Difference between revisions of "LDAP"
From GWAVA Technologies Training
(Created page with "=Lightweight Directory Access Protocol (LDAP)= LDAP is a protocol for directory structures (eDirectory and Active Directory) to talk to each other. ==LDAP Structure== There ...") |
|||
| Line 22: | Line 22: | ||
*773 user must reset password | *773 user must reset password | ||
*775 user account locked | *775 user account locked | ||
| + | |||
| + | ==LDAP Troubleshooting Tools== | ||
| + | There are a few tools take can be handy in dealing with LDAP issues. | ||
| + | |||
| + | [http://www.ldapbrowser.com/info_softerra-ldap-browser.htm Softerra LDAP Browser] is a very good tool since it is a read-only device so it can't do anything dangerous. | ||
| + | |||
| + | [http://directory.apache.org/studio/ Apache Directory Studio] This is a more powerful tool as it can write to directory structures, given proper credentials. | ||
Revision as of 21:22, 22 August 2014
Contents |
Lightweight Directory Access Protocol (LDAP)
LDAP is a protocol for directory structures (eDirectory and Active Directory) to talk to each other.
LDAP Structure
There are only four basic fields in LDAP Data Interchange Format (LDIF)
- dc Domain Component (dc=gwava,dc=com)
- ou Organizational Unit (ou=provo or ou=montreal)
- cn Common Name (cn=Stephan Fassmann or cn=confRm01)
- dn Distinguishing Name (dn=stephanf)
LDAP Authentications errors
When setting up a system with LDAP authentication you may get an error code 49. The indicates an authentications error. The particular error will help resolve the issue.
- 525 user not found
- 52e invalid credentials
- 530 not permitted to logon at this time
- 531 not permitted to logon at this workstation
- 532 password expired
- 533 account disabled
- 701 account expired
- 773 user must reset password
- 775 user account locked
LDAP Troubleshooting Tools
There are a few tools take can be handy in dealing with LDAP issues.
Softerra LDAP Browser is a very good tool since it is a read-only device so it can't do anything dangerous.
Apache Directory Studio This is a more powerful tool as it can write to directory structures, given proper credentials.
