Background:
I need to query a non-Active Directory LDAP instance (so I can produce a list of users with a specific role). The LDAP instance is Sun Directory Server version 6.3.
I’m trying to use the app “Splunk Supporting Add-on for Active Directory”. Despite the name of the application (suggesting it is for use with AD only) I've been told it will work for other LDAP servers.
Problem:
When I try to configure and connect with the SDS LDAP server (using credentials that successfully bind and search from the command line) I receive the following error:
Command:
| ldaptestconnection domain="uat"
Error message:
External search command 'ldaptestconnection' returned error code 1. Script output = " ERROR # host: uat-blah-sds: Could not access the directory service at ldap://uat-blah-sds:389: "
One concern I have is that given I am connecting with a non-AD server, I’m essentially making up values for the AD-specific configuration fields “Domain name” and “Alternate domain name“.
The configuration settings I've used are as follows:
note: I’ve had to supress confidential info for this post
Domain name: uat
Alternate domain name: dummyvalue
Base DN: dc=mycompany,dc=gov,dc=au LDAP Server
hostname: (Valid LDAP server hostname that I can successfully network ping)
LDAP Server Port: 389
SSL: unchecked
Credentials Bind DN: (Valid user that can bind and search from command line)
Password: (Valid password)
Any suggestions are appreciated!
Thanks,
Arian
... View more