Somehow my last upgrade messed up my complete setup. Some packages were not installed completely as written in my other post. Then is realized that my Administator password was no longer valid (which I could fix) and now the LDAP server on my domain master does not start.
I read through some articles concerning LDAP not starting up, but do not really get to a point where I can nail down the underlying problem.
systemctl status slapd.service gives me:
● slapd.service - LSB: OpenLDAP standalone server (Lightweight Directory Access Protocol)
Loaded: loaded (/etc/init.d/slapd; generated; vendor preset: enabled)
Active: failed (Result: exit-code) since Wed 2019-08-14 22:13:03 CEST; 20min ago
Docs: man:systemd-sysv-generator(8)
Process: 2977 ExecStart=/etc/init.d/slapd start (code=exited, status=1/FAILURE)
CPU: 226ms
Aug 14 22:13:03 remote slapd[2989]: slapd stopped.
Aug 14 22:13:03 remote slapd[2989]: connections_destroy: nothing to destroy.
Aug 14 22:13:03 remote slapd[2977]: Starting ldap server(s): slapd ...failed.
Aug 14 22:13:03 remote slapschema[2992]: Loaded metadata from "/usr/share/univention-management-console/saml/idp/ucs-sso.FQDN.de.xml"
Aug 14 22:13:03 remote slapschema[2992]: DIGEST-MD5 common mech free
Aug 14 22:13:03 remote slapd[2977]: 5d546b4f /etc/ldap/slapd.conf: line 173: rootdn is always granted unlimited privileges..
Aug 14 22:13:03 remote systemd[1]: slapd.service: Control process exited, code=exited status=1
Aug 14 22:13:03 remote systemd[1]: Failed to start LSB: OpenLDAP standalone server (Lightweight Directory Access Protocol).
Aug 14 22:13:03 remote systemd[1]: slapd.service: Unit entered failed state.
Aug 14 22:13:03 remote systemd[1]: slapd.service: Failed with result 'exit-code'.
which does not really help me!? and journalctl -xe gives me:
-- Unit slapd.service has failed.
--
-- The result is failed.
Aug 14 22:39:38 remote systemd[1]: slapd.service: Unit entered failed state.
Aug 14 22:39:38 remote systemd[1]: slapd.service: Failed with result 'exit-code'.
Aug 14 22:39:39 remote nscd[778]: nss-ldap: do_open: do_start_tls failed:stat=-1
Aug 14 22:39:39 remote nscd[778]: nss_ldap: could not search LDAP server - Server is unavailable
Aug 14 22:39:39 remote python2.7[907]: inexistant user remote$
Aug 14 22:39:39 remote python2.7[907]: saml_msg is too small: minlength = 128
Aug 14 22:39:39 remote python2.7[907]: pam_unix(univention-management-console:auth): check pass; user unknown
Aug 14 22:39:39 remote python2.7[907]: pam_unix(univention-management-console:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost=
Aug 14 22:39:39 remote python2.7[907]: pam_krb5(univention-management-console:auth): authentication failure; logname=remote$ uid=0 euid=0 tty= ruser= rhost=
Aug 14 22:39:39 remote python2.7[907]: pam_ldap: ldap_starttls_s: Can't contact LDAP server
Aug 14 22:39:43 remote postfix/pickup[1945]: E4D88C2F07: uid=0 from=<root>
Aug 14 22:39:43 remote postfix/cleanup[7139]: error: dict_ldap_connect: Unable to set STARTTLS: -1: Can't contact LDAP server
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: ldap:/etc/postfix/ldap.groups lookup error for "root@remote.FQDN.de"
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: E4D88C2F07: virtual_alias_maps map lookup problem for root@remote.FQDN.de -- message not accepted, try again later
Aug 14 22:39:43 remote postfix/pickup[1945]: E5779C2F07: uid=0 from=<root>
Aug 14 22:39:43 remote postfix/cleanup[7139]: error: dict_ldap_connect: Unable to set STARTTLS: -1: Can't contact LDAP server
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: ldap:/etc/postfix/ldap.groups lookup error for "root@remote.FQDN.de"
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: E5779C2F07: virtual_alias_maps map lookup problem for root@remote.FQDN.de -- message not accepted, try again later
Aug 14 22:39:43 remote postfix/pickup[1945]: E5C84C2F07: uid=0 from=<root>
Aug 14 22:39:43 remote postfix/cleanup[7139]: error: dict_ldap_connect: Unable to set STARTTLS: -1: Can't contact LDAP server
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: ldap:/etc/postfix/ldap.groups lookup error for "root@remote.FQDN.de"
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: E5C84C2F07: virtual_alias_maps map lookup problem for root@remote.FQDN.de -- message not accepted, try again later
Aug 14 22:39:43 remote postfix/pickup[1945]: E6249C2F07: uid=0 from=<root>
Aug 14 22:39:43 remote postfix/cleanup[7139]: error: dict_ldap_connect: Unable to set STARTTLS: -1: Can't contact LDAP server
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: ldap:/etc/postfix/ldap.groups lookup error for "root@remote.FQDN.de"
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: E6249C2F07: virtual_alias_maps map lookup problem for root@remote.FQDN.de -- message not accepted, try again later
Aug 14 22:39:43 remote postfix/pickup[1945]: E67B1C2F07: uid=0 from=<root>
Aug 14 22:39:43 remote postfix/cleanup[7139]: error: dict_ldap_connect: Unable to set STARTTLS: -1: Can't contact LDAP server
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: ldap:/etc/postfix/ldap.groups lookup error for "root@remote.FQDN.de"
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: E67B1C2F07: virtual_alias_maps map lookup problem for root@remote.FQDN.de -- message not accepted, try again later
Aug 14 22:39:43 remote postfix/pickup[1945]: E6D1CC2F07: uid=0 from=<root>
Aug 14 22:39:43 remote postfix/cleanup[7139]: error: dict_ldap_connect: Unable to set STARTTLS: -1: Can't contact LDAP server
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: ldap:/etc/postfix/ldap.groups lookup error for "root@remote.FQDN.de"
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: E6D1CC2F07: virtual_alias_maps map lookup problem for root@remote.FQDN.de -- message not accepted, try again later
Aug 14 22:39:43 remote postfix/pickup[1945]: E7288C2F07: uid=0 from=<root>
Aug 14 22:39:43 remote postfix/cleanup[7139]: error: dict_ldap_connect: Unable to set STARTTLS: -1: Can't contact LDAP server
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: ldap:/etc/postfix/ldap.groups lookup error for "root@remote.FQDN.de"
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: E7288C2F07: virtual_alias_maps map lookup problem for root@remote.FQDN.de -- message not accepted, try again later
Aug 14 22:39:43 remote postfix/pickup[1945]: E7758C2F07: uid=0 from=<root>
Aug 14 22:39:43 remote postfix/cleanup[7139]: error: dict_ldap_connect: Unable to set STARTTLS: -1: Can't contact LDAP server
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: ldap:/etc/postfix/ldap.groups lookup error for "root@remote.FQDN.de"
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: E7758C2F07: virtual_alias_maps map lookup problem for root@remote.FQDN.de -- message not accepted, try again later
Aug 14 22:39:43 remote postfix/pickup[1945]: E7CD5C2F07: uid=0 from=<root>
Aug 14 22:39:43 remote postfix/cleanup[7139]: error: dict_ldap_connect: Unable to set STARTTLS: -1: Can't contact LDAP server
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: ldap:/etc/postfix/ldap.groups lookup error for "root@remote.FQDN.de"
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: E7CD5C2F07: virtual_alias_maps map lookup problem for root@remote.FQDN.de -- message not accepted, try again later
Aug 14 22:39:43 remote postfix/pickup[1945]: E829CC2F07: uid=0 from=<root>
Aug 14 22:39:43 remote postfix/cleanup[7139]: error: dict_ldap_connect: Unable to set STARTTLS: -1: Can't contact LDAP server
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: ldap:/etc/postfix/ldap.groups lookup error for "root@remote.FQDN.de"
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: E829CC2F07: virtual_alias_maps map lookup problem for root@remote.FQDN.de -- message not accepted, try again later
Aug 14 22:39:43 remote postfix/pickup[1945]: E8857C2F07: uid=0 from=<root>
Aug 14 22:39:43 remote postfix/cleanup[7139]: error: dict_ldap_connect: Unable to set STARTTLS: -1: Can't contact LDAP server
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: ldap:/etc/postfix/ldap.groups lookup error for "root@remote.FQDN.de"
Aug 14 22:39:43 remote postfix/cleanup[7139]: warning: E8857C2F07: virtual_alias_maps map lookup problem for root@remote.FQDN.de -- message not accepted, try again later
Aug 14 22:39:43 remote postfix/pickup[1945]: E8E38C2F07: uid=0 from=<root>
Aug 14 22:39:43 remote postfix/cleanup[7139]: error: dict_ldap_connect: Unable to set STARTTLS: -1: Can't contact LDAP server
Aug 14 22:39:43 remote postfix/cleanup[7139]: fatal: too many errors - program terminated
as far as I understand all the failures in postfix are results of the LDAP server not being operating!?
What am I missing? Where can I have a look to narrow down the problem?
Worst case I could reinstall, but apparently it is not possible to make Kopano account backups with LDAP server being down. ARGH!