Apple Mac OS X Server manual 256

256

To avoid this error, include the -xoption when you enter the command. For example:

$ ldapsearch -h 192.168.100.1 -b "dc=example,dc=com" -x

The -xoption forces ldapsearch to use simple authentication instead of SASL. The -xoption also works on the other LDAP tools.

ldapsearch can also be used for debugging issues with LDAP, independent of the directory services LDAPv3 plug-in.

For example, you can read the root directory server entry (DSE) like this: -LLLomits some output, -xmeans no SASL, -hspecifies the hostname, -bspecifies the search base and -sspecifies the type of search:

$ ldapsearch -LLL -x -h ldap.psu.edu -b "" -s base dn:

namingcontexts: CN=SCHEMA

namingcontexts: CN=LOCALHOST

namingcontexts: CN=PWDPOLICY

namingcontexts: DC=PSU,DC=EDU

subschemasubentry: cn=schema

supportedextension: 1.3.18.0.2.12.1

supportedextension: 1.3.18.0.2.12.3

supportedextension: 1.3.18.0.2.12.5

supportedextension: 1.3.18.0.2.12.6

supportedextension: 1.3.18.0.2.12.15

supportedextension: 1.3.18.0.2.12.16

supportedextension: 1.3.18.0.2.12.17

supportedextension: 1.3.18.0.2.12.19

supportedextension: 1.3.18.0.2.12.24

supportedextension: 1.3.18.0.2.12.22

supportedextension: 1.3.18.0.2.12.20

supportedextension: 1.3.18.0.2.12.28

supportedextension: 1.3.18.0.2.12.30

supportedextension: 1.3.18.0.2.12.26

supportedcontrol: 2.16.840.1.113730.3.4.2

supportedcontrol: 1.3.18.0.2.10.5

supportedcontrol: 1.2.840.113556.1.4.473

supportedcontrol: 1.2.840.113556.1.4.319

supportedcontrol: 1.3.6.1.4.1.42.2.27.8.5.1

supportedcontrol: 1.2.840.113556.1.4.805

supportedcontrol: 1.3.18.0.2.10.15

supportedcontrol: 1.3.18.0.2.10.18

security: none

port: 389

supportedsaslmechanisms: CRAM-MD5

supportedldapversion: 2

supportedldapversion: 3

ibmdirectoryversion: 5.1

ibm-ldapservicename: tr17n01.aset.psu.edu

ibm-adminid: CN=MANAGER,DC=PSU,DC=EDU

Chapter 15 Working with Open Directory