Sun Microsystems, Inc.  Sun System Handbook - ISO 3.4 June 2011 Internal/Partner Edition
   Home | Current Systems | Former STK Products | EOL Systems | Components | General Info | Search | Feedback

Asset ID: 1-71-1017560.1
Update Date:2009-06-23
Keywords:

Solution Type  Technical Instruction Sure

Solution  1017560.1 :   How to debug Open LDAP issues when used with Sun StorageTek[TM] NAS.  


Related Items
  • Sun Storage 5210 NAS Appliance
  •  
  • Sun Storage 5310 NAS Appliance
  •  
  • Sun Storage 5320 NAS Gateway/Cluster System
  •  
  • Sun Storage 5320 NAS Appliance
  •  
  • Sun Storage 5310 NAS Gateway System
  •  
Related Categories
  • GCS>Sun Microsystems>Storage - Disk>Network Attached Storage
  •  

PreviouslyPublishedAs
228705


Description
The intent of this document is to a provide a procedure on how we can debug issues when Sun StorageTek[TM] NAS is configured with OpenLDAP on Linux Systems.
This document does not cover any configuration details on OpenLDAP and reader are requested to refer to appropriate document on how to configure OpenLDAP.


Steps to Follow
1. First we would check if NSSLDAP is configured on NAS. Start the telnet menu and press space bar to scroll the option on the right hand side bottom. Select the appropriate option once "NSSLDAP Services" is displayed in the menu. If NSSLDAP is configured on the NAS head we would be able to see the entries similar to the ones shown below :
Enable                Yes
Domain (DN)           cn=manager,dc=mydomain,dc=com
Server                192.15.200.121
Password              **********
Where :
Domain (DN) : This is the distinguished name to bind to the server with. Both binddn and rootbinddn are set to same. Environment variable set with this 
option are "lookup.nssldap.binddn" and "lookup.nssldap.rootbinddn"
Server : IP Address of system where OpenLDAP is installed and configured. Please use the IP address and avoid using hostname. Environment variable set with 
this is option"lookup.nssldap.host"
Password : This is the password used during the bind operation for no root user ID. Both bindpw and rootbindpw are set to the same value. Environment variable 
set with this option are "lookup.nssldap.bindpw" and "lookup.nssldap.rootbindpw"

2. On the Linux host where OpenLDAP is installed start the OpenLDAP in the debug mode. We can start the ldap with following command

/usr/local/libexec/slapd -d <Debug Level>
Where
* /usr/local/libexec is the default installation directory for OpenLDAP. Please check the location where slapd is installed if the default directory is 
changed while installation. * <Debug Level> is between 0 - 9 with 9 being the highest level.

For most of the issue debug level 4 would be sufficient.

# /usr/local/libexec/slapd -d 4

While starting slapd in debug mode it is started in the foreground and messages are logged to standard error.

NOTE: If you wish to log the messages to a file start the slapd with redirecting the standard error to a file :

# /usr/local/libexec/slapd -d 4 2> /tmp/slapd_logs.out &

"slapd" would start logging the messages the movement NAS head start communication with OpenLDAP server. Out of the messages logged by the host on console, look at the send_ldap_result output as shown below :

==> bdb_bind: dn: cn=manager,dc=mydomain,dc=com
send_ldap_result: err=0 matched="" text=""

If the "err" is not 0, then we are having issues while connecting to the LDAP directory through the binddn (lookup.nssldap.binddn) specified on the NAS head. The err may vary, please use LDAP Error Codes to know the details of the error code.



Product
Sun StorageTek 5210 NAS Appliance
Sun StorageTek 5310 NAS Gateway/Cluster System
Sun StorageTek 5310 NAS Gateway System
Sun StorageTek 5310 NAS Appliance
Sun StorageTek 5320 NAS Gateway/Cluster System
Sun StorageTek 5320 NAS Appliance
Sun StorageTek 5320

NAS, 5x10, 5310, 5320, 5220, Open LDAP, LDAP, binddn, rootbinddn, bindpw, rootbindpw, nssldap
Previously Published As
89475

Change History
Date: 2007-06-11
User Name: 95826
Action: Approved
Comment: - verified metadata
- changed review date to 2008-06-11
- checked for TM - 2 added + full product name
- checked audience : contract
- no further edit required
Publishing
Version: 5
Date: 2007-06-11
User Name: 95826
Action: Accept
Comment:
Version: 0
Date: 2007-06-11
User Name: 147406
Action: Approved
Comment: Hi,
The suggested change has been incorporated. Please do the final review.
regards,
Sushil
Version: 0


Attachments
This solution has no attachment
  Copyright © 2011 Sun Microsystems, Inc.  All rights reserved.
 Feedback