topic Re: Authentication on OpenLDAP in Operating System - HP-UX

Authentication on OpenLDAP

Fred Lacombe — Tue, 10 Aug 2004 08:23:50 GMT

Hi All,

i want to configure HP-UX 11.00 to authenticate on OpenLDAP. After downloading LDAPUX Integration package and adding ldapux.schema to OpenLDAP service, the /opt/ldapux/config/setup program starts as wished, but I've got an error :
PFMERR 41: Can't download Profile Entry from Directory Server!
I can check that I've got the right prile entry read on the server side, but it seems I can't download it.

On the same way, I have no ldap logs from pwget command and similars.

Can anybody gives me any advices on that topic please.

Many thanks,

Fred

Re: Authentication on OpenLDAP

Jeff Schussele — Tue, 10 Aug 2004 08:46:56 GMT

Hi Fred,

Is port 389 open to the LDAP server?
Try to telnet to that port on that server.

Rgds,
Jeff

Re: Authentication on OpenLDAP

Fred Lacombe — Tue, 10 Aug 2004 08:53:52 GMT

Hi Jeff,

the port is opened, I can even do ldapsearch on the directory. It seems that my probem get more focused. I'e checked with 'display_profile_cache', and I've got some entries in there. So it seems the problem is somewhere else... tracing system calls I can see that a 'pwget' interacts with ldap libs but there is no logs on server side.

Re: Authentication on OpenLDAP

Dave Olker — Tue, 10 Aug 2004 11:07:12 GMT

Hello Fred,

My friend and colleague Doug Lamoureux has written an excellent white paper on the subject of integrating HP-UX authentication with OpenLDAP. I've attached a copy of the white paper here.

I hope this paper helps you resolve your OpenLDAP issue.

Regards,

Dave

Re: Authentication on OpenLDAP

Fred Lacombe — Tue, 10 Aug 2004 11:19:30 GMT

Thanks Dave,

I'll read this doc in details, from the summary, many informations should be useful for my configuration.

I've pointed out what was wrong anyway... As it's on a test server, someone changed the /etc/ldap.conf and comment out base and uri entries ! An ldapsearch request was suddenly wrong....

everything is fine now ! Even for Samba authentication.

Many thanks.