8/15/2016

LDAPConnectivityTestCentOS

CentOS
Quicklinks

FAQ

Register

Login

Boardindex CentOS5 CentOS5NetworkingSupport

LDAP Connectivity Test

PostReply

Searchthistopic

5postsPage1of1

bensewell1

LDAP Connectivity Test

2011/07/1209:15:45
P

Hi,
I need to check that i can hit traffic on a LDAP server that is on another domain conected to our network. The CISCO team
have enable rules to allow traffic from my Centos server to the IP of the AD server on port 389. But how do i test that this
is working? I can't do a ping because this is blocked the CISCO rule only allows for traffic coming through on port 389 the
default LDAP port.
Any ideas?
o

bensewell1

Re: LDAP Connectivity Test

2011/07/1210:25:59
P

I managed to SSH to my server and then from the server run a telnet to the LDAP server, see below:
login as: root
root@testbox's password:
Last login: Tue Jul 12 09:45:12 2011
[root@testbox ~]# telnet X.X.X.X 389
Trying X.X.X.X...
Connected to ldap.domain1.co.uk (X.X.X.X).
Escape character is '^]'.

However when i try and run anything on the telnet session i get an error of:
P1.3.6.1.4.1.1466.20036Connection closed by foreign host.
So this is connecting but then at the LDAP end the connection is terminated some how?
Weird?
o

TrevorH
ForumModerator

Re: LDAP Connectivity Test

https://www.centos.org/forums/viewtopic.php?t=26835

1/2

8/15/2016

LDAPConnectivityTestCentOS

2011/07/1210:45:02
P

Use ldapsearch assuming you have set up /etc/ldap.conf (and possibly /etc/openldap/ldap.conf) up correctly then you be
able to run
CODE: SELECT ALL

ldapsearchD"mydomain\myuser"xW
T

o
r_hartman

LDAP Connectivity Test

2011/07/1211:07:23
P

After setting up /etc/openldap/ldap.conf (I usually have a symbolic link /etc/ldap.conf pointing to it) properly, a quick
verification can be done with 'id ldapuser' where ldapuser is a valid userid served by the ldapserver. If communications
work you'll get the uid, gid and other group info back.
CODE: SELECT ALL

#idldapuser
uid=1000(ldapuser)gid=1000(ldap_users)groups=1000(ldap_users),1001(fwbuilder)

With CentOS6, it doesn't neccessarily mean you can bind successfully from that user, as I found out a few weeks back, but
it does give you some indication things should work.
If you get
CODE: SELECT ALL

id:ldapuser:Nosuchuser

something does not work properly.

T

Displaypostsfromprevious: Allposts
Sortby Posttime
Ascending
Go

5postsPage1of1

PostReply
ReturntoCentOS5NetworkingSupport

Jumpto
WHOISONLINE

Usersbrowsingthisforum:Noregisteredusersand0guests
Boardindex

Theteam

Deleteallboardcookies AlltimesareUTC

PoweredbyphpBBForumSoftwarephpBBLimited

https://www.centos.org/forums/viewtopic.php?t=26835

2/2