SUMMARY:How to configure solaris native client to use alternate ldaps port

I received reply from Mr.Gary Tay and got the same
confirmed from Sun Microsystems. Here is the answer

Solaris Native ldap clients doesn't support using
alternate ports when used with TLS. Sun has plans to
get this working in their future releases but the
timeframe is unknown at this point of time.

Special thanks to Gary Tay.

Amal






Hi All:

   I am trying to configure tls/ssl between a solaris
10 x86 native client and a sun one 5.2 directory
server running on solaris 8 sparc.

  I am able to login with a ldap user using a non-ssl
connection, however I am not able to start the ldap
client when the auth method is set to tls:simple. 

  Both the non-ssl and ssl ports are set to alternate
ports non-ssl - 3896 and ssl - 6366.

  The error message that I am getting when starting
the ldap client is "Configuration Error: Cannot
specify LDAP port with tls", I don't want to use 636
as I don't want to run my directory server as root.

Here is my ldap_client_file

NS_LDAP_FILE_VERSION= 2.0
NS_LDAP_SERVERS= ldap_server:6366
NS_LDAP_SEARCH_BASEDN=
ou=realm1,ou=realms,o=xyz.example.com
NS_LDAP_AUTH= TLS:SIMPLE
NS_LDAP_SEARCH_SCOPE= sub
NS_LDAP_CACHETTL= 3600
NS_LDAP_CREDENTIAL_LEVEL= proxy
NS_LDAP_ATTRIBUTEMAP=
automount:automountMapName=nismapname
NS_LDAP_ATTRIBUTEMAP= automount:automountKey=cn
NS_LDAP_ATTRIBUTEMAP=
automount:automountInformation=nismapentry
NS_LDAP_OBJECTCLASSMAP= automount:automountMap=nismap
NS_LDAP_OBJECTCLASSMAP= automount:automount=nisobject
~

 I am able to successfully do a search using the
command below but not sure how to setup the ldap
client file

ldapsearch -h ldap_server -p 6366 -b "" -s base -Z -P
/var/ldap/cert8.db "(objectclass=*)"


  I searched google and read the sun blue prints, no
clues on this error. Any help?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers