3:40 a.m.
Hi!
When i use command
ldapsearch -h ldap.exemple.com -p 389 -x -b dc=exemple,dc=com -L
I get all information about my instance without any authentication
How i can set authentication to this action ?
When i change port
ldapsearch -h ldap.exemple.com -p 636 -x -b dc=exemple,dc=com -L
I didnt get any response
why is that so ?
Thank you!
3:53 a.m.
Hi!
When i use command
ldapsearch -h ldap.exemple.com -p 389 -x -b dc=exemple,dc=com -L
I get all information about my instance without any authentication
How i can set authentication to this action ?
The term for this is "anonymous binds". How to disable them is mentioned in
the relevant guides; for instance if you are running FreeIPA from
RHEL/CentOS 8, the RHEL docs refer to:
https://access.redhat.com/documentation/en-us/red_hat_directory_server/11...
When i change port
ldapsearch -h ldap.exemple.com -p 636 -x -b dc=exemple,dc=com -L
I didnt get any response
why is that so ?
389 is the default, non-encrypted port; while 636 is the encrypted one. If
you want to use encryption, I suggest you use:
$ ldapsearch -H ldaps://ldap.example.com -x ....
Cheers,
Álex
5:27 a.m.
On 3/27/20 9:40 AM, dmitriys via FreeIPA-users wrote:
Hi!
When i use command
ldapsearch -h ldap.exemple.com -p 389 -x -b dc=exemple,dc=com -L
I get all information about my instance without any authentication
How i can set authentication to this action ?
-x means "Use simple authentication instead of SASL". If you add -D
<binddn> -w <password>, your request will be authenticated with
username/password. Otherwise the request is done anonymously.
All the info is available in ldapsearch man page.
HTH,
flo
When i change port
ldapsearch -h ldap.exemple.com -p 636 -x -b dc=exemple,dc=com -L
I didnt get any response
why is that so ?
Thank you!
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...
1493
days inactive
1493
days old
freeipa-users@lists.fedorahosted.org
2 comments
3 participants
participants (3)
-
Alex Corcoles -
dmitriys -
Florence Blanc-Renaud