LDAPsearch+SSL in OES2

environment:

OES2 on SLES10SP1

situation:

Неможливо зєднатися з сервером через ldapsearch, постійне повідомлення

seo2:~ # ldapsearch -x -h localhost -p 636 -D cn=admin,o=lp -w 123456 -b "o=lp" objectclass=* -Z /etc/opt/novell/certs/SSCert.der
ldap_start_tls: Can't contact LDAP server (-1)
ldap_bind: Can't contact LDAP server (-1)

resolution

необхідно використовувати ldapsearch з репозитарію OES а не SLES, тобто формуєте команду з використанням повного шляху, як в цьому прикладі:

/opt/novell/eDirectory/bin/ldapsearch -x -h localhost -p 636 -D cn=admin,o=lp -w 123456 -b "o=lp" objectclass=* -e /etc/opt/novell/certs/SSCert.der

Перевірте опції LDAP-сервера, та перегляньте їх через ldapconfig get.

document

Рекомендуємо також ознайомитися з :
Document ID:    3743380
Creation Date:    2006-10-06 07:22:34.0
Modified Date:    2006-10-06 07:20:42.0
Novell Product:    ZENworks Desktop Management

 

---

additional notes

seo2:~ # ldapconfig get
NLDAP server configuration utility for Novell eDirectory 8.8 SP2 v20216.47
[1] Instance at /etc/opt/novell/eDirectory/conf/nds.conf:  seo2.OU=top.O=LP.LP-TREE
User FDN:admin.lp
Password:
LDAP Server Configuration:
LDAP Server: CN=LDAP Server - seo2.OU=top.O=LP
LDAP Group: CN=LDAP Group - seo2.OU=top.O=LP
LDAP Screen Level:  Error| Critical
searchSizeLimit: 0
searchTimeLimit: 0
LDAP Server Bind Limit: 0
LDAP Server Idle Timeout: 0
LDAP Enable TCP: yes
LDAP Enable SSL: yes
LDAP TCP Port: 389
LDAP SSL Port: 636
filteredReplicaUsage: 0
LDAP:keyMaterialName: SSL CertificateDNS
nonStdClientSchemaCompatMode: no
ldapNonStdAllUserAttrsMode: yes
ldapEnablePSearch: yes
ldapMaximumPSearchOperations: 0
ldapIgnorePSearchLimitsForEvents: yes
ldapTLSVerifyClientCertificate: 0
ldapEnableMonitorEvents: yes
ldapMaximumMonitorEventsLoad: 0
ldapTLSRequired: no
ldapBindRestrictions: 0 (no restriction)
ldapInterfaces:
Require TLS for Simple Binds with Password: no
LDAP Anonymous Identity: .CN=anonymous.O=LP.T=LP-TREE.
LDAP:searchReferralUsage: Prefer Chaining
LDAP:otherReferralUsage: Prefer Chaining