• 1.  Tue Tip: Helpful stuff for LDAP diagnostics

    Posted 05-07-2013 10:28 AM
      |   view attached

    There is a freeware LDAP Browser here:

    You will need to click on the ldapbrowser, which is free, the ldapadmin, you
    will have to pay for it.

    Once you download and install the LDAP gui client application, then you can
    connect to your LDAP server and browse the LDAP entries, from which you can
    copy/paste any entry attributes into the scm hauthest command line utlity.

    Unless your LDAP administrator can give you the exact attribute syntax, it
    is virtually impossible for us in Harvest tech support to guess what should be used
    to connect and bind with your LDAP server.

    Also we have our LDAPDiagV100.zip that installs a simple diagnostic
    utility that you can extract and install to the windows broker machine
    to the CA_SCM_HOME directory, it will create a single desktop icon.

    This utility is designed to load your HServer.arg data and use the -ldap settings
    in there to build an hauthtst string that you can execute in the utility GUI
    for diagnotstics. This utility is free of charge and is provided "as is".


  • 2.  RE: Tue Tip: Helpful stuff for LDAP diagnostics

    Posted 05-13-2013 12:03 PM
    Thanks Dave for posting this helpful information.

  • 3.  RE: Tue Tip: Helpful stuff for LDAP diagnostics

    Posted 05-16-2013 04:27 AM
    Hello and thank you, Dave.

    I have been using LDAP Browser for some years, to perform diagnostics on LDAP communication.

    About LDAP Diag, I tried it and it provides a clean and user-friendly interface to hauthtst and an easy way to test and configure LDAP communication settings, but I am having some difficulties using it.
    When I use a dfo file to authenticate, on a clien machine, LDAPDiag returns "[Error]Unable to set attributes for password file: SIBS_Harvestsrv.dfo."
    Is this the expected behaviour?
    It works perfectly on the server.

    Also, is this utility available anywhere on the support portal?
    It is not on the CA Software Change Manager Utilities Index.

    Best regards,
    Ricardo Bernardino

  • 4.  RE: Tue Tip: Helpful stuff for LDAP diagnostics

    Posted 05-21-2013 10:10 AM
    That means the LDAPDiag could not find the dfo file.
    Either put a full path and filename of the dfo file in the bottom pane
    where the hauthtst syntax is
    or edit the ldapbindpwfile line and add the path there.

    Also it is a good tip to install the ldapdiag to the CA_SCM_HOME
    directory, in that way the utility should be able to find the dfo file there.

  • 5.  RE: Tue Tip: Helpful stuff for LDAP diagnostics

    Posted 05-21-2013 10:12 AM
    I did not post the utility on that web page because I don't control it nor do I know who owns it.