Help with Solaris 10 and ldapclient authentication

Lilbighorn · August 15, 2012, 8:40pm

Hello everyone!

Currently, i have a RHEL6 server, with openLDAP server running. Most of our servers run on Rhel platform, but some of them run in Solaris 10, and I need to make them authenticate with ldap too.

As the ldap server is running without encryption, the command I used for initialize the ldap client in a test zone of a Solaris 10 server is this:

bash-3.00# ldapclient -v manual -a defaultServerList=ldapserver.com -a defaultSearchBase=dc=example,dc=com

And, if as ROOT i do id $ldap_username, I get the correct uid and gid of that ldap user.
Also as root, i can do su $ldap_username and I login as that user without any problem.
However, if i try to do an ssh $ldap_user@localhost or even, su $ldap_user from a NON root user, I cant login, and I receive the following error in /var/adm/messages:

Aug 14 17:31:06 test_zone su[19712]: [ID 316739 auth.error] pam_ldap: no legal authentication method configured
Aug 14 17:38:13 test_zone sshd[19983]: [ID 316739 auth.error] pam_ldap: no legal authentication method configured

I configured /etc/pam.conf like this:

$service auth binding pam_unix_auth.so.1 server_policy
$service auth required pam_ldap.so.1

$service account binding pam_unix_account.so.1 server_policy
$service account required pam_ldap.so.1

other password required pam_authtok_store.so.1

(where $service is either login, rlogin, other, etc)

Any help will be highly appreciated! :wall:

Ps: sorry for my bad english! im not native speaker.

jlliagre · August 16, 2012, 1:47am

Your user's directory entries are likely missing the required shadowAccount object class.

bitlord · August 16, 2012, 8:31am

Hello,
I have done some work in this area. I built 2 test labs one at home and one at work. The example below are form my home test lab. I was able to authenticate a Solaris client without TLS, to a RHEL OpenLDAP server.

Make sure you have this:

/etc/nsswitch.conf
passwd:     files ldap
group:      files ldap
host:         files ldap

Here is my setup on my test Solaris client server at home.

# ldapclient list
NS_LDAP_FILE_VERSION= 2.0
NS_LDAP_BINDDN= uid=proxyagent,ou=People,dc=deathnote,dc=net
NS_LDAP_BINDPASSWD= {NS1}ecfa88f3a945c411
NS_LDAP_SERVERS= 10.0.1.21:389
NS_LDAP_SEARCH_BASEDN= dc=deathnote,dc=net
NS_LDAP_AUTH= none
NS_LDAP_CACHETTL= 0
NS_LDAP_CREDENTIAL_LEVEL= proxy
NS_LDAP_SERVICE_SEARCH_DESC= passwd:ou=People,dc=deathnote,dc=net
NS_LDAP_SERVICE_SEARCH_DESC= shadow:ou=People,dc=deathnote,dc=net
NS_LDAP_SERVICE_SEARCH_DESC= group:ou=People,dc=deathnote,dc=net
NS_LDAP_SERVICE_AUTH_METHOD= pam_ldap:simple

# cat user00.ldif
dn: uid=user00,ou=People,dc=deathnote,dc=net
uid: user00
cn: user00
objectClass: account
objectClass: posixAccount

objectClass: shadowAccount
objectClass: top
loginShell: /bin/bash
uidNumber: 805
gidNumber: 501
homeDirectory: /home/user00
gecos: ldap user

Your Pam file looks odd. This is my PAM file from my a Solaris client.

# login service (explicit because of pam_dial_auth)
#
login   auth requisite          pam_authtok_get.so.1
login   auth required           pam_dhkeys.so.1
login   auth required           pam_unix_cred.so.1
login   auth sufficient         pam_unix_auth.so.1
login   auth required           pam_dial_auth.so.1
login   auth required           pam_ldap.so.1
#
# rlogin service (explicit because of pam_rhost_auth)
#
rlogin  auth sufficient         pam_rhosts_auth.so.1
rlogin  auth requisite          pam_authtok_get.so.1
rlogin  auth required           pam_dhkeys.so.1
rlogin  auth required           pam_unix_cred.so.1
rlogin  auth sufficient         pam_unix_auth.so.1
rlogin  auth required           pam_ldap.so.1
#
# Kerberized rlogin service
#
krlogin auth required           pam_unix_cred.so.1
krlogin auth required           pam_krb5.so.1
#
# rsh service (explicit because of pam_rhost_auth,
# and pam_unix_auth for meaningful pam_setcred)
#
rsh     auth sufficient         pam_rhosts_auth.so.1
rsh     auth required           pam_unix_cred.so.1
#
# Kerberized rsh service
#
krsh    auth required           pam_unix_cred.so.1
krsh    auth required           pam_krb5.so.1
#
# Kerberized telnet service
#
ktelnet auth required           pam_unix_cred.so.1
ktelnet auth required           pam_krb5.so.1
#
# PPP service (explicit because of pam_dial_auth)
#
ppp     auth requisite          pam_authtok_get.so.1
ppp     auth required           pam_dhkeys.so.1
ppp     auth required           pam_unix_cred.so.1
ppp     auth sufficient         pam_unix_auth.so.1
ppp     auth required           pam_dial_auth.so.1
ppp     auth required           pam_ldap.so.1
#
# Default definitions for Authentication management
# Used when service name is not explicitly mentioned for authentication
#
other   auth requisite          pam_authtok_get.so.1
other   auth required           pam_dhkeys.so.1
other   auth required           pam_unix_cred.so.1
other   auth sufficient         pam_unix_auth.so.1
other   auth required           pam_dial_auth.so.1
other   auth required           pam_ldap.so.1
#
# passwd command (explicit because of a different authentication module)
#
passwd  auth sufficient         pam_passwd_auth.so.1
passwd  auth required           pam_ldap.so.1
#
# cron service (explicit because of non-usage of pam_roles.so.1)
#
cron    account required        pam_unix_account.so.1
#
# Default definition for Account management
# Used when service name is not explicitly mentioned for account management
#
other   account sufficient      pam_ldap.so.1
other   account requisite       pam_roles.so.1
other   account required        pam_unix_account.so.1
#
# Default definition for Session management
# Used when service name is not explicitly mentioned for session management
#
other   session required        pam_unix_session.so.1
#
# Default definition for Password management
# Used when service name is not explicitly mentioned for password management
#
other   password required       pam_dhkeys.so.1
other   password requisite      pam_authtok_get.so.1
other   password requisite      pam_authtok_check.so.1
other   password required       pam_authtok_store.so.1
#

jlliagre · August 16, 2012, 9:23am

@bitlord, beware that NS_LDAP_BINDPASSWD encoding is reversible so posting its value to everyone is usually unwise.

bitlord · August 16, 2012, 9:34am

jlliage,
I not worried, because it is a test server at my house and it is not even running right now. It is not a production server.

jlliagre · August 16, 2012, 9:39am

Indeed, that's why I wrote "usually" unwise. In that specific case, the password is so trivial it would have been guessed anyway

Lilbighorn · August 16, 2012, 1:44pm

Thanks a lot for the help, bitlord, I highly appreciate it.

I replaced my pam.conf file with the one you provided, and made some modifications to my ldapclient parameters to match yours.
however, I still cant ssh with ldap users, or su to a ldap user with a non root user. id $ldap_user is still working fine.

# ldapclient list
NS_LDAP_FILE_VERSION= 2.0
NS_LDAP_BINDDN= cn=Manager,dc=example,dc=com
NS_LDAP_BINDPASSWD= {NS1}xxxxxxxxxxx
NS_LDAP_SERVERS= arbue-ldapserver
NS_LDAP_SEARCH_BASEDN= dc=example,dc=com
NS_LDAP_CACHETTL= 0
NS_LDAP_CREDENTIAL_LEVEL= proxy
NS_LDAP_SERVICE_SEARCH_DESC= passwd:ou=People,dc=example,dc=com
NS_LDAP_SERVICE_SEARCH_DESC= group:ou=People,dc=example,dc=com
NS_LDAP_SERVICE_SEARCH_DESC= shadow:ou=People,dc=example,dc=com
NS_LDAP_SERVICE_AUTH_METHOD= pam_ldap:tls:simple
NS_LDAP_HOST_CERTPATH= /var/ldap


# ldaplist -l passwd test_username
dn: cn=test username,ou=People,dc=example,dc=com
        cn: test username
        givenName: test username
        gidNumber: 1001
        homeDirectory: /home/users/test_username
        loginShell: /bin/bash
        objectClass: inetOrgPerson
        objectClass: posixAccount
        objectClass: top
        uid: test_username
        userPassword: {crypt}$1$xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
        uidNumber: 2002

And im receiving this error in the openldap server log:

Aug 16 14:19:48 ldapserver slapd[24675]: conn=3888 fd=76 ACCEPT from IP=10.10.10.10:54897 (IP=0.0.0.0:389)
Aug 16 14:19:48 ldapserver slapd[24675]: conn=3888 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=test_username))"
Aug 16 14:19:48 ldapserver slapd[24675]: conn=3888 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 16 14:19:48 ldapserver slapd[24675]: conn=3888 op=1 UNBIND
Aug 16 14:19:48 ldapserver slapd[24675]: conn=3888 fd=76 closed
Aug 16 14:19:48 ldapserver slapd[24675]: conn=3889 fd=76 ACCEPT from IP=10.10.10.10:54900 (IP=0.0.0.0:636)
Aug 16 14:19:48 ldapserver slapd[24675]: conn=3889 fd=76 closed (TLS negotiation failure)

Any hint?

bitlord · August 16, 2012, 4:35pm

Did you modify your db on the LDAP server? Below I have pasted some output from my Test server at work. Notice the NIS objects.

Now the ldapclient manual is not all that needs to be done. Don't forget to use the other sub commands, like mod, genprofile, init and uninit. After you get the 1st Solaris server working you should only need to use the init sub command for the rest of the Solaris servers.

I also have some automout/autofs stuff in there as well. I'm not sure if I I got that part working in the lab or not. I haven't touched LDAP in over 6 mouths. A note on the user accounts. I think that the accounts called user# worked but the test accounts didn't. So test and keep that in mind.

ldapsearch -x
# extended LDIF 
# 
# LDAPv3 
# base <> with scope subtree 
# filter: (objectclass=*) 
# requesting: ALL 
#
  
# test.net dn: dc=test,dc=net 
o: Organisation Name 
objectClass: top objectClass: domain 
objectClass: domainRelatedObject 
objectClass: dcObject 
objectClass: nisDomainObject
dc: test 
associatedDomain: test.net 
nisDomain: test.net
  
# Hosts, test.net 
dn: ou=Hosts,dc=test,dc=net 
ou: Hosts 
objectClass: top 
objectClass: organizationalUnit
  
# Rpc, test.net dn: ou=Rpc,dc=test,dc=net 
ou: Rpc 
objectClass: top 
objectClass: organizationalUnit
  
# Services, test.net 
dn: ou=Services,dc=test,dc=net 
ou: Services 
objectClass: top 
objectClass: organizationalUnit
  
# netgroup.byuser, test.net 
dn: nisMapName=netgroup.byuser,dc=test,dc=net 
nisMapName: netgroup.byuser 
objectClass: top 
objectClass: nisMap
  
# Mounts, test.net 
dn: ou=Mounts,dc=test,dc=net 
ou: Mounts 
objectClass: top 
objectClass: organizationalUnit
  
# Networks, test.net 
dn: ou=Networks,dc=test,dc=net 
ou: Networks 
objectClass: top 
objectClass: organizationalUnit
  
# People, test.net
dn: ou=People,dc=test,dc=net 
ou: People 
objectClass: top 
objectClass: organizationalUnit
  
# Group, test.net 
dn: ou=Group,dc=test,dc=net 
ou: Group objectClass: top 
objectClass: organizationalUnit
  
# Netgroup, test.net 
dn: ou=Netgroup,dc=test,dc=net 
ou: Netgroup 
objectClass: top 
objectClass: organizationalUnit
  
# Protocols, test.net 
dn: ou=Protocols,dc=test,dc=net 
ou: Protocols 
objectClass: top 
objectClass: organizationalUnit
  
# Aliases, test.net 
dn: ou=Aliases,dc=test,dc=net 
ou: Aliases 
objectClass: top 
objectClass: organizationalUnit
  
# netgroup.byhost, test.net 
dn: nisMapName=netgroup.byhost,dc=test,dc=net 
nisMapName: netgroup.byhost 
objectClass: top 
objectClass: nisMap
  
# ldapuser, Group, test.net 
dn: cn=ldapuser,ou=Group,dc=test,dc=net 
objectClass: posixGroup 
objectClass: top 
cn: ldapuser 
gidNumber: 500
  
# user00, People, test.net 
dn: uid=user00,ou=People,dc=test,dc=net 
uid: user00 
cn: user00 
objectClass: account 
objectClass: posixAccount 
objectClass: top 
objectClass: shadowAccount 
shadowMax: 99999 
shadowWarning: 7 
loginShell: /bin/bash 
uidNumber: 600 
gidNumber: 500 
homeDirectory: /home/user00 
gecos: user00
  
# user01, People, test.net 
dn: uid=user01,ou=People,dc=test,dc=net 
uid: user01 
cn: user01 
objectClass: account 
objectClass: posixAccount 
objectClass: top 
objectClass: shadowAccount 
shadowMax: 99999
shadowWarning: 7 
loginShell: /bin/bash 
uidNumber: 601 
gidNumber: 500 
homeDirectory: /home/user01 
gecos: user01
  
# user02, People, test.net 
dn: uid=user02,ou=People,dc=test,dc=net 
uid: user02 
cn: user02 
objectClass: account 
objectClass: posixAccount 
objectClass: top 
objectClass: shadowAccount 
shadowMax: 99999 
shadowWarning: 7 
loginShell: /bin/bash 
uidNumber: 602 
gidNumber: 500 
homeDirectory: /home/user02 
gecos: user02
  
# user03, People, test.net 
dn: uid=user03,ou=People,dc=test,dc=net 
uid: user03 
cn: user03 
objectClass: account 
objectClass: posixAccount 
objectClass: top 
objectClass: shadowAccount 
shadowMax: 99999
 shadowWarning: 7 
loginShell: /bin/bash 
uidNumber: 603 
gidNumber: 500 
homeDirectory: /home/user03 
gecos: user03
  
# test00, People, test.net 
dn: uid=test00,ou=People,dc=test,dc=net 
uid: test00 
cn: test00 
objectClass: account 
objectClass: posixAccount 
objectClass: top 
objectClass: shadowAccount 
shadowMin: 0 
shadowMax: 99999 
shadowWarning: 7 
loginShell: /bin/bash 
uidNumber: 700 
gidNumber: 500 
homeDirectory: /home/test00
  
# test01, People, test.net 
dn: uid=test01,ou=People,dc=test,dc=net
uid: test01 
cn: test01 
objectClass: account 
objectClass: posixAccount 
objectClass: top 
objectClass: shadowAccount 
shadowMin: 0 
shadowMax: 99999 
shadowWarning: 7 
loginShell: /bin/bash 
uidNumber: 701 
gidNumber: 500 
homeDirectory: /home/test01
  
# profile, test.net 
dn: ou=profile,dc=test,dc=net 
objectClass: top 
objectClass: organizationalUnit 
ou: profile
  
# proxyagent, profile, test.net 
dn: cn=proxyagent,ou=profile,dc=test,dc=net 
objectClass: top 
objectClass: person 
sn: proxyagent 
cn: proxyagent
  
# auto.master, test.net 
dn: ou=auto.master,dc=test,dc=net 
objectClass: top 
objectClass: automountMap 
ou: auto.master  

# search result 
search: 2 
result: 0 Success  

# numResponses: 24 
# numEntries: 23

jlliagre · August 17, 2012, 1:27am

@Lilbighorn: I'm afraid you missed my own reply which already provided the root cause of your issue.
Again: your user's entries are missing the required shadowAccount object class.

Lilbighorn · August 17, 2012, 8:20am

Thanks both for your answers, but I dont want solaris to run as server i need it to be a client of another server (that runs Redhat 6).

Im really stucked here, because im really new to solaris. In fact, i have been administering Linux servers from 2 years now, but i have first touched a Solaris server a couple of weeks ago.

@jlliagre, I have created a new user in the ldap server with the shadowAccount object class, but i couldnt login.

bitlord · August 17, 2012, 8:34am

jlliagre,
Give him an example.

jlliagre · August 17, 2012, 9:07am

@bitlord You already did. Your entries are sufficient.

What makes you think anyone think differently ?

Please post your test user's ldaplist output, your current ldap client configuration (ldapclient list) and the ldap server access log during the authentication attempt.

Lilbighorn · August 17, 2012, 9:28am

@jlliagre, here you have:

bash-3.00# ldaplist passwd test
dn: cn=test,ou=People,dc=example,dc=com

bash-3.00# ldaplist -l passwd test
dn: cn=test,ou=People,dc=example,dc=com
        cn:  test
        gidNumber: 1001
        homeDirectory: /home/users/test
        sn: test
        loginShell: /bin/sh
        userPassword: {MD5}Qpf0SxOVUjUkWySXOZ16kw==
        uidNumber: 1001
        uid: test
        objectClass: inetOrgPerson
        objectClass: posixAccount
        objectClass: top
        objectClass: shadowAccount

bash-3.00# ldapclient list
NS_LDAP_FILE_VERSION= 2.0
NS_LDAP_BINDDN= cn=Manager,dc=example,dc=com
NS_LDAP_BINDPASSWD= {NS1}xxxxxxxxxxx
NS_LDAP_SERVERS= ldap-server
NS_LDAP_SEARCH_BASEDN= dc=example,dc=com
NS_LDAP_AUTH= none
NS_LDAP_CACHETTL= 0
NS_LDAP_CREDENTIAL_LEVEL= proxy
NS_LDAP_SERVICE_SEARCH_DESC= passwd:ou=People,dc=example,dc=com
NS_LDAP_SERVICE_SEARCH_DESC= group:ou=People,dc=example,dc=com
NS_LDAP_SERVICE_SEARCH_DESC= shadow:ou=People,dc=example,dc=com
NS_LDAP_SERVICE_AUTH_METHOD= pam_ldap:simple
NS_LDAP_HOST_CERTPATH= /var/ldap



Open LDAP (rhel) Server:

Aug 17 10:20:14 ldap-server slapd[26770]: conn=33427 fd=57 ACCEPT from IP=10.10.10.10:37159 (IP=0.0.0.0:389)
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33427 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=mochoteco))"
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33427 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33427 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33427 op=1 UNBIND
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33427 fd=57 closed
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33428 fd=57 ACCEPT from IP=10.10.10.10:37162 (IP=0.0.0.0:389)
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33428 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=mochoteco))"
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33428 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33428 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33428 op=1 UNBIND
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33428 fd=57 closed
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33429 fd=57 ACCEPT from IP=10.10.10.10:37165 (IP=0.0.0.0:389)
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33429 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=mochoteco))"
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33429 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33429 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33429 op=1 UNBIND
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33429 fd=57 closed
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33430 fd=57 ACCEPT from IP=10.10.10.10:37168 (IP=0.0.0.0:389)
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33430 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(?=undefined)(uid=mochoteco))"
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33430 op=0 SRCH attr=uid SolarisUserQualifier SolarisAttrReserved1 SolarisAttrReserved2 SolarisAttrKeyValue
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33430 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33430 op=1 UNBIND
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33430 fd=57 closed
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33431 fd=57 ACCEPT from IP=10.10.10.10:37171 (IP=0.0.0.0:389)
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33431 op=0 SRCH base="ou=projects,dc=example,dc=com" scope=1 deref=3 filter="(&(?=undefined)(?=undefined))"
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33431 op=0 SRCH attr=SolarisProjectName SolarisProjectID description memberUid memberGid SolarisProjectAttr
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33431 op=0 SEARCH RESULT tag=101 err=32 nentries=0 text=
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33431 op=1 UNBIND
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33431 fd=57 closed
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33432 fd=57 ACCEPT from IP=10.10.10.10:37174 (IP=0.0.0.0:389)
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33432 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixGroup)(gidNumber=1001))"
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33432 op=0 SRCH attr=cn gidnumber userpassword memberuid
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33432 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33432 op=1 UNBIND
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33432 fd=57 closed
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33433 fd=57 ACCEPT from IP=10.10.10.10:37177 (IP=0.0.0.0:389)
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33433 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixGroup)(gidNumber=1001))"
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33433 op=0 SRCH attr=cn gidnumber userpassword memberuid
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33433 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33433 op=1 UNBIND
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33433 fd=57 closed
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33434 fd=57 ACCEPT from IP=10.10.10.10:37180 (IP=0.0.0.0:389)
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33434 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=mochoteco))"
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33434 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33434 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33434 op=1 UNBIND
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33434 fd=57 closed
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33435 fd=57 ACCEPT from IP=10.10.10.10:37183 (IP=0.0.0.0:389)
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33435 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=mochoteco))"
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33435 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33435 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33435 op=1 UNBIND
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33435 fd=57 closed
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33436 fd=57 ACCEPT from IP=10.10.10.10:37186 (IP=0.0.0.0:389)
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33436 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixGroup)(gidNumber=1001))"
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33436 op=0 SRCH attr=cn gidnumber userpassword memberuid
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33436 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33436 op=1 UNBIND
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33436 fd=57 closed
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33437 fd=57 ACCEPT from IP=10.10.10.10:37189 (IP=0.0.0.0:389)
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33437 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(?=undefined)(uid=mochoteco))"
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33437 op=0 SRCH attr=uid SolarisUserQualifier SolarisAttrReserved1 SolarisAttrReserved2 SolarisAttrKeyValue
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33437 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33437 op=1 UNBIND
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33437 fd=57 closed
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33438 fd=57 ACCEPT from IP=10.10.10.10:37192 (IP=0.0.0.0:389)
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33438 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixGroup)(memberUid=mochoteco))"
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33438 op=0 SRCH attr=cn gidnumber userpassword memberuid
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33438 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33438 op=1 UNBIND
Aug 17 10:20:14 ldap-server slapd[26770]: conn=33438 fd=57 closed
Aug 17 10:20:15 ldap-server slapd[26770]: conn=33439 fd=57 ACCEPT from IP=10.10.10.10:37201 (IP=0.0.0.0:389)
Aug 17 10:20:15 ldap-server slapd[26770]: conn=33439 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uidNumber=200004))"
Aug 17 10:20:15 ldap-server slapd[26770]: conn=33439 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:15 ldap-server slapd[26770]: conn=33439 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:15 ldap-server slapd[26770]: conn=33439 op=1 UNBIND
Aug 17 10:20:15 ldap-server slapd[26770]: conn=33439 fd=57 closed
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33440 fd=57 ACCEPT from IP=10.10.10.10:37210 (IP=0.0.0.0:389)
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33440 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=test))"
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33440 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33440 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33440 op=1 UNBIND
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33440 fd=57 closed
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33441 fd=57 ACCEPT from IP=10.10.10.10:37213 (IP=0.0.0.0:389)
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33441 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=test))"
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33441 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33441 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33441 op=1 UNBIND
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33441 fd=57 closed
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33442 fd=57 ACCEPT from IP=10.10.10.10:37216 (IP=0.0.0.0:389)
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33442 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=shadowAccount)(uid=test))"
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33442 op=0 SRCH attr=uid userpassword shadowlastchange shadowmin shadowmax shadowwarning shadowinactive shadowexpire shadowflag
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33442 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33442 op=1 UNBIND
Aug 17 10:20:17 ldap-server slapd[26770]: conn=33442 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33443 fd=57 ACCEPT from IP=10.10.10.10:37219 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33443 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33443 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33443 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33443 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33443 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33444 fd=57 ACCEPT from IP=10.10.10.10:37222 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33444 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33444 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33444 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33444 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33444 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33445 fd=57 ACCEPT from IP=10.10.10.10:37225 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33445 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=shadowAccount)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33445 op=0 SRCH attr=uid userpassword shadowlastchange shadowmin shadowmax shadowwarning shadowinactive shadowexpire shadowflag
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33445 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33445 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33445 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33446 fd=57 ACCEPT from IP=10.10.10.10:37228 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33446 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33446 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33446 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33446 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33446 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33447 fd=57 ACCEPT from IP=10.10.10.10:37231 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33447 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=shadowAccount)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33447 op=0 SRCH attr=uid userpassword shadowlastchange shadowmin shadowmax shadowwarning shadowinactive shadowexpire shadowflag
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33447 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33447 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33447 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33448 fd=57 ACCEPT from IP=10.10.10.10:37234 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33448 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(?=undefined)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33448 op=0 SRCH attr=uid SolarisUserQualifier SolarisAttrReserved1 SolarisAttrReserved2 SolarisAttrKeyValue
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33448 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33448 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33448 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33449 fd=57 ACCEPT from IP=10.10.10.10:37237 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33449 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33449 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33449 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33449 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33449 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33450 fd=57 ACCEPT from IP=10.10.10.10:37240 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33450 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33450 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33450 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33450 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33451 fd=57 ACCEPT from IP=10.10.10.10:37243 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33451 op=0 BIND dn="cn=test,ou=People,dc=example,dc=com" method=128
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33451 op=0 BIND dn="cn=test,ou=People,dc=example,dc=com" mech=SIMPLE ssf=0
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33451 op=0 RESULT tag=97 err=0 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33451 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33451 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33452 fd=57 ACCEPT from IP=10.10.10.10:37246 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33452 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33452 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33452 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33452 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33453 fd=57 ACCEPT from IP=10.10.10.10:37249 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33453 op=0 BIND dn="cn=test,ou=People,dc=example,dc=com" method=128
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33453 op=0 BIND dn="cn=test,ou=People,dc=example,dc=com" mech=SIMPLE ssf=0
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33453 op=0 RESULT tag=97 err=0 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33453 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33453 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33454 fd=57 ACCEPT from IP=10.10.10.10:37252 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33454 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33454 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33454 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33454 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33454 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33455 fd=57 ACCEPT from IP=10.10.10.10:37255 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33455 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33455 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33455 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33455 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33455 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33456 fd=57 ACCEPT from IP=10.10.10.10:37258 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33456 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(?=undefined)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33456 op=0 SRCH attr=uid SolarisUserQualifier SolarisAttrReserved1 SolarisAttrReserved2 SolarisAttrKeyValue
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33456 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33456 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33456 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33457 fd=57 ACCEPT from IP=10.10.10.10:37261 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33457 op=0 SRCH base="ou=projects,dc=example,dc=com" scope=1 deref=3 filter="(&(?=undefined)(?=undefined))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33457 op=0 SRCH attr=SolarisProjectName SolarisProjectID description memberUid memberGid SolarisProjectAttr
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33457 op=0 SEARCH RESULT tag=101 err=32 nentries=0 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33457 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33457 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33458 fd=57 ACCEPT from IP=10.10.10.10:37264 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33458 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixGroup)(gidNumber=1001))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33458 op=0 SRCH attr=cn gidnumber userpassword memberuid
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33458 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33458 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33458 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33459 fd=57 ACCEPT from IP=10.10.10.10:37267 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33459 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixGroup)(gidNumber=1001))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33459 op=0 SRCH attr=cn gidnumber userpassword memberuid
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33459 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33459 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33459 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33460 fd=57 ACCEPT from IP=10.10.10.10:37270 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33460 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33460 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33460 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33460 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33460 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33461 fd=57 ACCEPT from IP=10.10.10.10:37273 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33461 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uid=test))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33461 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33461 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33461 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33461 fd=57 closed
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33462 fd=57 ACCEPT from IP=10.10.10.10:37276 (IP=0.0.0.0:389)
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33462 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixGroup)(gidNumber=1001))"
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33462 op=0 SRCH attr=cn gidnumber userpassword memberuid
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33462 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33462 op=1 UNBIND
Aug 17 10:20:19 ldap-server slapd[26770]: conn=33462 fd=57 closed
Aug 17 10:20:23 ldap-server slapd[26770]: conn=33463 fd=57 ACCEPT from IP=10.10.10.10:37279 (IP=0.0.0.0:389)
Aug 17 10:20:23 ldap-server slapd[26770]: conn=33463 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(?=undefined)(uid=test))"
Aug 17 10:20:23 ldap-server slapd[26770]: conn=33463 op=0 SRCH attr=uid SolarisUserQualifier SolarisAttrReserved1 SolarisAttrReserved2 SolarisAttrKeyValue
Aug 17 10:20:23 ldap-server slapd[26770]: conn=33463 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:23 ldap-server slapd[26770]: conn=33463 op=1 UNBIND
Aug 17 10:20:23 ldap-server slapd[26770]: conn=33463 fd=57 closed
Aug 17 10:20:23 ldap-server slapd[26770]: conn=33464 fd=57 ACCEPT from IP=10.10.10.10:37282 (IP=0.0.0.0:389)
Aug 17 10:20:23 ldap-server slapd[26770]: conn=33464 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixGroup)(memberUid=test))"
Aug 17 10:20:23 ldap-server slapd[26770]: conn=33464 op=0 SRCH attr=cn gidnumber userpassword memberuid
Aug 17 10:20:23 ldap-server slapd[26770]: conn=33464 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:23 ldap-server slapd[26770]: conn=33464 op=1 UNBIND
Aug 17 10:20:23 ldap-server slapd[26770]: conn=33464 fd=57 closed
Aug 17 10:20:24 ldap-server slapd[26770]: conn=33465 fd=57 ACCEPT from IP=10.10.10.10:37285 (IP=0.0.0.0:389)
Aug 17 10:20:24 ldap-server slapd[26770]: conn=33465 op=0 SRCH base="" scope=0 deref=0 filter="(objectClass=*)"
Aug 17 10:20:24 ldap-server slapd[26770]: conn=33465 op=0 SRCH attr=supportedControl supportedsaslmechanisms
Aug 17 10:20:24 ldap-server slapd[26770]: conn=33465 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:24 ldap-server slapd[26770]: conn=33465 op=1 UNBIND
Aug 17 10:20:24 ldap-server slapd[26770]: conn=33465 fd=57 closed
Aug 17 10:20:26 ldap-server slapd[26770]: conn=33466 fd=57 ACCEPT from IP=10.10.10.10:37294 (IP=0.0.0.0:389)
Aug 17 10:20:26 ldap-server slapd[26770]: conn=33466 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixAccount)(uidNumber=1001))"
Aug 17 10:20:26 ldap-server slapd[26770]: conn=33466 op=0 SRCH attr=cn uid uidnumber gidnumber gecos description homedirectory loginshell
Aug 17 10:20:26 ldap-server slapd[26770]: conn=33466 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=
Aug 17 10:20:26 ldap-server slapd[26770]: conn=33466 op=1 UNBIND
Aug 17 10:20:26 ldap-server slapd[26770]: conn=33466 fd=57 closed
Aug 17 10:20:26 ldap-server slapd[26770]: conn=33467 fd=57 ACCEPT from IP=10.10.10.10:37297 (IP=0.0.0.0:389)
Aug 17 10:20:26 ldap-server slapd[26770]: conn=33467 op=0 SRCH base="ou=People,dc=example,dc=com" scope=1 deref=3 filter="(&(objectClass=posixGroup)(gidNumber=1001))"
Aug 17 10:20:26 ldap-server slapd[26770]: conn=33467 op=0 SRCH attr=cn gidnumber userpassword memberuid
Aug 17 10:20:26 ldap-server slapd[26770]: conn=33467 op=0 SEARCH RESULT tag=101 err=0 nentries=0 text=
Aug 17 10:20:26 ldap-server slapd[26770]: conn=33467 op=1 UNBIND
Aug 17 10:20:26 ldap-server slapd[26770]: conn=33467 fd=57 closed

bitlord · August 17, 2012, 9:45am

jlliagre,
Perhaps an example from you would help him more. Sometimes things said in a different way helps more. I also gave him a lot of info, I may have given to much.

---------- Post updated at 09:45 AM ---------- Previous update was at 09:29 AM ----------

Lilbighorn,
Did you add the NIS objects to the LDAP server on RHEL. If you don't add them, the Solaris client servers will not be able to login any ldap uses. Also your user needs to have every thing the my user# accounts have.