[389-users] Re: How do I connect to 389-server via ldapsearch?

On 9/18/20 11:18 AM, rainer@ultra-secure.de wrote:
> Hi,
>
> I've installed the latest version on CentOS 8
>
>
> https://directory.fedoraproject.org/docs/389ds/howto/quickstart.html
>
>
>
> [root@radius-389-test ~]# rpm -qa |grep 389 |sort
> 389-ds-base-1.4.2.16-1.module_el8+9435+e6daf39f.x86_64
> 389-ds-base-libs-1.4.2.16-1.module_el8+9435+e6daf39f.x86_64
> cockpit-389-ds-1.4.2.16-1.module_el8+9435+e6daf39f.noarch
> python3-lib389-1.4.2.16-1.module_el8+9435+e6daf39f.noarch
>
>
> I can connect via dsidm:
>
>
> [root@radius-389-test ~]# dsidm radius-389-test user list
> demo_user
> [root@radius-389-test ~]# dsidm radius-389-test user get demo_user
> dn: uid=demo_user,ou=people,dc=radius,dc=example,dc=org
> cn: Demo User
> displayName: Demo User
> gidNumber: 99998
> homeDirectory: /var/empty
> legalName: Demo User Name
> loginShell: /bin/false
> objectClass: top
> objectClass: nsPerson
> objectClass: nsAccount
> objectClass: nsOrgPerson
> objectClass: posixAccount
> uid: demo_user
> uidNumber: 99998
>
>
>
> However, I can't seem to connect to the server via ldapsearch or with
> Apache Directory Studio.
>
>
> [root@radius-389-test ~]# ldapsearch -v -H
> "ldapi://%%2fvar%%2frun%%2fslapd-radius-389-test.socket" -b
> "ou=people,dc=radius,example,dc=org" -D "cn=Directory Manager" -x -W
> uid=demo_user
> ldap_initialize( ldapi:///??base )
> Enter LDAP Password:
> ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)
> [root@radius-389-test ~]# ldapsearch -v -H "ldap://127.0.0.1" -b
> "ou=people,dc=radius,example,dc=org" -D "cn=Directory Manager" -x -W
> uid=demo_userldap_initialize( ldap://127.0.0.1:389/??base )
> Enter LDAP Password:
> ldap_bind: Invalid credentials (49)
>     additional info: Invalid credentials

This means you used the wrong password, you need to use whatever was set
for "root_password" in the INF file.  But it wouldn't hurt to check the
access log for "err=49" and it will give you the exact reason for the
failure (most likely bad password, but we'll see)...

HTH,

Mark

>
>
>
> This is the inf-file:
>
> [general]
> full_machine_name = radius-389-test.example.org
> [slapd]
> instance_name = radius-389-test
> root_password = random
> [backend-userroot]
> create_suffix_entry = True
> sample_entries = yes
> suffix = dc=radius,dc=example,dc=org
>
>
> What am I doing wrong?
>
>
>
>
>
>
>
>
>
> _______________________________________________
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org

--

389 Directory Server Development Team
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org