Yep, sure can. ldapsearch -x -h <ldap_host> -D "cn=Directory Manager" -b "o=gsb,dc=uchicago,dc=edu" -w <password>' uid=dyoung2 cn
Gets me: # extended LDIF # # LDAPv3 # base <o=gsb,dc=uchicago,dc=edu> with scope subtree # filter: uid=dyoung2 # requesting: cn # # dyoung2, people, gsb, uchicago.edu dn: uid=dyoung2,ou=people,o=gsb,dc=uchicago,dc=edu cn: Darren Young # search result search: 2 result: 0 Success # numResponses: 2 # numEntries: 1 Ldapsearch comes from: # rpm -qilf /usr/bin/ldapsearch Name : openldap-clients Relocations: (not relocatable) Version : 2.3.27 Vendor: Red Hat, Inc. Release : 8.el5_1.3 Build Date: Thu 07 Feb 2008 10:36:14 AM CST Install Date: Thu 28 Feb 2008 05:39:30 PM CST Build Host: hs20-bc2-4.build.redhat.com Group : Applications/Internet Source RPM: openldap-2.3.27-8.el5_1.3.src.rpm Size : 310928 License: OpenLDAP Signature : DSA/SHA1, Thu 21 Feb 2008 07:44:07 AM CST, Key ID 5326810137017186 Packager : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla> URL : http://www.openldap.org/ Summary : Client programs for OpenLDAP. > -----Original Message----- > From: Jeff Moyer [mailto:[EMAIL PROTECTED] > Sent: Thursday, April 24, 2008 1:22 PM > To: Young, Darren > Cc: [email protected] > Subject: Re: [autofs] LDAP Server > > "Young, Darren" <[EMAIL PROTECTED]> writes: > > > Getting there, have this one now: > > > > Apr 22 09:14:09 gsbtestfilervm automount[7775]: do_sasl_bind: Error > > parsing response to sasl_bind request: Authentication method not > > supported. > > Apr 22 09:14:09 gsbtestfilervm automount[7775]: do_sasl_bind: The > LDAP > > server indicated that the LDAP SASL bind was incomplete, but did not > > provide the required data to proceed. LDAP SASL bind with mechanism > > LOGIN failed. > > Apr 22 09:14:09 gsbtestfilervm automount[7775]: sasl_bind_mech: sasl > > bind with mechanism LOGIN failed > > Apr 22 09:14:09 gsbtestfilervm automount[7775]: lookup_init: > > lookup(ldap): cannot initialize authentication setup > > > > LDAP is Sun directory 5.2 and I thought it supported SASL. Tried > PLAIN > > and LOGIN methods, same thing. Anonymous bind is disabled on our LDAP > > hosts. > > First, can you do an authenticated search from the client machine > outside of autofs? For example, can you come up with an incantation of > ldapsearch that returns results for you? > > If you can, then we can figure out how to configure your > /etc/autofs_ldap_auth.conf file. > > -Jeff _______________________________________________ autofs mailing list [email protected] http://linux.kernel.org/mailman/listinfo/autofs
