Dear list,
Yet another newbie having trouble setting up openldap!
On Debian Lenny with ip 10.0.2.6 I have set up my openldap server listening on port 389 . From here I can do a ldapsearch and getent passw showing ldap is working.
From the client I can do: ldapsearch -x -W -b 'dc=pdc,dc=com' -D 'cn=admin,dc=pdc,dc=com' -H 'ldap://10.0.2.6:389/' 'objectclass=*' : Works! telnet 10.0.2.6 389 : Works! getent passwd shows no ldap entries.
Running nslcd in debug shows:
nslcd: DEBUG: add_uri(ldap:///10.0.2.6) nslcd: version 0.7.6 starting nslcd: DEBUG: unlink() of /var/run/nslcd/socket failed (ignored): No such file or directory nslcd: DEBUG: setgroups(0,NULL) done nslcd: DEBUG: setgid(122) done nslcd: DEBUG: setuid(119) done nslcd: accepting connections nslcd: [8b4567] DEBUG: connection from pid=5176 uid=1000 gid=1000 nslcd: [8b4567] DEBUG: nslcd_passwd_all() nslcd: [8b4567] DEBUG: myldap_search(base="dc=pdc,dc=com", filter="(objectClass=posixAccount)") nslcd: [8b4567] DEBUG: ldap_initialize(ldap:///10.0.2.6) nslcd: [8b4567] DEBUG: ldap_set_rebind_proc() nslcd: [8b4567] DEBUG: ldap_set_option(LDAP_OPT_PROTOCOL_VERSION,3) nslcd: [8b4567] DEBUG: ldap_set_option(LDAP_OPT_DEREF,0) nslcd: [8b4567] DEBUG: ldap_set_option(LDAP_OPT_TIMELIMIT,0) nslcd: [8b4567] DEBUG: ldap_set_option(LDAP_OPT_TIMEOUT,0) nslcd: [8b4567] DEBUG: ldap_set_option(LDAP_OPT_NETWORK_TIMEOUT,0) nslcd: [8b4567] DEBUG: ldap_set_option(LDAP_OPT_REFERRALS,LDAP_OPT_ON) nslcd: [8b4567] DEBUG: ldap_set_option(LDAP_OPT_RESTART,LDAP_OPT_ON) nslcd: [8b4567] DEBUG: ldap_simple_bind_s(NULL,NULL) (uri="ldap:///10.0.2.6") nslcd: [8b4567] failed to bind to LDAP server ldap:///10.0.2.6: Can't contact LDAP server: Transport endpoint is not connected
On Friday, 9 July 2010 10:13:39 Joakim Seeberg wrote:
From the client I can do: ldapsearch -x -W -b 'dc=pdc,dc=com' -D 'cn=admin,dc=pdc,dc=com' -H 'ldap://10.0.2.6:389/' 'objectclass=*' : Works!
[...]
Running nslcd in debug shows:
nslcd: DEBUG: add_uri(ldap:///10.0.2.6)
Compare the URI that works ("ldap://10.0.2.6:389/") to the one that doesn't ("ldap:///10.0.2.6").
2nd one has an extra "/" before the host/IP component.
Regards, Buchan
openldap-technical@openldap.org