Testing for LDAP Authentication

Novell Cool Solutions: Feature

Digg This - Slashdot This Posted: 2 Sep 2004

Here are some tips for testing LDAP authentication and verifying that LDAP is working properly. This could be useful if, for example, you are unable to connect to LDAP over port 636 or port 389. For the full details, see TID 10075010.

To get started, download the LDAP Browser/Editor version 2.8 from LDAP Product Download (www.ldapzone.com) or from http://www-unix.mcs.anl.gov/~gawor/ldap/download.html.

LDAP Browser/Editor requires Java 1.2.2 (or greater). Java 1.4.1 or greater is recommended. You can download the latest Java 1.4.1 (or greater) at http://java.sun.com/j2se/downloads.html

To Run the LDAP Browser/Editor

1. Download and unpack the archive (it extracts into 'ldapbrowser' directory)
2. On a Windows machine, execute "lbe.jar" or the "lbe.bat"
3. On a UNIX machine, execute "lbe.sh"

Note: If needed, modify lbe.bat (for Win9x/NT) or lbe.sh (for UNIX) with your Java settings.

Port 389

Non-Secure (389) Anonymous

1. Select New, then name the Session (Example: <server_name> 389 anonymous)
2. On the Connection Tab insert the following information:

• Host: Insert the IP address of the LDAP server (Example: 192.168.70.12)
• Port: 389
• Base DN: Insert name of your Organization (Example: o=novell)
• Verify Anonymous bind is checked

Non-Secure (389) Authenticated

1. Select "New" then name the Session (Example: <server_name> 389 authenticated)
2. On the Connection Tab insert the following information:

• Host: Insert the IP address of the LDAP server (Example: 192.168.70.12)
• Port: 389
• Base DN: Insert name of your Organization (Example: o=novell)
• Uncheck Anonymous bind
• User DN: Insert a user to authenticate as. (Example: cn=admin,o=novell) Note: LDAP uses commas to separate username and context.
• Password: the user's password

Port 636

Secure (636) Anonymous

1. Select "New" then name the Session (Example: <server_name> 636 anonymous)
2. On the Connection Tab insert the following information:

• Host: Insert the IP address of the LDAP server (Example: 192.168.70.12)
• Port: 636
• Base DN: Insert name of your Organization (Example: o=novell)
• Check "SSL"
• Verify "Anonymous bind" is checked

Secure (636) Authenticated

1. Select "New" then name the Session (Example: <server_name> 636 authenticated)
2. On the Connection Tab insert the following information:

• Host: Insert the IP address of the LDAP server (Example: 192.168.70.12)
• Port: 636
• Base DN: Insert name of your Organization (Example: o=novell)
• Check "SSL"
• Verify "Anonymous bind" is unchecked
• User DN: Insert a user to authenticate as (Example: cn=admin,o=novell) Note: LDAP uses commas to separate username and context.
• Password: the user's password

For an alternate method to verify LDAP secure authentication using ConsoleOne and ICE, see TID 10075010.

Novell Cool Solutions (corporate web communities) are produced by WebWise Solutions. www.webwiseone.com