[CentOS] openldap fails to authenticate
Tim Dunphy
bluethundr at gmail.com
Tue Nov 2 20:28:43 UTC 2010
I am attempting to setup an LDAP server under CentOS 5.4.
However I am unable to search my ldap directory even tho I am
supplying the proper credentials for the Manager account:
[root at ldap openldap]# ldapsearch -x -h ldap -D
'cn=Manager,dc=example,dc=net' -W -b 'dc=example,dc=net'
Enter LDAP Password:
ldap_bind: Invalid credentials (49)
Anonymous searches do work however:
ldapsearch -x -h ldap -b "dc=example,dc=net" -s sub "objectclass=*"
[root at ldap openldap]# ldapsearch -x -h ldap -b "dc=example,dc=net" -s
sub "objectclass=*"
# extended LDIF
#
# LDAPv3
# base <dc=example,dc=net> with scope subtree
# filter: objectclass=*
# requesting: ALL
#
# search result
search: 2
result: 32 No such object
I am currently attempting to use the actual word 'secret' to
authenticate the Manager account:
database bdb
suffix "dc=example,dc=net"
rootdn "cn=Manager,dc=example,dc=net"
# Cleartext passwords, especially for the rootdn, should
# be avoided. See slappasswd(8) and slapd.conf(5) for details.
# Use of strong authentication encouraged.
rootpw secret
# rootpw {CRYPT}secret
And I am getting error 49's in my openldap logs with loglevel set to 296
/var/log/openldap.log
Nov 2 15:45:58 ldap slapd[3522]: slapd starting
Nov 2 15:46:14 ldap slapd[3522]: conn=0 fd=11 ACCEPT from
IP=127.0.0.1:44552 (IP=0.0.0.0:389)
Nov 2 15:46:14 ldap slapd[3522]: conn=0 op=0 BIND
dn="cn=Manager,dc=example,dc=net" method=128
Nov 2 15:46:14 ldap slapd[3522]: conn=0 op=0 RESULT tag=97 err=49 text=
Nov 2 15:46:14 ldap slapd[3522]: conn=0 fd=11 closed (connection lost)
this is how I have configured my ldap.conf
BASE dc=example,dc=net
HOST localhost
URI ldap://ldap.example.net
and for some reason slapd is listening on port 3774 even tho I haven't
told it to:
[root at ldap network-scripts]# netstat -tulnp | grep 389
tcp 0 0 0.0.0.0:389 0.0.0.0:*
LISTEN 3774/slapd
[root at ldap network-scripts]# netstat -tulnp | grep slapd
tcp 0 0 0.0.0.0:389 0.0.0.0:*
LISTEN 3774/slapd
I haven't specified port 3774 _anywhere_ in my ldap config:
[root at ldap network-scripts]# grep 3774 /etc/ldap
thanks in advance for your help
--
Here's my RSA Public key:
gpg --keyserver pgp.mit.edu --recv-keys 5A4873A9
Share and enjoy!!
More information about the CentOS
mailing list