LDAP-UX Client Services B.04.00 Administrator's Guide

Administering LDAP-UX Client Services
Troubleshooting
Chapter 4 135
If you are using a proxy user (determined by the credentialLevel
attribute in the configuration profile), try searching for one of your
user’s information in the directory as the proxy user with a command
like the following:
cd /opt/ldapux/bin
./ldapsearch -h
servername -b “ baseDN ”-D" proxyuser "-w\
passwd uid= username
using the name of your directory server (from display_profile_cache),
search base DN (from display_profile_cache), proxy user (from
ldap_proxy_config -p), proxy user password, and a user name from
the directory.
For example:
cd /opt/ldapux/bin
./ldapsearch -h sys001.hp.com -b “ou=people, o=hp.com” \
-D "uid=proxyuser,ou=special users,o=hp.com" -w passwd \
uid=steves
You should get output like the following:
dn: uid=steves,ou=people o=hp.com
uid: steves
cn: Steve Sy
objectclass: top
objectclass: account
objectclass: posixAccount
loginshell: /bin/ksh
uidnumber: 2875
gidnumber: 191
homedirectory: /home/steves
gecos: Steve Sy, building 5, x50
If you don’t, your proxy user may not be configured properly. Make
sure you have access permissions set correctly for the proxy user. See
the steps “Create a proxy user” and “Set access permissions for the
proxy user” under the procedure “Configure Your Directory” on
page 21 for details on configuring the proxy user.
You can also try binding to the directory as the directory
administrator and reading the user’s information.
If you are using anonymous access, (determined by the value of the
credentialLevel attribute in the configuration profile), try searching
for one of your user’s information in the directory with a command
like the following:
./ldapsearch -h servername -b “o=hp.com” uid= username