Re: OpenLDAP error - ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

[Clément OUDOT <clement.oudot@savoirfairelinux.com>]

Le 11/09/2015 14:54, Varadi, Louis - 0442 - MITLL a écrit :

Hello, thank you for your reply.  Here are the answers to your questions

 

Yes the process is running.

 

/etc/init.d/slapd status

slapd: [INFO] Using /etc/default/slapd for configuration

slapd: [INFO] LDAP Tool Box OpenLDAP init script version 2.1

slapd: [INFO] Process OpenLDAP is not running

slapd: [INFO] Detected suffix: dc=group44,dc=ldap

[root@lenldap ~]# /etc/init.d/slapd status

slapd: [INFO] Using /etc/default/slapd for configuration

slapd: [INFO] LDAP Tool Box OpenLDAP init script version 2.1

slapd: [INFO] Process OpenLDAP is running (PID 1814)

slapd: [INFO] Listening to services ldap://*:389 ldaps://*:636

slapd: [INFO] Process usage:  0.1% CPU /  0.4% MEM

slapd: [INFO] Detected suffix: dc=group44,dc=ldap

 

This is the OpenLDAP process running.

 

Sep 11 08:34:41 lenldap slapd[1826]: [INFO] Using /etc/default/slapd for configuration

Sep 11 08:34:41 lenldap slapd[1831]: [INFO] LDAP Tool Box OpenLDAP init script version 2.1

Sep 11 08:34:41 lenldap slapd[1834]: [INFO] Process OpenLDAP is running (PID 1814)

Sep 11 08:34:41 lenldap slapd[1835]: [INFO] Listening to services ldap://*:389 ldaps://*:636

Sep 11 08:34:41 lenldap slapd[1838]: [INFO] Process usage:  0.1% CPU /  0.4% MEM

Sep 11 08:34:41 lenldap slapd[1859]: [INFO] Detected suffix: dc=group44,dc=ldap

_______________

 

I ran the command tail –f /var/log/openldap.log

In another terminal I ran the ldapsearch –x command.

I did not see any output to the openldap.log.

I am still getting the Can’t contact LDAP server error after the command.

 

ldapsearch -x

ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

 

_______________

 

I ran the command.

/etc/init.d/slapd debug

 

In another window I ran the command ldapsearch –x

Again, no output to debug.

Again - getting the Can’t contact LDAP server error

 

ldapsearch -x

ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

 

Thoughts?

 

Maybe you are using the ldapsearch command from the distro, which may not work with LTB package. Try /usr/local/openldap/bin/ldapsearch

Check also your selinux configuration and your iptables.

-- 
Clément OUDOT
Consultant en logiciels libres, Expert infrastructure et sécurité
Savoir-faire Linux