Sun System Handbook - ISO 3.4 June 2011 Internal/Partner Edition | |||
|
|
Solution Type Technical Instruction Sure Solution 1017560.1 : How to debug Open LDAP issues when used with Sun StorageTek[TM] NAS.
PreviouslyPublishedAs 228705 Description The intent of this document is to a provide a procedure on how we can debug issues when Sun StorageTek[TM] NAS is configured with OpenLDAP on Linux Systems. This document does not cover any configuration details on OpenLDAP and reader are requested to refer to appropriate document on how to configure OpenLDAP. Steps to Follow 1. First we would check if NSSLDAP is configured on NAS. Start the telnet menu and press space bar to scroll the option on the right hand side bottom. Select the appropriate option once "NSSLDAP Services" is displayed in the menu. If NSSLDAP is configured on the NAS head we would be able to see the entries similar to the ones shown below : Enable Yes Domain (DN) cn=manager,dc=mydomain,dc=com Server 192.15.200.121 Password ********** Where : Domain (DN) : This is the distinguished name to bind to the server with. Both binddn and rootbinddn are set to same. Environment variable set with this Server : IP Address of system where OpenLDAP is installed and configured. Please use the IP address and avoid using hostname. Environment variable set with Password : This is the password used during the bind operation for no root user ID. Both bindpw and rootbindpw are set to the same value. Environment variable 2. On the Linux host where OpenLDAP is installed start the OpenLDAP in the debug mode. We can start the ldap with following command /usr/local/libexec/slapd -d <Debug Level> Where * /usr/local/libexec is the default installation directory for OpenLDAP. Please check the location where slapd is installed if the default directory is For most of the issue debug level 4 would be sufficient. # /usr/local/libexec/slapd -d 4 While starting slapd in debug mode it is started in the foreground and messages are logged to standard error. NOTE: If you wish to log the messages to a file start the slapd with redirecting the standard error to a file : # /usr/local/libexec/slapd -d 4 2> /tmp/slapd_logs.out & "slapd" would start logging the messages the movement NAS head start communication with OpenLDAP server. Out of the messages logged by the host on console, look at the send_ldap_result output as shown below : ==> bdb_bind: dn: cn=manager,dc=mydomain,dc=com send_ldap_result: err=0 matched="" text="" If the "err" is not 0, then we are having issues while connecting to the LDAP directory through the binddn (lookup.nssldap.binddn) specified on the NAS head. The err may vary, please use LDAP Error Codes to know the details of the error code. Product Sun StorageTek 5210 NAS Appliance Sun StorageTek 5310 NAS Gateway/Cluster System Sun StorageTek 5310 NAS Gateway System Sun StorageTek 5310 NAS Appliance Sun StorageTek 5320 NAS Gateway/Cluster System Sun StorageTek 5320 NAS Appliance Sun StorageTek 5320 NAS, 5x10, 5310, 5320, 5220, Open LDAP, LDAP, binddn, rootbinddn, bindpw, rootbindpw, nssldap Previously Published As 89475 Change History Date: 2007-06-11 User Name: 95826 Action: Approved Comment: - verified metadata - changed review date to 2008-06-11 - checked for TM - 2 added + full product name - checked audience : contract - no further edit required Publishing Version: 5 Date: 2007-06-11 User Name: 95826 Action: Accept Comment: Version: 0 Date: 2007-06-11 User Name: 147406 Action: Approved Comment: Hi, The suggested change has been incorporated. Please do the final review. regards, Sushil Version: 0 Attachments This solution has no attachment |
||||||||||||
|