RE: IRIX ldapsearch

["Rigler, Steve" <SRigler@MarathonOil.com>]

Paul,

Irix 6.5.22 uses configuration files in several places.

The NSD stuff uses /var/ns/ldap.conf.
The PAM stuff uses /etc/security/pam_ldap.conf.
The OpenLDAP stuff uses /etc/openldap/ldap.conf.

-Steve

-----Original Message-----
From: owner-openldap-software@OpenLDAP.org
[mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Paul Stepowski
Sent: Monday, March 29, 2004 2:08 AM
To: OpenLDAP-software@OpenLDAP.org
Subject: IRIX ldapsearch


Hi list,

I'm having trouble getting LDAP/PAM working on IRIX 6.5.22.  I do
realise that this list is not meant for such topics but the problem I'm
having seem to be a pretty fundamental LDAP issue.

Here's the debug output of an ldapsearch:

---snip---
# ldapsearch -v -d 3
ldap_initialize( <DEFAULT> )
ldap_create
ldap_bind_s
ldap_simple_bind_s
ldap_sasl_bind_s
ldap_sasl_bind
ldap_send_initial_request
ldap_new_connection
ldap_int_open_connection
ldap_connect_to_host: TCP localhost:389
ldap_new_socket: 3
ldap_prepare_socket: 3
ldap_connect_to_host: Trying 127.0.0.1:389
ldap_connect_timeout: fd: 3 tm: -1 async: 0
ldap_ndelay_on: 3
ldap_is_sock_ready: 3
ldap_is_socket_ready: error on socket 3: errno: 146 (Connection refused)
ldap_close_socket: 3
ldap_perror
ldap_bind: Can't contact LDAP server (81)
---snip---

For some reason my ldap client is trying to bind to the machine's local
address.  There's no LDAP server running on the local machine which
explains the error 81.

My /var/ns/ldap.conf follows:

---snip---
# ----------------- START LOCAL DOMAIN --------------------------
; SECURITY
security        ssl     ; none, ssl
cipher          RSA_RC4_40_MD5
domain          ; An empty domain name identifies the local domain

; SERVER SPECIFICATION
server  x.x.x.x
version 3
base    "ou=people,dc=qut,dc=edu,dc=au"
scope   subtree         ; subtree, onelevel, sbase
regsub  USERPASSWORD{{crypt\}}{}
---snip---

NOTE: x.x.x.x is the address of the test LDAP server.

For some reason, ldapsearch doesn't appear to be reading the file.
Anyone come across this sort of thing before?


Thanks,

Paul

-- 
Paul Stepowski
Network Programmer (part time)
Network Applications
Information Technology Services
Ph: +61 7 3864 1703