Splunk Support for Active Directory: How to connect and search Sun Directory Server LDAP

[asemenas]

Background:
I need to query a non-Active Directory LDAP instance (so I can produce a list of users with a specific role). The LDAP instance is Sun Directory Server version 6.3.
I’m trying to use the app “Splunk Supporting Add-on for Active Directory”. Despite the name of the application (suggesting it is for use with AD only) I've been told it will work for other LDAP servers.

Problem:
When I try to configure and connect with the SDS LDAP server (using credentials that successfully bind and search from the command line) I receive the following error:

Command:

| ldaptestconnection domain="uat"

Error message:

External search command 'ldaptestconnection' returned error code 1. Script output = " ERROR # host: uat-blah-sds: Could not access the directory service at ldap://uat-blah-sds:389: "

One concern I have is that given I am connecting with a non-AD server, I’m essentially making up values for the AD-specific configuration fields “Domain name” and “Alternate domain name“.

The configuration settings I've used are as follows:
note: I’ve had to supress confidential info for this post

• Domain name: uat
• Alternate domain name: dummyvalue
• Base DN: dc=mycompany,dc=gov,dc=au LDAP Server
• hostname: (Valid LDAP server hostname that I can successfully network ping)
• LDAP Server Port: 389
• SSL: unchecked
• Credentials Bind DN: (Valid user that can bind and search from command line)
• Password: (Valid password)

Any suggestions are appreciated!

Thanks,

Arian

[asemenas · Accepted solution]

A colleague at work found the answer for me:
http://docs.splunk.com/Documentation/SA-LdapSearch/2.1.2/User/Platformandhardwarerequirements#What_v...

(The Add-on only supports particular versions of AD, and does not support AD Lightweight Directory Services (AD LDS) or other Lightweight Directory Access Protocol (LDAP) server types.)