Naming and Directory Services (DNS, NIS, and LDAP)

Checking the Current Profile InformationBecome superuser or assume an equivalent role, and run ldapclient with the listoption.# ldapclient listNS_LDAP_FILE_VERSION= 2.0NS_LDAP_BINDDN= cn=proxyagent,ou=profile,dc=west,dc=example,dc=comNS_LDAP_BINDPASSWD= {NS1}4a3788e8c053424fNS_LDAP_SERVERS= 192.168.0.1, 192.168.0.10NS_LDAP_SEARCH_BASEDN= dc=west,dc=example,dc=comNS_LDAP_AUTH= simpleNS_LDAP_SEARCH_REF= TRUENS_LDAP_SEARCH_SCOPE= oneNS_LDAP_SEARCH_TIME= 30NS_LDAP_SERVER_PREF= 192.168.0.1NS_LDAP_PROFILE= pit1NS_LDAP_CREDENTIAL_LEVEL= proxyNS_LDAP_SERVICE_SEARCH_DESC= passwd:ou=people,?subNS_LDAP_SERVICE_SEARCH_DESC= group:ou=group,dc=west,dc=example,dc=com?oneNS_LDAP_BIND_TIME= 5Currently the /var/ldap files are in ASCII format. Because the files could change tobinary at some time, concatenating the files would cause problems. ldapclientlist is the supported method for accessing this information. See theldapclient(1M) man page for more information.Verifying Basic Client-Server CommunicationThe best way to show that your client is talking to the LDAP server is with theldaplist command. Using ldaplist with no arguments dumps all the containerson the server. This works as long as the containers exist, and do not have to bepopulated. See the ldaplist(1) man page for more information.If the first step works, you can try ldaplist passwd username or ldaplist hostshostname but if they contain lots of data you might want to pick a less populatedservice, or pipe them to head or more.Checking Server Data From a Non-Client MachineMost of the commands in the previous sections assume you already have created anLDAP client. If you have not created a client and want to check the data on the server,use the ldapsearch command. The following example lists all of the containers.# ldapsearch -h server1 -b "dc=west,dc=example,dc=com" -s one "objectclass=*"In Solaris 9 and earlier releases, the ldapsearch command, by default, producedoutput in a nonstandard textual representation. The default output for ldapsearchin later Solaris releases is the industry standardized LDIF format that is defined byRFC-2849. All versions of ldapsearch can output LDIF format using the -L option.Chapter 13 • LDAP Troubleshooting (Reference) 191