I'm trying to connect to Novell eDirectory using LDAP Browser

I can't connect to my Novell eDirectory with LDAP Browser.  Although I can connect using ConsoleOne.

I believe I have used the correct host name, and tried every variation including Localhost, 127.0.01.1 and even tried setting up a DNS record to forward ldap request to the correct host.

I'm having miserable time connecting to my NDS using ldapbrowser.

Someone please help.
gmahler5thAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

PsiCopCommented:
This Question was perhaps best-asked in the NetWare TA (http://www.experts-exchange.com/Networking/Netware/); even though eDirectory is platform-independent, most of the eDirectory-savvy folx hang out there.

Of course, I'm not sure what any of us can do for you, since you haven't bothered to mention minor little details like the VERSION of eDirectory you're using, or what platform its running on, or what version/patch/SP/whatever you have of that platform, or anything else about your environment that would help an Expert arrive at a solution for you.
0
gmahler5thAuthor Commented:
I didn't know the appropriate forum to post this.  Hopefully the moderator will place my question there.

Believe it or not, I've actually done this before, but it was more by accident.

I'm running Windows Server 2003, Novell eDirectory 8.7.  DNS is configured, although not sure it's configured correctly.

I'm trying to connect to the eDirectory with ldapbrowser.  
0
PsiCopCommented:
OK, eDirectory v8.7... is that v8.7.2 or v8.7.3? Any SPs? The absolutely latest version for the Windoze platform is v8.7.3.3 - its available here --> http://support.novell.com/cgi-bin/search/searchtid.cgi?/2969860.htm

I'm not terribly familiar with eDir on Windoze - I'll see if I can get some other eDir Experts headed over here. Prolly take awhile to get a Mod to move the Question.
0
Cloud Class® Course: CompTIA Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

gmahler5thAuthor Commented:
Yes, 8.7.3

I just disabled DNS server, as I'm told that isn't required.

Here is my connection string.

http://www.stevetout.com/connection.jpg

Is the host the machine hostname, or the eDir server name?

When specifying the userDN, should I use commas or periods?
0
gmahler5thAuthor Commented:
I tried doing an nslookup on my machine's name "kirkland" and it didn't resolve correctly... Something is really messed up.

http://www.stevetout.com/nslookup-kirkland.jpg

0
hendrixlCommented:
>> I just disabled DNS server, as I'm told that isn't required

You stated you disabled the DNS server, yet in your initial screenshot you are using a host name, not an IP address, to connect.  Was this the only DNS server you had running in your environment?  Are you using host names to connect?  If so, you must have a DNS server available and configured to answer those requests, or use IP addresses for your testing.
 
0
hendrixlCommented:
Do you get an error message during the failure?
0
ShineOnCommented:
How is your LDAP server object and LDAP group object configured?  Can you post some screen shots?  

In particular, do you have TLS turned on for all connections on the SSL/TLS tab of the LDAP server object, or require TLS for simple binds with password on the group object?  If so, you need to use the secure port, 636; you also need to have a certificate assigned.

How about the Win2K3 server itself - is it an AD member or controller server?  If so, Win2K3/AD's implementation of LDAP (weak as it is) could be interfering with your LDAP access to eDirectory.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
gmahler5thAuthor Commented:
I was able to bind anonymously on port 389.

I disabled TLS for the server and group objects.

My Win2K3 server is not an AD member.  It is a stand alone server.  AD is not enabled on this server.  I'm running this server on a laptop with the sole purpose of testing some applications that run against NDS.

With all that said, I still cannot bind as an admin user in ldapbrowser.  Strange, that I can bind anonymously, but not as a user.

Thoughts anyone?
0
hendrixlCommented:
Are you using commas in your DN name?

Here is a link to follow to test LDAP authentication.

http://support.novell.com/cgi-bin/search/searchtid.cgi?/10075010.htm
0
hendrixlCommented:
Here is another that will allow you to troubleshoot the connection failure using DSTrace.

http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080854.htm

lh
0
gmahler5thAuthor Commented:
I was able to bind using the NDS admin user.  cn=Admin,ou=secure,o=admin

But I have since created other admin users in different branches, and I cannot bind when I specify one of those.

What do I have to change to allow other admin users to bind to the directory?
0
hendrixlCommented:
Were you able to follow the instructions in this link:  

http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080854.htm

to gather a DSTrace log of the error?  This would be extremely helpful in troubleshooting your issue.

lh
0
gmahler5thAuthor Commented:
Thanks for reccommending doing the eDir Trace.  I saw right away a failed authentication, error -669.  I had to specify a simple password instead of NDS password.  Now it's working!

I will split up the points fairly.

Thanks everyone!
0
hendrixlCommented:
Glad we were able to assist you.

lh
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Operating Systems

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.