Menu

openldap not working with CentOS 7

dtermin
2018-11-27
2018-11-27
  • dtermin

    dtermin - 2018-11-27

    I'm having problems authenticating CentOS 7 clients to my CentOS 6 LDAP Server. CentOS 6 clients have no problems authenticating. Here are what I believe are the relevant errors from the logs:

    nslcd: [8b4567] <passwd="myaccount"> ldap_start_tls_s() failed (uri=ldap://myhost.lan/): Connect error
    nslcd: [8b4567] <passwd="myaccount"> failed to bind to LDAP server ldap://myhost.lan/: Connect error
    

    systemctl status nscld

    [root@ldap.client ~]# systemctl status nslcd
    nslcd.service - Naming services LDAP client daemon.
       Loaded: loaded (/usr/lib/systemd/system/nslcd.service; enabled; vendor preset: disabled)
       Active: active (running) since Tue 2018-11-27 12:59:09 EST; 12min ago
         Docs: man:nslcd(8)
               man:nslcd.conf(5)
      Process: 1080 ExecStart=/usr/sbin/nslcd (code=exited, status=0/SUCCESS)
     Main PID: 1085 (nslcd)
       CGroup: /system.slice/nslcd.service
               └─1085 /usr/sbin/nslcd
    
    Nov 27 13:09:35 myhost nslcd[1085]: [43a858] <group/member="root"> no available LDAP server found: Server is unavailable: Resource temporarily unavailable
    Nov 27 13:09:35 myhost nslcd[1085]: [43a858] <group/member="root"> no available LDAP server found: Server is unavailable: Resource temporarily unavailable
    Nov 27 13:09:37 myhost nslcd[1085]: [1d5ae9] <group/member="root"> ldap_start_tls_s() failed (uri=ldap://myhost/): Connect error
    Nov 27 13:09:37 ldap.client.lan nslcd[1085]: [1d5ae9] <group/member="root"> failed to bind to LDAP server ldap://myhost/: Connect error
    Nov 27 13:09:37 myhost nslcd[1085]: [1d5ae9] <group/member="root"> no available LDAP server found: Connect error: Transport endpoint is not connected
    Nov 27 13:09:37 myhost nslcd[1085]: [1d5ae9] <group/member="root"> no available LDAP server found: Server is unavailable: Transport endpoint is not connected
    Nov 27 13:10:01 myhost nslcd[1085]: [edbdab] <group/member="root"> ldap_start_tls_s() failed (uri=ldap://my.ldap.server/): Connect error
    Nov 27 13:10:01 myhost nslcd[1085]: [edbdab] <group/member="root"> failed to bind to LDAP server ldap://my.ldap.server/: Connect error
    Nov 27 13:10:01 myhost nslcd[1085]: [edbdab] <group/member="root"> no available LDAP server found: Connect error: Transport endpoint is not connected
    Nov 27 13:10:01 myhost nslcd[1085]: [edbdab] <group/member="root"> no available LDAP server found: Server is unavailable: Transport endpoint is not connected
    
    [root@ldap-client log]# grep myaccount messages 
    
    Nov 26 10:21:43 ldap.client nslcd[12863]: [8b4567] <passwd="myaccount"> failed to bind to LDAP server ldap://ldap.server.lan/: Connect error
    Nov 26 10:21:43 ldap.client nslcd[12863]: [8b4567] <passwd="myaccount"> no available LDAP server found, sleeping 1 seconds
    
    • However, from the client, I have full access to port 389 on the LDAP server.
    • SELinux is off and disabled.
    • CentOS 6 clients work fine.

    I've researched Google and noted many other similar errors but I have not been able to resolve the issue. Any advice on how to resolve would be greatly appreciated.

     

    Last edit: dtermin 2018-11-27
  • Anonymous

    Anonymous - 2019-02-08
    Post awaiting moderation.

Anonymous
Anonymous

Add attachments
Cancel