[Date Prev][Date Next] [Chronological] [Thread] [Top]

AW: Solaris 10 Native LDAP Client TLS

 Hello,

Does nscd -g say anything different?

I found out the hard way that there are differences between the ldapsearch on Solaris 8 and Solaris 10, so it wouldn't surprise me if there were any between 9 and 10.

How did you configure sendmail to work with ldap?

Cheers,

Claus

-----Ursprüngliche Nachricht-----
Von: openldap-technical-bounces+claus.kick=siemens.com@OpenLDAP.org [mailto:openldap-technical-bounces+claus.kick=siemens.com@OpenLDAP.org] Im Auftrag von Marantz, Roy
Gesendet: Dienstag, 18. März 2008 13:05
An: farhan ahmed; openldap-technical@openldap.org
Betreff: RE: Solaris 10 Native LDAP Client TLS

Did you try turning on logging on the server to see what sendmail is
trying to do?
Did you try using ldapsearch to see if you can simulate what sendmail is
doing?  
Roy

________________________________

From: openldap-technical-bounces+roy.marantz=deshaw.com@openldap.org
[mailto:openldap-technical-bounces+roy.marantz=deshaw.com@openldap.org]
On Behalf Of farhan ahmed
Sent: Monday, March 17, 2008 9:02 AM
To: openldap-technical@openldap.org
Subject: RE: Solaris 10 Native LDAP Client TLS


Hi Guys,
 
I have done it for Solaris 10 but now I am facing problem in Solaris 9.
Please help me
 
Still no luck with LDAP native client on Solaris 9. I am getting
following message

Mar 16 02:02:59 web04 sendmail[3700]: [ID 293258 mail.warning] libsldap:
Status: 81 Mesg: openConnection: simple bind failed - Can't contact LDAP
server

But when I run /usr/lib/ldap/ldap_cachemgr -g, I get following which
shows there is no problem

cachemgr configuration:
server debug level 0
server log file "/var/ldap/cachemgr.log"
number of calls to ldapcachemgr 19

cachemgr cache data statistics:
Configuration refresh information: 
Previous refresh time: 2008/03/17 23:55:23
Next refresh time: 2008/03/18 00:55:23
Server information: 
Previous refresh time: 2008/03/17 23:55:23
Next refresh time: 2008/03/18 00:05:23
server: 203.221.221.83, status: UP
Cache data information: 
Maximum cache entries: 256
Number of cache entries: 0
 
ldapclient -vvv manual -a defaultServerList=10.10.10.10 -a
defaultSearchBase=dc=test,dc=com -a authenticationMethod=tls:simple -a
credentialLevel=proxy -a proxyDN=cn=proxyagent,ou=profile,dc=test,dc=com
-a proxyPassword=test
 
Note: Same command works for Solaris 10

I really want to use LDAP native client rather than openldap client
which is hassle to install gcc padle pam_ldap etc on 50 servers.

Please help me guys.

Thanks,

Farhan




 



________________________________

	From: farhhanahmed@hotmail.com
	To: openldap-technical@openldap.org
	Subject: Solaris 10 Native LDAP Client TLS
	Date: Fri, 14 Mar 2008 11:55:59 +0000
	
	
	Hello Guys,
	 
	
	 I am having some issues to configure LDAP Native client with
TLS. Please help me to sort out this issue
	
	LDAP Server: Linux (OpenLdap), 
	
	LDAP Client: Solaris 10 (Native Client)
	
	When I run following command to test, it works fine, 
	
	ldapsearch -v -h test -p 636 -Z -P /var/ldap/cert8.db -b
"dc=test,dc=com" -s base "objectclass=*"
	
	ldapsearch: started Fri Mar 14 18:11:57 2008
	
	ldap_init( test, 636 )
	filter pattern: objectclass=*
	returning: ALL
	filter is: (objectclass=*)
	version: 1
	dn: dc=test,dc=com
	objectClass: dcObject
	objectClass: organization
	o: test.com web site
	dc: test
	1 matches
	
	But When I run ldapclient command to initialize ldapclient, it
doesn't work, please guide me where I am doing wrong
	
	ldapclient -v manual -a defaultServerList=10.10.10.10
	-a defaultSearchBase=dc=test,dc=com 
	-a authenticationMethod=tls:simple 
	-a serviceAuthenticationMethod=pam_ldap:tls:simple 
	-a serviceAuthenticationMethod=keyserv:tls:simple 
	-a serviceAuthenticationMethod=passwd-cmd:tls:simple
	-a credentialLevel=proxy 
	-a proxyDN=cn=Manager,ou=People,dc=test,dc=com 
	-a proxyPassword=passwd
	
	After that when I run ldaplist command, I get following in
/var/adm/messages
	
	Mar 14 18:15:16 subx05-t1 nfs4cbd[1638]: [ID 293258
daemon.warning] libsldap: Status: 91 Mesg: openConnection: failed to
initialize
	TLS security (security library: bad database.)
	
	Please help me guys :) I know I am very near to get it working
	
	Thanks,
	
	Farhan 
	
	
________________________________

	at CarPoint.com.au It's simple! Sell your car for just $30
<http://a.ninemsn.com.au/b.aspx?URL=http://secure-au.imrworldwide.com/cg
i-bin/a/ci_450304/et_2/cg_801459/pi_1004813/ai_859641&_t=762955845&_r=ti
g_OCT07&_m=EXT> 


________________________________

at CarPoint.com.au It's simple! Sell your car for just $30
<http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fsecure%2Dau%2Eimrworldw
ide%2Ecom%2Fcgi%2Dbin%2Fa%2Fci%5F450304%2Fet%5F2%2Fcg%5F801459%2Fpi%5F10
04813%2Fai%5F859641&_t=762955845&_r=tig_OCT07&_m=EXT>