[ 
https://issues.apache.org/jira/browse/KNOX-201?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13831856#comment-13831856
 ] 

Dilli Arumugam commented on KNOX-201:
-------------------------------------

Added the following to the troubleshooting section of user guide

#### Using ldapsearch to verify ldap connectivtiy and credentials

If your authentication to knox fails and you believe your are using correct 
creedentilas, you could try to verify the connectivity and credentials usong 
ldapsearch, assuming you are using ldap directory for authentication.

Assuming you are using the default values that came out of box with knox, your 
ldapsearch command would be like the following

<pre>
ldapsearch -h localhost -p 33389 -D 
"uid=guest,ou=people,dc=hadoop,dc=apache,dc=org" -w guest-password -b 
"uid=guest,ou=people,dc=hadoop,dc=apache,dc=org" "objectclass=*"

This should produce output like the following

# extended LDIF
#
# LDAPv3
# base <uid=guest,ou=people,dc=hadoop,dc=apache,dc=org> with scope subtree
# filter: objectclass=*
# requesting: ALL
#

# guest, people, hadoop.apache.org
dn: uid=guest,ou=people,dc=hadoop,dc=apache,dc=org
objectClass: organizationalPerson
objectClass: person
objectClass: inetOrgPerson
objectClass: top
uid: guest
cn: Guest
sn: User
userpassword:: Z3Vlc3QtcGFzc3dvcmQ=

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1

In a more general form the ldapsearch command would be

ldapsearch -h {HOST} -p {PORT} -D {DN of binding user} -w {bind password} -b 
{DN of binding user} "objectclass=*}


> add troubleshooting notes on checking ldap connectivity
> -------------------------------------------------------
>
>                 Key: KNOX-201
>                 URL: https://issues.apache.org/jira/browse/KNOX-201
>             Project: Apache Knox
>          Issue Type: Task
>          Components: Server
>    Affects Versions: 0.3.0
>            Reporter: Dilli Arumugam
>            Assignee: Dilli Arumugam
>             Fix For: 0.3.1
>
>
> We should add troubleshooting notes on checking ldap connectivity.
> Otherwise,  user could be left in dark if the authentication to Knox fails.



--
This message was sent by Atlassian JIRA
(v6.1#6144)

Reply via email to