[Date Prev][Date Next] [Chronological] [Thread] [Top]

listen-on-ip-address issue



Hi,

trying to allow unencrypted simple binds over 127.0.0.1 and
encrypted simple binds over network.

in ldap startup script:
  daemon ${slapd} -u ldap -h '"ldap://127.0.0.1/ ldaps:///"'

no go.

in ldap startup script:
  daemon ${slapd} -u ldap -h '"ldap://127.0.0.1/ ldap://172.16.3.1/ ldaps:///"'

go.

[root@qwerty root]# tcpdump -i eth1 port 389 -s 1500 -w /home/arjen/ldap.dump
tcpdump: listening on eth1
0 packets received by filter
0 packets dropped by kernel


[root@qwerty root]# tcpdump -i eth1 port 636 -s 1500 -w /home/arjen/ldap.dump
tcpdump: listening on eth1
38 packets received by filter
0 packets dropped by kernel


My question: why is there no traffic over this interface (172.16.3.1) over port 389,
but connects through e.g. ssh do not work if I don't let slapd bind on port 389 on
this interface?

Any hint would be appreciated.



Thnx and Grtz, 

Arjen.