LDAP server and replica's

[MarkHofland]

Hi all,

Do I need a replica on an OES11 server for a non anonymous LDAP query? At this moment we have four OES2 SP1 servers with replica's on it. One master on server A and three read-write replica's on server B, C and D. A couple of weeks ago we installed an OES11 server, server E, in the same tree but without a replica. If I start a LDAP browser and connect anonymous to server E, I can browse the tree, so LDAP is functionin, but if I connect with username (cn= etc.) and password I got a LDAP error 13.
Any ideas?

regards,

mark

[aburgemeister]

Follow the error message. LDAP error 13 is 'Confidentiality Required'
which means that you cannot bind without using SSL or STARTTLS. Basically
the server is rejecting your bind attempt because you're sending
credentials over the wire without encryption. This is controlled on the
LDAP Group (or maybe Server, but I think Group) object for this server in
eDirectory. The best way around it, though, is to use SSL or the STARTTLS
functionality so that you're not sending credentials across the wire
without protection.

Good luck.

[MarkHofland]

Hi Ab,

Thanks for the info, problem solved.

Regards,

Mark

[peterkuo]

Long as you have configured (which is the default) the LDAP servers to "Always Chain," the searches will tree-walk if data is not on local server. As for Error 13, as per AB, its a SSL setting thing.