LDAP on Solaris 9

From: Scott, James (jscott@uslec.com)
Date: Thu May 05 2005 - 13:32:23 EDT


 I've installed Sun Directory Server 5.2 patch 3 on a Solaris 9 box. I've
also configured the directory server via idsconfig (file contents below) and
then attempted to run the ldapaddent command (ldapaddent -a simple -D
"cn=..." -w PWD /etc/passwd passwd). It reports "Container does not exist"
yet if I do a "ldaplist -h", it shows me the database for passwd. I run the
ldapaddent command on the client (which I assume is correct since the server
does not have the /var/ldap directory structure which is created via
ldapclient init). I've tried different options in the idsconfg phase to no
avail. Included is the output of the clients messages and ldap_cachemgr.log.
Any help would be appreciated.

===================================================================
 idsconfig setup:
#!/bin/sh
# - This file contains configuration information for
# Native LDAP. Use the idsconfig tool to load it.
#
# WARNING: This file was generated by idsconfig, and is intended to
# be loaded by idsconfig as is. DO NOT EDIT THIS FILE!
#
IDS_SERVER="HOST.domain.local"
IDS_PORT=389
IDS_TIMELIMIT=-1
IDS_SIZELIMIT=-1
LDAP_ROOTDN="cn=Directory Manager"
LDAP_ROOTPWD=PASSWD
LDAP_DOMAIN="domain.local"
LDAP_TREETOP="dc=domain,dc=local"

# Internal program variables that need to be set.
NEED_PROXY=1
NEED_TIME=1
NEED_SIZE=1
NEED_CRYPT=TRUE

# LDAP PROFILE related defaults
LDAP_PROFILE_NAME="default"
DEL_OLD_PROFILE=1
LDAP_BASEDN="dc=domain,dc=local"
LDAP_SERVER_LIST="192.9.143.180"
LDAP_AUTHMETHOD="simple"
LDAP_FOLLOWREF=TRUE
LDAP_SEARCH_SCOPE="one"
NEED_SRVAUTH_PAM=0
NEED_SRVAUTH_KEY=0
NEED_SRVAUTH_CMD=0
LDAP_SRV_AUTHMETHOD_PAM=""
LDAP_SRV_AUTHMETHOD_KEY=""
LDAP_SRV_AUTHMETHOD_CMD=""
LDAP_SEARCH_TIME_LIMIT=30
LDAP_PREF_SRVLIST="192.9.143.180"
LDAP_PROFILE_TTL=43200
LDAP_CRED_LEVEL="proxy"
LDAP_BIND_LIMIT=2

# Proxy Agent
LDAP_PROXYAGENT="cn=proxyagent,ou=profile,dc=domain_central,dc=local"
LDAP_PROXYAGENT_CRED=Secret

# Export all the variables (just in case)
export IDS_HOME IDS_PORT LDAP_ROOTDN LDAP_ROOTPWD LDAP_SERVER_LIST
LDAP_BASEDN
export LDAP_DOMAIN LDAP_TREETOP LDAP_PROXYAGENT LDAP_PROXYAGENT_CRED
export NEED_PROXY
export LDAP_PROFILE_NAME LDAP_BASEDN LDAP_SERVER_LIST
export LDAP_AUTHMETHOD LDAP_FOLLOWREF LDAP_SEARCH_SCOPE
LDAP_SEARCH_TIME_LIMIT
export LDAP_PREF_SRVLIST LDAP_PROFILE_TTL LDAP_CRED_LEVEL LDAP_BIND_LIMIT
export NEED_SRVAUTH_PAM NEED_SRVAUTH_KEY NEED_SRVAUTH_CMD
export LDAP_SRV_AUTHMETHOD_PAM LDAP_SRV_AUTHMETHOD_KEY
LDAP_SRV_AUTHMETHOD_CMD
export LDAP_SERV_SRCH_DES SSD_FILE
===================================================================
/var/adm/messages:
May 5 13:14:03 deneb ldapaddent[3900]: [ID 293258 user.error] libsldap:
Status: 32 Mesg: openConnection: simple bind failed - No such object
May 5 13:14:03 deneb last message repeated 1 time
May 5 13:14:03 deneb ldapaddent[3900]: [ID 293258 user.error] libsldap:
Status: 7 Mesg: Session error no available conn.
May 5 13:16:15 deneb ldapaddent[3909]: [ID 293258 user.error] libsldap:
Status: 32 Mesg: openConnection: simple bind failed - No such object
May 5 13:16:15 deneb last message repeated 1 time
May 5 13:16:15 deneb ldapaddent[3909]: [ID 293258 user.error] libsldap:
Status: 7 Mesg: Session error no available conn.
May 5 13:16:32 deneb ldapaddent[3911]: [ID 293258 user.error] libsldap:
Status: 32 Mesg: openConnection: simple bind failed - No such object
May 5 13:16:32 deneb last message repeated 1 time
May 5 13:16:32 deneb ldapaddent[3911]: [ID 293258 user.error] libsldap:
Status: 7 Mesg: Session error no available conn.
===================================================================
ldap_cachemgr.log
Thu May 5 12:40:56.5160 Starting ldap_cachemgr, logfile
/var/ldap/cachemgr.log
Thu May 5 12:40:56.6612 sig_ok_to_exit(): parent exiting...
Thu May 5 12:40:57.1118 Error: Unable to refresh profile:default:Session
error no available conn.

Thu May 5 12:40:57.1120 Error: Unable to update from profile
===================================================================

Thanks,
  Jay
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:30:39 EDT