Forum OpenACS Q&A: Re: External Authentication

12: Re: External Authentication - LDAP question (response to 11)

Posted by Chris Grant on 10/13/04 04:55 AM

when i tried ns_param host "localhost:389" i got the error:
Error: nsldap: could not bind to server localhost:389: Protocol error

trying just localhost gave the same error except it did not say the port, just "could not bind to server localhost: Protocol error"

yes, ldap is running on the same box as oacs...

13: Re: External Authentication - LDAP question (response to 12)

Posted by Chris Grant on 10/13/04 05:26 AM

does it have anything to do with the password for the rootdn being a plain text password? i tried to put an empty password in, but came up with the same error...
would i need to encrypt the password?

14: Re: External Authentication - LDAP question (response to 13)

Posted by Rocael Hernández Rizzardini on 10/13/04 06:20 AM

plain-text password is ok, why you dont try a standard port?, lets say, when you connect to your server using ldapsearch just use "localhost", try to configure ldap and let us know.

15: Re: External Authentication - LDAP question (response to 13)

Posted by Malte Sussdorff on 10/13/04 06:22 AM

can you connect via telnet to the port? Try "telnet 127.0.0.1 389" to see what comes up. If you see the LDAP server then we have to look in AOLserver/OpenACS for the problem, otherwise it is something in your setup of LDAP.

16: Re: External Authentication - LDAP question (response to 15)

Posted by Chris Grant on 10/13/04 06:38 AM

Rocael, i tried just using localhost when setting up the ldap server, but it gives me the error:
"could not bind to server localhost: Protocol error"

i also tried to telnet to localhost:389 and 127.0.0.1:389 (setting up the ldap server for each case, but each time, it says:
"Temporary failure in name resolution 127.0.0.1:389: Host name lookup failure"
i also tried telnet ldap://127.0.0.1:389 and telnet ldap://localhost:389 without success.
i guess it's the LDAP setup then?

17: Re: External Authentication - LDAP question (response to 16)

Posted by Bruno Mattarollo on 10/13/04 07:05 AM

Hey Chris

Try telnet localhost 389 (note the whitespace between localhost and 389) instead of putting the :.

18: Re: External Authentication - LDAP question (response to 17)

Posted by Chris Grant on 10/13/04 07:19 AM

thanks Bruno, it worked.
says: "Connected to localhost"

so i guess the problem is not ldap? does anyone have an idea?

19: Re: External Authentication - LDAP question (response to 18)

Posted by Chris Grant on 10/13/04 07:54 AM

i changed the slapd.conf file (for openldap) so that it allows binding with LDAPv2. this seemed to do something, because now i get a strange error message:
"error: nsldap: could not open connection to server ldap://localhost" on port 389: Success"
i does anyone know what this means? it still says:
"could not allocate 1 handle from pool ldap" though...

20: Re: External Authentication - LDAP question (response to 19)

Posted by Chris Grant on 10/13/04 02:17 PM

hi guys, thanks for all your help! i've managed to get it working now =)

Forum OpenACS Q&A: Re: External Authentication - LDAP question