Re: OpenLDAP client configuration with CentOS 5.3

To: Cool The Breezer <techcool.kumar@yahoo.com>

Subject: Re: OpenLDAP client configuration with CentOS 5.3

From: Echedey Lorenzo <echedey@gmail.com>

Date: Mon, 1 Mar 2010 08:44:36 +0000

Cc: Jonathan Clarke <jonathan@phillipoux.net>, openldap-technical@openldap.org

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=0z2I7QtWCNteyiHXGK3viTW6rELmaS2ZsYgcoANVKe0=; b=qqgzVc/8Eg0IInwY0X5Q/zpaN3ofHVG8oVpfJQMF6fgm+dJlg2dPBnnUHVDISMv5U+ 5yFY75CWVbE0zZrn34UPLmMA2yxmKjhHRqF+c6jdWvVgcFOjp1Re/L4Fqbf/fGJajClM bMq9wuv6pbA3uyg+hnPuaUbDJwJxXs+tppSTA=

Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=xQZS+84zF3Fu4C78SIsgnHO65YTwsxovn6JEiULWZZHSWFb7AHmexjm+KMV6fxui0T xlm3TcQuNKa7u+FuOYvQetmLcvvBx5oKNldC+N9hz5ZFofocjnyzQji5LdqMZFc6WQGB szxeO5bxtZ0oSgdtjBiqQViV2N4SjAp4MgDno=

In-reply-to: <166694.41350.qm@web110306.mail.gq1.yahoo.com>

References: <744598.95104.qm@web110304.mail.gq1.yahoo.com> <df8660ef1002260633g15fd3e33g71ad812d6bafb4d@mail.gmail.com> <f9a50dce1002261302x4af37d8bo68670cdf888a63ea@mail.gmail.com> <763508.1704.qm@web110315.mail.gq1.yahoo.com> <4B8B70D8.6000302@phillipoux.net> <166694.41350.qm@web110306.mail.gq1.yahoo.com>

2010/3/1 Cool The Breezer <techcool.kumar@yahoo.com>

I tried as per suggestions using man page. But still getting the error

ldapsearch -H ldap://xxx.yyy.com-D "cn=Directory Manager" "(objectclass=*)" -W -X _e3user
Enter LDAP Password:

SASL/EXTERNAL authentication started
ldap_sasl_interactive_bind_s: Unknown authentication method (-6)
additional info: SASL(-4): no mechanism available:

It now generates a new error. I tried using authconfig with --enableldap, --enablewinbind and --disableldaptls.
Still users are not able to login to linux box using LDAP credentials.

----- Original Message ----
From: Jonathan Clarke <jonathan@phillipoux.net>
To: Cool The Breezer <techcool.kumar@yahoo.com>
Cc: openldap-technical@openldap.org
Sent: Mon, March 1, 2010 1:16:32 PM
Subject: Re: OpenLDAP client configuration with CentOS 5.3

Le 01/03/2010 06:53, Cool The Breezer a écrit :
> Thanks for your suggestion. But still there is some problem.
> /ldapsearch -H ldap://ldap-sunnyvale.juniper.net -x -LL
> ou=people,dc=jnpr,dc=net "{mail=*norton*}" sn cn mail/
> /
> /
> /Output: version: 1/
> /
> /
> /Operations error (1)/
> /Additional information: 00000000: LdapErr: DSID-0C090627, comment: In
> order to perform this operation a successful bind must be completed on
> the connection., data 0, vece/
>
> Not sure the reason behind such errors. I think there is something
> wrong, because when I am trying to login linux box using ldap
> credentials, it simply closes the connection.

As it says in this error message: "a successful bind must be completed on the connection". This means you must authenticate to the LDAP server in order to search in it.

Check the -D and -w/-W options in the ldapsearch(1) man page. You'll need a valid account in your LDAP server and it's password.

Jonathan
-- --------------------------------------------------------------
Jonathan Clarke - jonathan@phillipoux.net
--------------------------------------------------------------
Ldap Synchronization Connector (LSC) - http://lsc-project.org
--------------------------------------------------------------