Problem on Solaris 10 Native ldap client.

Hi,

I have configured the DS 5.2 on Solaris 10 and it seems to be working.

I'm getting the answers from the ldapsearch command with the SSL.

./ldapsearch -h ismesl90 -p 636 -Z -P /var/ldap -D "cn=Directory Manager" -w password -b "cn=Password Policy,cn=config" "(objectclass=*)"

version: 1

dn: cn=Password Policy,cn=config

objectClass: top

objectClass: passwordPolicy

cn: Password Policy

passwordInHistory: 0

passwordStorageScheme: CRYPT

passwordUnlock: on

passwordMustChange: off

passwordNonRootMayResetUserpwd: off

passwordWarning: 86400

passwordExpireWithoutWarning: on

passwordLockout: off

passwordMinLength: 6

passwordMaxFailure: 3

passwordMaxAge: 8640000

passwordResetFailureCount: 600

passwordisglobalpolicy: off

passwordChange: on

passwordExp: off

passwordLockoutDuration: 3600

passwordCheckSyntax: off

passwordMinAge: 0

passwordRootdnMayBypassModsChecks: off

but on the client it complians about the connection:

ul 20 18:50:16 king ldap_cachemgr[2823]: [ID 293258 daemon.warning] libsldap: Status: 81 Mesg: openConnection: simple bind failed - Can't contact LDAP server

Jul 20 18:50:16 king ldap_cachemgr[2823]: [ID 293258 daemon.warning] libsldap: Status: 7 Mesg: Session error no available conn.

Jul 20 18:50:16 king ldap_cachemgr[2823]: [ID 186574 daemon.error] Error: Unable to refresh profile:default: Session error no available conn.

I have installed the latest patches on both machines and it didn't solved the problem.

The ldapsearch command that comes with the DS 5.2 works and the native doesn't.

I have create the keys and cert's and everything.

Have someone faced this problem?

Thanks,

Shalom

Message was edited by:

shalomG

[1926 byte] By [shalomG] at [2007-11-26 8:55:01]
# 1
This perfectly describes the same problem I am currently having. Have you had any success in solving it?
AaronDuncan at 2007-7-6 22:52:00 > top of Java-index,General,Sun Networking Services and Protocols...
# 2

Hi,

I had a similar problem. Additionally /var/ldap/cachemgr.log showed every 12hours:

=cut=

Sun Apr 29 10:40:55.4968Error: Unable to refresh profile:tls_profile:Session error no available conn.

Sun Apr 29 10:40:55.4969Error: Unable to update from profile

Sun Apr 29 22:40:55.5163Error: Unable to refresh profile:tls_profile:Session error no available conn.

Sun Apr 29 22:40:55.5164Error: Unable to update from profile

=cut=

I could resolve this executing:

bash-3.00# svcadm restart network/ldap/client

-and-

bash-3.00# pkill -HUP ldap_cachemgr

seams that ldap client was not using the latest configuration..

DavidSchulz at 2007-7-6 22:52:00 > top of Java-index,General,Sun Networking Services and Protocols...