TLS problem

2013-01-29 Thread Chris
Hi I am running Openldap 2.4.23 on RHEL6. I can telnet to the server on both 389 636 ports. I can do a ldapsearch and ldapadd without any errors. I get this error when I start the slapd daemon. /ldap_start_tls_s() failed: Can't contact LDAP server: Transport endpoint is not connected

389 port is closed from the client point of view

2013-01-29 Thread Asmaa Ahmed
Hello, I am trying to get my ldap binding running, but some how it doen't work!When I checked the port using nmap, I can see clearly that it is closed while the server listens to it! client# nmap -p 389 ldap.domain.com Starting Nmap 5.00 ( http://nmap.org ) at 2013-01-29 23:09 ESTInteresting

Re: 389 port is closed from the client point of view

2013-01-29 Thread Matheus Eduardo Bonifacio Morais
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Seems that your slapd is binding the localhost address only. Please, run this command on sever side to confirm that: netstat -nltp Em 29-01-2013 10:16, Asmaa Ahmed escreveu: Hello, I am trying to get my ldap binding running, but some how it

RE: 389 port is closed from the client point of view

2013-01-29 Thread Asmaa Ahmed
Here is it, # netstat -nltpActive Internet connections (only servers)Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program nametcp 0 0 0.0.0.0:749 0.0.0.0:* LISTEN 1072/kadmindtcp0 0 0.0.0.0:464

RE: 389 port is closed from the client point of view

2013-01-29 Thread Asmaa Ahmed
I think I found the cause of thisit is in /etc/default/slapd by adding 'SLAPD_SERVICES=ldap://127.0.0.1:389/ ldaps:/// ldapi:///'Just commenting it solved the problem! Thanks. From: asabatg...@hotmail.com To: matheus_mor...@sicredi.com.br Subject: RE: 389 port is closed from the client point

Re: TLS problem

2013-01-29 Thread Dan White
On 01/29/13 10:22 +0200, Chris wrote: I am running Openldap 2.4.23 on RHEL6. I can telnet to the server on both 389 636 ports. I can do a ldapsearch and ldapadd without any errors. I get this error when I start the slapd daemon. /ldap_start_tls_s() failed: Can't contact LDAP server: Transport

Re: TLS problem

2013-01-29 Thread Rich Megginson
On 01/29/2013 01:22 AM, Chris wrote: Hi I am running Openldap 2.4.23 on RHEL6. I can telnet to the server on both 389 636 ports. I can do a ldapsearch and ldapadd without any errors. I get this error when I start the slapd daemon. /ldap_start_tls_s() failed: Can't contact LDAP server:

Replication LDAP Users Samba

2013-01-29 Thread rodrigo tavares
Hello, Today, I have one host vmware, it a master, it replicate all datas about LDAP from filesever01 (Samba). Using LDAP, I using the inteface, and when i create a ldap user, it create a samba account. So, i not need create user samba. ldap admin dn = cn=admin,dc=def,dc=mg,dc=gov,dc=us    

Re: TLS problem

2013-01-29 Thread Quanah Gibson-Mount
--On Tuesday, January 29, 2013 10:22 AM +0200 Chris ch...@flamengro.co.za wrote: Hi I am running Openldap 2.4.23 on RHEL6. I can telnet to the server on both 389 636 ports. I can do a ldapsearch and ldapadd without any errors. I get this error when I start the slapd daemon. In addition to

ldapsearch trying to use SASL

2013-01-29 Thread Scott Classen
Hello, I have a script which checks for the existence of an email address in my LDAP directory. the relevant line is: ldapsearch -D uid=nss,dc=bah,dc=com -w mypassword -b ou=People,dc=blah,dc=com uid=bobthebuilder mail If I run this script as the root or tomcat user it works as expected and

Re: ldapsearch trying to use SASL

2013-01-29 Thread Dan White
On 01/29/13 14:08 -0800, Scott Classen wrote: Hello, I have a script which checks for the existence of an email address in my LDAP directory. the relevant line is: ldapsearch -D uid=nss,dc=bah,dc=com -w mypassword -b ou=People,dc=blah,dc=com uid=bobthebuilder mail You must include a '-x'

Re: ldapsearch trying to use SASL

2013-01-29 Thread Scott Classen
Hi Dan, Well that's embarrassing. I added the '-x' option and now the script works from both the command line and from within my tomcat webapp. Very weird. There must have been some recent update to Java that broke my code? It has worked for the last couple of years without the '-x' option.

ldapsearch question

2013-01-29 Thread Benin Technologies
Hi, I was wondering if the following search can be done. Let's say I have this tree : --- dc=com | |--dc=mycompany | | --cn=Jane Doe |

Re: ldapsearch question

2013-01-29 Thread Quanah Gibson-Mount
--On Wednesday, January 30, 2013 4:00 AM +0100 Benin Technologies benintechnolog...@yahoo.fr wrote: Hi, I was wondering if the following search can be done. Let's say I have this tree : No. Fix your tree structure. If someone is a secretary, then put it in their user entry. Use a custom

Kerberos/LDAP integration

2013-01-29 Thread Asmaa Ahmed
Hello, I am trying to integrate Kerberos to my Openldap server, and I am following pretty much the instructions from there 'http://www.rjsystems.nl/en/2100-d6-kerberos-openldap-client.php'But still can't get it work to connect the client server to the LDAP one after the integration!I can see

Re: Kerberos/LDAP integration

2013-01-29 Thread Bjørn Ruberg
On 01/30/2013 07:33 AM, Asmaa Ahmed wrote: Hello, I am trying to integrate Kerberos to my Openldap server, and I am following pretty much the instructions from there 'http://www.rjsystems.nl/en/2100-d6-kerberos-openldap-client.php' But still can't get it work to connect the client server to