Link to home
Start Free TrialLog in
Avatar of ashishanand
ashishanandFlag for Singapore

asked on

Error when querying Active Directory using ldapsearch

Hi there,

I encountered the following error when trying to query AD using ldapsearch.

ldap_search: errorMessage: 000004DC: LdapErr: DSID-0C0906DC, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db0

The ldapsearch returned some results before throwing the above error.


The following is exactly what I did:


ldapsearch -h abccorp.sales.local -p 389 -b "dc=sales,dc=local" -D acme_admin -w passw0rd  -s sub "givenName=mark*"  "givenname"


CN=Mark NG,OU=Marketing & Sales,DC=Sales,DC=local
givenName=mark

CN=Sue Jones,OU=Marketing & Sales,DC=Sales,DC=local
givenName=sue

ldap_search: resultCode 1 (Operations error)
ldap_search: errorMessage: 000004DC: LdapErr: DSID-0C0906DC, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1db0



If I modify the base parameter in the ldapsearch, I get search results without an error. Look at the "-b" parameter.


ldapsearch -h abccorp.sales.local -p 389 -b "ou=SM Group,dc=sales,dc=local" -D acme_admin -w passw0rd  -s sub "givenName=mark*"  "givenname"


CN=Mark NG,OU=Marketing & Sales,DC=Sales,DC=local
givenName=mark

CN=Sue Jones,OU=Marketing & Sales,DC=Sales,DC=local
givenName=sue



Any help is appreciated.

Regards.
ASKER CERTIFIED SOLUTION
Avatar of ashishanand
ashishanand
Flag of Singapore image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ashishanand

ASKER

port 3268 is used by AD to have access to Global Catalog. Port 389 is meant for other LDAP search and has limited acess. Refer to the following url for details

http://technet.microsoft.com/en-us/library/cc978012.aspx
I'm trying to keep my setup and configuration as simple as possible and only make it more complex if needed. Therefore, I have not installed AD DS but only AD LDS. I don't believe port 3268 is available if you only install AD LDS. I tried using that port and I get no response.