LDAP Client install error "ldap_simple_bind: No such object"

[Tony Constantine]

Running the following to setup an ldap client (elendil.ipcmedia.com) /opt/ldapux/config/setup and we are getting the following error

"ldap_simple_bind: No such object"

The client has J4269AA B.03.30.02 LDAP-UX Integration installed

The server is running J4258CA B.06.11.40 Netscape Directory Server v6 for HP-UX

we setup the Netscape directory with the default options

cn=directory manager
serverport=389

[Tony Constantine]

just to add to the to the previous post we also get the following error message


PFMERR 16: Please verify whether you have appropriate access
right to cn=directory manager!

[Arunvijai_4]

Hello,

Did you set your LDAP server correctly ? I believe, there could be a configuration problem elsewhere in your configuration file.

http://docs.hp.com/en/T1428-90055/ch01s03.html

-Arun

[Tony Constantine]

Hi Arunvijai

I just used the default options when setting up the netscape directory server v6

Looking at the link you posted we do not have any paths on out hpux server referencing to /opt/aaa

I've search our filesystem and cannot find any of the files listed in step 1


1.Copy /opt/aaa/diameter/examples/proldap/55iaaa-diameter.ldif and /opt/aaa/diameter/examples/proldap/55iaa-radius.ldif to the LDAP server schema directory (/var/opt/netscape/servers/slapd-/config/schema).

2. Restart the directory server.

3. Create an LDIF file for your user profiles and import to the directory.

[Ralph Grothe]

Sounds to me as if the slapd cannot find an LDIF definition for a ldap_simple_bind object.
Have you set up SASL bind or something else more intricate than a simple bind?
Can you run an ldapsearch -x
for a simple bind from any other client, or better on the LDAP server itself, successfully.
Are you using the correct bind DN (together with ldapsearch -D), or have you preset the bind DN within a client's config or environment?

[Tony Constantine]

We havn't setup any SASL binds,

What is the base DN?? is this the directory manager

we havn't managed to to setup the clients config so I guess there is no preset DN
/opt/ldapux/config/setup

[Arunvijai_4]

Hello,

Base DN is nothing but Domain Name, You can read more information about DN, http://www.idevelopment.info/data/LDAP/LDAP_Resources/DEPLOY_Choosing_a_Base_DN.shtml

Also, check your error logs, $DIR_HOME/slapd-/logs/errors

-Arun

[Tony Constantine]

so would the syntax be somethink like

ldapsearch -b dc=,dc=com

[Arunvijai_4]

Sorry, sorry.. DN is Distinguished Name. A DN is a sequence of relative distinguished names (RDN) connected by commas.

-Arun

[Tony Constantine]

There are no errors in /slapd-/logs

all it shows that the directory is started and listing for ldap requests

[18/Jan/2006:13:08:23 +0000] - Netscape-Directory/6.11 B2004.206.0122 starting up
[18/Jan/2006:13:08:26 +0000] - slapd started. Listening on All Interfaces port 389 for LDAP requests

It looks as though the Netscape Directory is ok it just the setting up of the client

here is where the client setup fails

/opt/ldapux/config/setup

Profile Entry DN: []: cn=directory manager

User DN []: admin

Password [] password

ldap_simple_bind: No such object

Press any key to continue:

PFMERR 16: Please verify whether you have appropriate access right to cn=directory manager !

[Ralph Grothe]

Try a simple anonymous bind without authentication like this

ldapsearch -x -h {FQDN_LDAP_Server | IP_LDAP_Server} -b 'dc=your,dc=suffix,dc=tld' -s sub '(objectclass=*)'

I hope your directory is still empty,
otherwise the dump could be too excessive.
-h specifies your LDAP server,
-x requests for a simple bind,
-b is your search entry point
(chose your root suffix here to start from the top (n.b. dc stands for domain component, but your naming scheme may vary,
remeber the suffix you entered during the setup)
-s the depth of search (should default to sub anyway)
and finally the filter should match everything.

Depending on your ACIs/ACLs it could be mandatory that you have to bind under a certain distinguished name (DN).
Then you could chose the DN of your directory admin account together with his password, or any valid uid whose ACI permit it, should your directory already contain any.
e.g.
-D "cn=Directory Manager" -W
should prompt you for admin password.

[Tony Constantine]

./ldapsearch -x -h 10.132.43.8 -b dc=ipc,dc=com -s sub '(objectclass=*)'
ldap_search: No such object

is this the correct syntax for the objectclass '(objectclass=*)'