nerdexam
CompTIA

LX0-104 · Question #148

After modifying the indexes for a database in slapd.conf - and running slapindex - the slapd daemon refuses to start when its init script is called. What is the most likely cause of this?

The correct answer is D. The init script is starting slapd as an ordinary user, and the index files are owned by root.. The slapd daemon failing to start after index modification and slapindex usually indicates a file permission issue where the slapindex command, often run as root, creates files that the slapd daemon's less privileged user cannot access.

Administrative Tasks

Question

After modifying the indexes for a database in slapd.conf - and running slapindex - the slapd daemon refuses to start when its init script is called. What is the most likely cause of this?

Options

  • AThe indexes are not compatible with the init script.
  • BThe init script cannot be run after executing slapindex, without first signing the indexes with slapsign.
  • CThe init script has identified one or more invalid indexes.
  • DThe init script is starting slapd as an ordinary user, and the index files are owned by root.

How the community answered

(47 responses)
  • A
    28% (13)
  • B
    6% (3)
  • C
    19% (9)
  • D
    47% (22)

Why each option

The `slapd` daemon failing to start after index modification and `slapindex` usually indicates a file permission issue where the `slapindex` command, often run as root, creates files that the `slapd` daemon's less privileged user cannot access.

AThe indexes are not compatible with the init script.

Index compatibility is typically handled by `slapd` itself, not an 'init script' specifically, and indexes generally conform to the database backend.

BThe init script cannot be run after executing slapindex, without first signing the indexes with slapsign.

There is no standard `slapsign` utility or requirement to 'sign' indexes for `slapd` to start; this concept is not part of OpenLDAP indexing.

CThe init script has identified one or more invalid indexes.

While invalid indexes can cause `slapd` startup issues, the `slapindex` command itself usually reports errors if indexes are fundamentally invalid or malformed during its execution, making a silent failure from the init script less likely than a permissions issue.

DThe init script is starting slapd as an ordinary user, and the index files are owned by root.Correct

When `slapindex` is executed, often by a root user, it creates or modifies index files within the OpenLDAP database directory; if these new files are owned by root and lack read/write permissions for the `slapd` daemon's operating user (e.g., `ldap`), the daemon will fail to start due to insufficient permissions to access its own database.

Concept tested: OpenLDAP file permissions and daemon startup

Topics

#LDAP indexing#slapd daemon#file permissions#troubleshooting

Community Discussion

No community discussion yet for this question.

Full LX0-104 Practice