[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: OpenLdap Proxy with CentOS 6.3

Le 10/09/2012 02:38, GERF a écrit :

Hello all,

I have been working with this project for a straight two weeks and i
feel lost or stuck.

The goal is to query Windows AD from the linux box located in the DMZ

So, in my virtual lab I have the following:

Windows AD with ip  172.16.5.16 ldap1.gerf02.local
CentOS 6.3 with ip 172.16.5.32 upildap01.gerf02.local

So, my configuration files are as follows:

-*-*-*-*-*-*-*-*-*/etc/openldap/ldap.conf:-*-*-*-*-*-*-*-*-*-*

BASE dc=gerf02,dc=local
URI     ldap://172.16.5.16 ldap://172.16.5.16:636
The second URL seems invalid, unless you managed to make your server reply without SSL on port 636 

[..]

So, when I execute the following, I get this message

ldapsearch -x -b dc=gerf02,dc=local -D cn=Ldap Bind
Account,dc=gerf02,dc=local -W
Enter LDAP Password:
ldap_bind: Invalid credentials (49)
         additional info: 80090308: LdapErr: DSID-0C0903A9, comment:
AcceptSecurityContext error, data 52e, v1db1
Which seems to be a valid AD answer. Did you managed to successfuly execute the same query against AD directly ? 

You should also quote the -D argument value, as it contains spaces...

--
BOFH excuse #367:

Webmasters kidnapped by evil cult.