How do find the LDAP connection details that the Solaris box uses to authenticate users?
2,020
You can see the client configuration which is stored in the /var/ldap directory by running the ldapclient list
command, eg:
# ldapclient list
NS_LDAP_FILE_VERSION= 2.0
NS_LDAP_BINDDN= cn=proxyagent,ou=profile,dc=west,dc=example,dc=com
NS_LDAP_BINDPASSWD= {NS1}4a3788e8c053424f
NS_LDAP_SERVERS= 192.168.0.1, 192.168.0.10
NS_LDAP_SEARCH_BASEDN= dc=west,dc=example,dc=com
NS_LDAP_AUTH= simple
NS_LDAP_SEARCH_REF= TRUE
NS_LDAP_SEARCH_SCOPE= one
NS_LDAP_SEARCH_TIME= 30
NS_LDAP_SERVER_PREF= 192.168.0.1
NS_LDAP_PROFILE= pit1
NS_LDAP_CREDENTIAL_LEVEL= proxy
NS_LDAP_SERVICE_SEARCH_DESC= passwd:ou=people,?sub
NS_LDAP_SERVICE_SEARCH_DESC= group:ou=group,dc=west,dc=example,dc=com?one
NS_LDAP_BIND_TIME= 5
The /usr/lib/ldap/ldap_cachemgr -g
command will also give you some details about the connection.
Note that some parts of the configuration might be on the directory server itself if profiles are used.
Related videos on Youtube
Author by
Kaiser Wilhelm
Updated on September 18, 2022Comments
-
Kaiser Wilhelm over 1 year
Right now I have two vectors of Object pointers
std::vector<Object*> vec1; std::vector<Object*> vec2;
Lets say vec1 has two objects and vec2 has none. How would I move one of the objects in vec1 to vec2 without destroying the actual object? So, in the end both vectors are of size 1 and each have an object pointer.
-
sbi over 12 yearsCould it be that the whole pointer/object/reference thing is still a bit unclear to you? Maybe you would benefit from reading a good book?
-
Kerrek SB over 12 years
delete
also won't "destroy the pointer". Beyond that, it's impossible to tell what delete will do without knowing more about where the pointer came from. -
Kerrek SB over 12 yearsWhy not
vec2.push_back(vec1.back());
, to make clear we're talking about the same element. -
Kent Pawar almost 11 yearsThanks. Seems that only root(SuperUser) can run
ldapclient
. Are there any alternatives besides the above..?/usr/lib/ldap/ldap_cachemgr -g
works for non-sudo users though.. -
jlliagre almost 11 yearsNo alternative and that is by design. The ldap configuration is considered to be sensitive and thus protected from casual users view. It is stored in the
/var/ldap/ldap_client_file
and/var/ldap/ldap_client_cred
files which are not readable but by root.