#1
  1. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Aug 2003
    Location
    NJ
    Posts
    7
    Rep Power
    0

    LDAP newbie help


    I am trying to setup LDAP on RH8 to act as an address book for Outlook users. I have read several examples and don't understand what I am missing.

    My slapd.conf file:
    database ldbm
    suffix "dc=mycompany,dc=com"
    rootdn "cn=Manager,dc=mycompany,dc=com"
    rootpw mypassword
    directory /var/lib/ldap
    index objectClass,uid,uidNumber,gidNumber,memberUid eq
    index cn,mail,surname,givenname eq,subinitial

    From Outlook I get invalid DN syntax error 34

    From server cmd line doing:
    ldapadd -x -D "cn=root" -w mypassword -h localhost
    Output: ldap_bind: Invalid credentials
  2. #2
  3. Psycho Canadian
    Devshed Demi-God (4500 - 4999 posts)

    Join Date
    Jan 2001
    Location
    Canada
    Posts
    4,846
    Rep Power
    635
    root dn needs to be
    cn=Manager,dc=mycompany,dc=com not cn=root
  4. #3
  5. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Aug 2003
    Location
    NJ
    Posts
    7
    Rep Power
    0
    I can change cn=<anything> and it still gets the same error.
  6. #4
  7. Psycho Canadian
    Devshed Demi-God (4500 - 4999 posts)

    Join Date
    Jan 2001
    Location
    Canada
    Posts
    4,846
    Rep Power
    635
    can you log on with an annomous bind?
  8. #5
  9. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Aug 2003
    Location
    NJ
    Posts
    7
    Rep Power
    0
    One problem resolved. Outlook needs to be restarted after making any changes. I can now connect to the LDAP server and see an entry I added from the cmd line.

    But I cannot connect to add entries. Whenever I use a login and password I get "Invalid DN syntax".

    What user do I enter into a ldap utility to connect as? root? Manager? I don't get it.

    Current config:
    database ldbm
    suffix "dc=mycompany,dc=com"
    rootdn "cn=Manager,dc=mycompany,dc=com"
    rootpw mypassword
  10. #6
  11. Psycho Canadian
    Devshed Demi-God (4500 - 4999 posts)

    Join Date
    Jan 2001
    Location
    Canada
    Posts
    4,846
    Rep Power
    635
    your root dn is
    rootdn "cn=Manager,dc=mycompany,dc=com" so you have to connect with

    cn=Manager,dc=mycompany,dc=com

    to connect as root
  12. #7
  13. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Aug 2003
    Location
    NJ
    Posts
    7
    Rep Power
    0
    No wonder I didn't get it!!! I kept thinking the login name is a single word "Manager" or "root". I had no idea you enter the whole thing into the user name.

    I can now login with a user name but Outlook cannot add or modify entries as "Manager". I get no error.
  14. #8
  15. Psycho Canadian
    Devshed Demi-God (4500 - 4999 posts)

    Join Date
    Jan 2001
    Location
    Canada
    Posts
    4,846
    Rep Power
    635
    did you enter your password in Outlook?
  16. #9
  17. No Profile Picture
    Registered User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Aug 2003
    Location
    NJ
    Posts
    7
    Rep Power
    0
    Yes the login and password are in Outlook. If I intentionally enter a wrong password Outlook won't let me connect (error 48). I connect as the rootdn but it won't let me modify or add entries.
  18. #10
  19. Psycho Canadian
    Devshed Demi-God (4500 - 4999 posts)

    Join Date
    Jan 2001
    Location
    Canada
    Posts
    4,846
    Rep Power
    635
    perhaps outlook doesn't support it

IMN logo majestic logo threadwatch logo seochat tools logo