How do find the LDAP connection details that the Solaris box uses to authenticate users?

2,020

You can see the client configuration which is stored in the /var/ldap directory by running the ldapclient list command, eg:

# ldapclient list
NS_LDAP_FILE_VERSION= 2.0
NS_LDAP_BINDDN= cn=proxyagent,ou=profile,dc=west,dc=example,dc=com
NS_LDAP_BINDPASSWD= {NS1}4a3788e8c053424f
NS_LDAP_SERVERS= 192.168.0.1, 192.168.0.10
NS_LDAP_SEARCH_BASEDN= dc=west,dc=example,dc=com
NS_LDAP_AUTH= simple
NS_LDAP_SEARCH_REF= TRUE
NS_LDAP_SEARCH_SCOPE= one
NS_LDAP_SEARCH_TIME= 30
NS_LDAP_SERVER_PREF= 192.168.0.1
NS_LDAP_PROFILE= pit1
NS_LDAP_CREDENTIAL_LEVEL= proxy
NS_LDAP_SERVICE_SEARCH_DESC= passwd:ou=people,?sub
NS_LDAP_SERVICE_SEARCH_DESC= group:ou=group,dc=west,dc=example,dc=com?one
NS_LDAP_BIND_TIME= 5

The /usr/lib/ldap/ldap_cachemgr -g command will also give you some details about the connection.

Note that some parts of the configuration might be on the directory server itself if profiles are used.

Share:
2,020

Related videos on Youtube

Kaiser Wilhelm
Author by

Kaiser Wilhelm

Updated on September 18, 2022

Comments

  • Kaiser Wilhelm
    Kaiser Wilhelm over 1 year

    Right now I have two vectors of Object pointers

    std::vector<Object*> vec1;
    std::vector<Object*> vec2;
    

    Lets say vec1 has two objects and vec2 has none. How would I move one of the objects in vec1 to vec2 without destroying the actual object? So, in the end both vectors are of size 1 and each have an object pointer.

  • sbi
    sbi over 12 years
    Could it be that the whole pointer/object/reference thing is still a bit unclear to you? Maybe you would benefit from reading a good book?
  • Kerrek SB
    Kerrek SB over 12 years
    delete also won't "destroy the pointer". Beyond that, it's impossible to tell what delete will do without knowing more about where the pointer came from.
  • Kerrek SB
    Kerrek SB over 12 years
    Why not vec2.push_back(vec1.back());, to make clear we're talking about the same element.
  • Kent Pawar
    Kent Pawar almost 11 years
    Thanks. Seems that only root(SuperUser) can run ldapclient. Are there any alternatives besides the above..? /usr/lib/ldap/ldap_cachemgr -g works for non-sudo users though..
  • jlliagre
    jlliagre almost 11 years
    No alternative and that is by design. The ldap configuration is considered to be sensitive and thus protected from casual users view. It is stored in the /var/ldap/ldap_client_file and /var/ldap/ldap_client_cred files which are not readable but by root.