Tivoli LDAP and LDAPUX

[Jason T Murphy]

I am trying to get several HP/UX 11.11 systems to work with LDAPUX. On my test system I have installed and configured LDAPUX to send its queries to a Redhat Linux ES 3 server running IBM Tivoli LDAP 6.0.1 (The latest version). I have imported my /etc/passwd and /etc/group files to the LDAP server via the migration scripts that are included with LDAPUX. The test server has all of the correct patches installed, is configured properly (As far as I can tell) and is working perfect in all manner.

I know the data that is loaded into the LDAP server and is in the proper RFC2307 format. I know the objects have the correct attributes and I know that anonymous binds to the server work just find. In fact, on my test server I can use the ldapsearch tool to do successful queries against the Tivoli LDAP server. The information that is returned is valid and I do not use SSL or TSL, just plain text.

My problem is that queries sent to the Tivoli LDAP server are not working. I have Ethereal on the LDAP server and I can see the queries it is receiving from the test machine and the ones related to LDAPUX are not formated correctly.

For example, if I type on the command line: “/opt/ldapux/bin/ldapsearch -x -h 10.66.5.1 -b 'uid=jmurphy,ou=People,dc=company' uid=jmurphy”.
I get this back:

version: 1
dn: uid=jmurphy,ou=People,dc=company
uid: jmurphy
cn: Jason Murphy
objectClass: account
objectClass: posixAccount
objectClass: top
loginShell: /usr/local/bin/bash
uidNumber: 264
gidNumber: 80
homeDirectory: /home/jmurphy
gecos: Jason Murphy,Systems Admin,

If I type “id jmurphy” on the test server, I can see that the test box sends a LDAP query to the LDAP server, but I get a “unknown user” error message from "id". In Ethereal, I see this information being sent from the test box to the LDAP server:

Lightweight Directory Access Protocol
LDAP Message, Search Request
Message Id: 2
Message Type: Search Request (0x03)
Message Length: 170
Response In: 7528
Base DN: ou=People,dc=company
Scope: Subtree (0x02)
Dereference: Never (0x00)
Size Limit: 0
Time Limit: 0
Attributes Only: False
Filter: (&(uid=jmurphy)(objectclass=posixaccount))
Attribute: uid
Attribute: uidnumber
Attribute: gidnumber
Attribute: loginshell
Attribute: *NULL*
Attribute: homedirectory
Attribute: gecos
Attribute: (null)
Attribute: (null)
Attribute: (null)
Attribute: (null)

From what I can see, the format it is sending in, is not running deep enough into the LDAP tree.


The big question is, how do I get LDAPUX to use the Base DN of “uid=jmurphy,ou=People,dc=company” and not just “ou=People,dc=company”. As you can guess, uid=username is not static and changes with each user.
The next question is, what line should I put in my “/etc/opt/ldapux/ldapux_profile.ldif” to get the proper queries? How do I get LDAP to be more specific in its queries?
Has anyone gotten LDAPUX to work with Tivoli LDAP 6.0?

Thank You