Re: Can't contact LDAP server

[Robert Canary <phantom@ohiocounty.net>]

Of Course......127.0.0.1 (duh)
Yes TCP wrappers will block this.  

Added ALL:127.0.0.1 to the host file.  I still get the socket err on
start up but the ldapsearch will now connect.  The soket error must be
on the unix socket (UDP). 

Ziya Suzen wrote:
> 
> On 2003-02-13 07:37:07 +0000, Robert Canary wrote:
> > I thought that also.  However, the entry ALL:.ohiocounty.net should
> 
> but that may not include 127.0.0.1, and (although I am not a
> tcpwrappers expert) the order of entries in hosts.allow might be
> stopping 'slapd:ALL' to be evaluated.
> 
> Anyway, I have one more suggestion, You might want to try Unix sockets instead of tcp. Start your 'slapd' like:
> 
> slapd -h'ldapi://a_file_name/'
> 
> (Where a_file_name is the unix socket name)
> 
> then try:
> 
> ldapsearch -H'ldapi://a_file_name/'
> 
> This should return something.
> 
> Good luck
> 
> Ziya.
> 
> > catch all services with in this domain.  However, I did add slapd:ALL
> > just for definetion, but it still didn't work.  slapd dies right off the
> > startup.
> >
> > Ziya Suzen wrote:
> > >
> > > On 2003-02-12 23:27:33 +0000, Robert Canary wrote:
> > > > I've installed the openldap 2.0, and all I have configured thus far is
> > > > the slapd.conf per the docs.  I tested the server as follows.
> > > >
> > > > I start ldap with: service ldap start
> > > > In the local4 log file I get this:
> > > > Feb 12 23:06:34 mchn6 slapd[30465]: daemon: socket() failed errno=97
> > > > (Address family not supported by protocol)
> > > > Feb 12 23:06:34 mchn6 slapd[30467]: slapd starting
> > > >
> > > >
> > > > When I run the test command:
> > > > ldapsearch -x -b '' -s base '(objectclass=*) namingContexts version:2
> > > >
> > > > I get this echoed back:
> > > > ldap_bind: can't contact LDAP server
> > > >
> > > > And I get this i the Local4.log
> > > > Feb 12 23:06:50 mchn6 slapd[30472]: fd=9 host access from unknown
> > > > (127.0.0.1) denied.
> > >
> > > Looks like tcpwrapper problem to me. Try adding slapd to your hosts.allow file.
> > >
> > > Ziya.
> > >
> > > >
> > > > The problem is obviously on slapd start up.  But I have no idea what
> > > > that errno is suggestioning.
> > > >
> > > > Any ideas
> > > > Thanks in advance :-)
> > > >
> > > > --
> > > > robert