LDAP Error

prem_pratick

Hi ,

We are reciving the below Error messages in var/adm/messages

Jan 31 17:33:09 apilap016 ldap_cachemgr[5879]: [ID 722288 daemon.error] Error: Unable to refresh from profile:. (error=2)

Jan 27 02:19:50 apilap025 pfksh[20883]: [ID 293258 user.error] libsldap: Status: 2 Mesg: Unable to load configuration '/var/ldap/ldap_client_file' ('').

I searched the below URL
http://docs.sun.com/source/816-6699-10/ax_errcd.html

But could not get any ans.

Has anyone faced the same error messages before .

Note: ldap Indixing has been done and the patches have been applied as per the support article.

Env: Solaris 8
TS 6.1
iPlante LDAP

Thanks
Prem Pratick Kumar

prem_pratick

I got the Solution for the first error !!!!

1. Error Message :
Jan 31 17:33:09 bpilap016 ldap_cachemgr[5879]: [ID 722288 daemon.error] Error: Unable to refresh from profile:. (error=2)

The Solaris 8 LDAP client expects to find a anonymously readable
configuration profile in the LDAP server. Please add it. This allows
you to configure the LDAP client from the LDAP-server, because it'll
redownload ("refresh") the configuration information from the profile
at intervals specified in the profile. The profile os objectclass
DUAconfigProfile (IIRC, no box at hand). The "ldap_gen_profile"
command will generate a profile in LDIF format, so that you can
upload that to the server.

Solutions:
1) 'sshd' account in /etc/passwd, please read the OpenSSH HOWTO for Sol8
on www.sunfreeware.com

2) two files (must be mode 400) in /var/ldap, ldap_client_file and
ldap_client_cred, you could use "ldapclient" command to generare the
required profile .ldif and add the required proxyagent profile into LDAP
Server (be it DS5.1/2 or OpenLDAP, read the docs from docs.sun.com)

3) I don't know if ldap508 is LDAPv2 Patch 108993. I suggest you install
latest Solaris8 LDAP Version 2 library files Patcg 108993-38, if it is
not there, this patch allow you to use version 2 of the ldap_client_file
which allows you to specify failover LDAP servers in NS_LDAP_SERVERS
parameter

Or a Workaround
disabling local refreshing by setting "NS_LDAP_CACHETTL= 0".