• Welcome to Overclockers Forums! Join us to reply in threads, receive reduced ads, and to customize your site experience!

HowTO: Setup an LDAP Server CentOS 6.3

Overclockers is supported by our readers. When you click a link to make a purchase, we may earn a commission. Learn More.
Hi @Stratus_ss

I have setuped everything and once worked now its same issue even i have name resolvers please verify below

From client machine i have checked the below steps

DNS resolving

ldap.tecmintlocal.com has address 192.168.0.222

ldapc.tecmintlocal.com has address 192.168.0.223


[root@ldapc ~]# dig ldap.tecmintlocal.com

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.6 <<>> ldap.tecmintlocal.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26141
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;ldap.tecmintlocal.com. IN A

;; ANSWER SECTION:
ldap.tecmintlocal.com. 604800 IN A 192.168.0.222

;; AUTHORITY SECTION:
tecmintlocal.com. 604800 IN NS ns.tecmintlocal.com.

;; ADDITIONAL SECTION:
ns.tecmintlocal.com. 604800 IN A 192.168.0.100

;; Query time: 0 msec
;; SERVER: 192.168.0.100#53(192.168.0.100)
;; WHEN: Thu Oct 2 14:57:32 2014
;; MSG SIZE rcvd: 88


[root@ldapc ~]# dig -x 192.168.0.222

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.6 <<>> -x 192.168.0.222
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43319
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;222.0.168.192.in-addr.arpa. IN PTR

;; ANSWER SECTION:
222.0.168.192.in-addr.arpa. 604800 IN PTR ldap.tecmintlocal.com.

;; AUTHORITY SECTION:
0.168.192.in-addr.arpa. 604800 IN NS ns.

;; Query time: 0 msec
;; SERVER: 192.168.0.100#53(192.168.0.100)
;; WHEN: Thu Oct 2 14:58:04 2014
;; MSG SIZE rcvd: 95





From client machine i have run the ldapsearch as below

[root@ldapc ~]# ldapsearch -D "cn=Manager,dc=tecmintlocal,dc=com" -W
Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base <dc=tecmintlocal,dc=com> (default) with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 32 No such object

# numResponses: 1


While i run getent passwd in client machine i can't get the ldap user's


# getent passwd
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0:eek:perator:/root:/sbin/nologin
games:x:12:100:games:/usr/games:/sbin/nologin
gopher:x:13:30:gopher:/var/gopher:/sbin/nologin
ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
abrt:x:173:173::/etc/abrt:/sbin/nologin
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
ntp:x:38:38::/etc/ntp:/sbin/nologin
saslauth:x:499:76:"Saslauthd user":/var/empty/saslauth:/sbin/nologin
postfix:x:89:89::/var/spool/postfix:/sbin/nologin
sshd:x:74:74:privilege-separated SSH:/var/empty/sshd:/sbin/nologin
tcpdump:x:72:72::/:/sbin/nologin
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
nslcd:x:65:55:LDAP Client User:/:/sbin/nologin

Even i have added

enumerate = true

in this file /etc/sssd/sssd.conf

Here is the Logs from client machine

[root@ldapc ~]#
[root@ldapc ~]# date
Thu Oct 2 15:00:41 IST 2014
[root@ldapc ~]#
[root@ldapc ~]# tail -f /var/log/sssd/*
==> /var/log/sssd/ldap_child.log <==

==> /var/log/sssd/sssd_default.log <==

==> /var/log/sssd/sssd.log <==
(Thu Oct 2 14:19:30 2014) [sssd] [mt_svc_sigkill] (0x0010): [default][1117] is not responding to SIGTERM. Sending SIGKILL.
(Thu Oct 2 14:21:20 2014) [sssd] [mt_svc_sigkill] (0x0010): [default][1387] is not responding to SIGTERM. Sending SIGKILL.
(Thu Oct 2 14:25:20 2014) [sssd] [mt_svc_sigkill] (0x0010): [default][1397] is not responding to SIGTERM. Sending SIGKILL.
(Thu Oct 2 14:27:10 2014) [sssd] [mt_svc_sigkill] (0x0010): [default][1401] is not responding to SIGTERM. Sending SIGKILL.
(Thu Oct 2 14:46:29 2014) [sssd] [mt_svc_sigkill] (0x0010): [default][1507] is not responding to SIGTERM. Sending SIGKILL.
(Thu Oct 2 14:51:30 2014) [sssd] [mt_svc_sigkill] (0x0010): [default][1117] is not responding to SIGTERM. Sending SIGKILL.
(Thu Oct 2 14:53:20 2014) [sssd] [mt_svc_sigkill] (0x0010): [default][1288] is not responding to SIGTERM. Sending SIGKILL.
(Thu Oct 2 14:55:20 2014) [sssd] [mt_svc_sigkill] (0x0010): [default][1291] is not responding to SIGTERM. Sending SIGKILL.
(Thu Oct 2 14:57:20 2014) [sssd] [mt_svc_sigkill] (0x0010): [default][1310] is not responding to SIGTERM. Sending SIGKILL.
(Thu Oct 2 14:59:20 2014) [sssd] [mt_svc_sigkill] (0x0010): [default][1313] is not responding to SIGTERM. Sending SIGKILL.

==> /var/log/sssd/sssd_nss.log <==
(Thu Oct 2 14:45:09 2014) [sssd[nss]] [dp_id_callback] (0x0010): The Monitor returned an error [org.freedesktop.DBus.Error.NoReply]
(Thu Oct 2 14:47:22 2014) [sssd[nss]] [dp_id_callback] (0x0010): The Monitor returned an error [org.freedesktop.DBus.Error.NoReply]
(Thu Oct 2 14:48:37 2014) [sssd[nss]] [dp_id_callback] (0x0010): The Monitor returned an error [org.freedesktop.DBus.Error.NoReply]

==> /var/log/sssd/sssd_pam.log <==
(Thu Oct 2 14:45:09 2014) [sssd[pam]] [dp_id_callback] (0x0010): The Monitor returned an error [org.freedesktop.DBus.Error.NoReply]
(Thu Oct 2 14:47:22 2014) [sssd[pam]] [dp_id_callback] (0x0010): The Monitor returned an error [org.freedesktop.DBus.Error.NoReply]
(Thu Oct 2 14:48:37 2014) [sssd[pam]] [dp_id_callback] (0x0010): The Monitor returned an error [org.freedesktop.DBus.Error.NoReply]
 
You didnt specify what your expected results are... i.e. I have a user named "bob" and his UID should be XXX. Here is the server querying itself showing "bob". Here is the client querying the server showing "bob".

From your output you wouldnt see anything with getent because the ldap search didnt return any results. Have you put users into LDAP?

Additionally it seems like sssd is hung for you as it is not responding to SIGTERM. You may have to reboot and/or kill the process with -9
 
Back