Tue Tip: Helpful stuff for LDAP diagnostics

[DaveCarmack]

There is a freeware LDAP Browser here:
http://www.ldapadministrator.com/download.htm

You will need to click on the ldapbrowser, which is free, the ldapadmin, you
will have to pay for it.

Once you download and install the LDAP gui client application, then you can
connect to your LDAP server and browse the LDAP entries, from which you can
copy/paste any entry attributes into the scm hauthest command line utlity.

Unless your LDAP administrator can give you the exact attribute syntax, it
is virtually impossible for us in Harvest tech support to guess what should be used
to connect and bind with your LDAP server.

Also we have our LDAPDiagV100.zip that installs a simple diagnostic
utility that you can extract and install to the windows broker machine
to the CA_SCM_HOME directory, it will create a single desktop icon.

This utility is designed to load your HServer.arg data and use the -ldap settings
in there to build an hauthtst string that you can execute in the utility GUI
for diagnotstics. This utility is free of charge and is provided "as is".

Attachment(s)

LDAPDiagV102ForWin7Win10WinXP.zip   5.73 MB 1 version

[Anon Anon]

Thanks Dave for posting this helpful information.
Mary

[RicardoBernardino]

Hello and thank you, Dave.

I have been using LDAP Browser for some years, to perform diagnostics on LDAP communication.

About LDAP Diag, I tried it and it provides a clean and user-friendly interface to hauthtst and an easy way to test and configure LDAP communication settings, but I am having some difficulties using it.
When I use a dfo file to authenticate, on a clien machine, LDAPDiag returns "[Error]Unable to set attributes for password file: SIBS_Harvestsrv.dfo."
Is this the expected behaviour?
It works perfectly on the server.

Also, is this utility available anywhere on the support portal?
It is not on the CA Software Change Manager Utilities Index.

Best regards,
Ricardo Bernardino

[DaveCarmack]

That means the LDAPDiag could not find the dfo file.
Either put a full path and filename of the dfo file in the bottom pane
where the hauthtst syntax is
or edit the ldapbindpwfile line and add the path there.

Also it is a good tip to install the ldapdiag to the CA_SCM_HOME
directory, in that way the utility should be able to find the dfo file there.

[DaveCarmack]

I did not post the utility on that web page because I don't control it nor do I know who owns it.