Ldap

HCL Domino Domino Forum
1

I’m trying to connect to an LDAP server for authentication of users accessing our website. The LDAP server is hosted by our corporate offices and the web is running on one of our servers locally. I can ping the host name (had to put an entry in the host file) I can ping the IP address, however when I do a LOAD LDAPSEARCH command, I get the following error message:

ldap_bing_s( dn=, pw=, method=128 )failed, error: resultCode 81 (Can’t contact LDAP server)

Anyone have any idea what is going wrong?

Thanks for your help.

2

Subject: LDAP

You need to load ldapsearch with the right parameters…

If you start out by trying from your PC (don’t know if you already do, but I think you are doing it from a server console ?)

Start a DOS prompt, and move to your lotus directory (eg. c:\lotus\notes)

run the command as follows:

ldapsearch -h [remote ldap server name] “cn=[your name]”

This should result in a response from the LDAP server.

/Brian

3

Subject: RE: LDAP

Thanks for your replies,

I believe there might be a firewall blocking things, because I have the same directory assistance file on internal servers for which the ldapsearch command DOES return valid responses, however the servers that I’m trying to do this on is in our DMZ. I’ve requested them to open both port 389 and 636 however I haven’t heard back yet, I’ll be in the office on 12/28 and will find out if they did it or not and if so, if I can get to it or not.

Thanks again.

JohnD

4

Subject: LDAP

Hi John,

I have something you could try.

From the Domino server console, try doing a “load nslookup <my.server.com>” and making sure the remote server can at least be reached by the Domino server. If it can…

The LDAPSEARCH command uses a default port of 389. Maybe the server you’re trying to point to is set up to use SSL, which would mean that they might be running on port 636, or maybe they’re not using SSL and they’ve just picked a nonstandard port to service LDAP requests. Can you confirm what port they’re using with someone??

Just some things to look at. Please post back and let us know how it goes. =)

+Josh+