditionally in postinst.
---
debian/slapd.postinst | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/debian/slapd.postinst b/debian/slapd.postinst
index 764a80f1c..f15ccc730 100644
--- a/debian/slapd.postinst
+++ b/debian/slapd.postinst
@@ -60,6 +60,12 @@ ignore_init_failure() { # {{{
# Create the openldap user/group early, before chown calls below.
if [ "$MODE" = "configure" ] || [ "$MODE" = "reconfigure" ] ; then
systemd-sysusers ${DPKG_ROOT:+--root="$DPKG_ROOT"} slapd.conf
+ # systemd-sysusers only sets the home directory field in the user
+ # database, it does not create the home directory itself.
+ # Create it unconditionally since it is required even when
+ # slapd/no_configuration is set (manual configuration, e.g. by
+ # Debian Edu)
+ create_ldap_directories
fi
# Initialize the FAILED_TO_UPGRADE_CONFIGURATION variable to 0. This
--- End Message ---
--- Begin Message ---
Source: openldap
Source-Version: 2.6.14+dfsg-2
Done: Ryan Tandy <[email protected]>
We believe that the bug you reported is fixed in the latest version of
openldap, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ryan Tandy <[email protected]> (supplier of updated openldap package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 24 Aug 2026 17:46:58 -0700
Source: openldap
Architecture: source
Version: 2.6.14+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenLDAP Maintainers
<[email protected]>
Changed-By: Ryan Tandy <[email protected]>
Closes: 1144741
Changes:
openldap (2.6.14+dfsg-2) unstable; urgency=medium
.
* Create /var/lib/ldap when slapd is first installed, even if
slapd/no_configuration is set. (Closes: #1144741)
Checksums-Sha1:
6d087fd28a662711d65dc5bbbbc42c93a586ee82 3413 openldap_2.6.14+dfsg-2.dsc
4fb2d1c102f87c4a2e1d877a3ff146eef0e6f782 175912
openldap_2.6.14+dfsg-2.debian.tar.xz
Checksums-Sha256:
3d110ed9ef9110c297e475f9b01f54c9703d375fd2767935717e72f2d241ac40 3413
openldap_2.6.14+dfsg-2.dsc
b4c0a5f29516ffba66553f53b9b3fb62253a2b79c7f5dbcc44c5ec34303ae610 175912
openldap_2.6.14+dfsg-2.debian.tar.xz
Files:
89fe6afae1b2ae704919f8d21afd47f7 3413 net optional openldap_2.6.14+dfsg-2.dsc
6d34e97e0dc6fbe1aedab18aeff69e77 175912 net optional
openldap_2.6.14+dfsg-2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=xcUK
-----END PGP SIGNATURE-----
pgpvnQJ_Gec6m.pgp
Description: PGP signature
--- End Message ---
