On Fri, 2010-04-30 at 12:34 -0400, Eric Sturdivant wrote:
> I can't speak to the specifics of how to setup evolution, but in general 
> you just point your ldap client at ldap://directory.umd.edu with a search 
> base of `dc=umd,dc=edu'  and go.

Thanks, Eric.  For some reason it's just not working with Evolution.  It
gives no error message, but never returns any results either.

> 
> E.g.
> 
> z:~: which ldapsearch
> /usr/local/bin/ldapsearch
> 
> z:~: ldapsearch -H ldap://directory.umd.edu -b dc=umd,dc=edu uid=sturdiva cn
> # LDAPv3
> # base <> with scope subtree
> ~~# filter: uid=sturdiva
> # requesting: cn
> #
> 
> # sturdiva, people, umd.edu
> dn: uid=sturdiva,ou=people,dc=umd,dc=edu
> cn: Eric Ransom Sturdivant

I didn't know about ldapsearch before.  Thanks, this is a very useful
tool!  In order to get it to work, I had to use the -x option to enable
"simple authentication", at which point it asks me for a password and
then ignores it entirely.

> A couple of things to keep in mind:
> 
>      - If you want to search for students you will need to bind to the
>        directory first using your directory id and password (E.g.
>        'lenski' not 'len...@umd.edu').
>      - If you are going to bind to ldap, you probably want to use LDAP
>        over SSL (ldaps://directory.umd.edu)

Do you have an example of how to do either of these from the command
line with ldapsearch?

If I try "-U lenski" to set my username for SASL authentication, I get a
"Protocol error".

If I try ldaps://directory.umd.edu, I get an error about being unable to
contact the server.

> There are a number of documents on the helpdesk website which detail how 
> to setup various mail clients to use the LDAP here:
> 
>    http://www.helpdesk.umd.edu/systems/ldap/all
> 
> Using one of these as a starting point will hopefully get you 90% of the 
> way there.

Ah, I'm glad to see that these exist.  I tried the thunderbird
instructions, but without much success.  Is there a possibility that the
full LDAP server access is restricted to certain subnets or locations on
campus?

Dan

Reply via email to