[Samba] openLDAP access problem - Re: How do I list computers in the domain

[Robert Moskowitz]

On 09/18/2015 11:02 AM, Rowland Penny wrote:
> On 18/09/15 15:53, Robert Moskowitz wrote:
>> If I am going to do the import of accounts, I have to access openLDAP 
>> remotely and....
>>
>> the following works:
>>
>> ldapsearch -h localhost -b "dc=home,dc=htt" -D 
>> "cn=manager,ou=internal,dc=home,dc=htt" -s sub 
>> "objectclass=GroupOfNames" -x -w m.....
>>
>> But
>>
>> ldapsearch -h 192.168.128.2 -b "dc=home,dc=htt" -D 
>> "cn=manager,ou=internal,dc=home,dc=htt" -s sub 
>> "objectclass=GroupOfNames" -x -w m....
>>
>> Does not with:
>>
>> ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)
>>
>> I stopped the firewall (service firewall stop) to ensure this was not 
>> a firewall access issue.
>>
>
> Try replacing '192.168.128.2' with 'ldap://hostname.domain.tld'

# ldapsearch -h ldap://homebase.home.htt -b "dc=home,dc=htt" -D 
"cn=manager,ou=internal,dc=home,dc=htt" -s sub 
"objectclass=GroupOfNames" -x -w m...
Could not create LDAP session handle for 
URI=ldap://ldap:%2F%2Fhomebase.home.htt (-9): Bad parameter to an ldap 
routine

Seems it adds the ldap:// automagically and:

# ldapsearch -h homebase.home.htt -b "dc=home,dc=htt" -D 
"cn=manager,ou=internal,dc=home,dc=htt" -s sub 
"objectclass=GroupOfNames" -x -w mxYEjFaB+7skgPxV
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

Looks like it is off to the ClearOS forum.