How Set authentication for ldapsearch

[dmitriys]

Hi!
When i use command 
ldapsearch -h ldap.exemple.com -p 389 -x -b dc=exemple,dc=com -L

I get all information about my instance without any authentication 
How i can set authentication to this action ?

When i  change port
ldapsearch -h ldap.exemple.com -p 636 -x -b dc=exemple,dc=com -L
I didnt get any response 
why is that so ?

Thank you!

[Alex Corcoles]

Hi!

When i use command
> ldapsearch -h ldap.exemple.com -p 389 -x -b dc=exemple,dc=com -L
>
> I get all information about my instance without any authentication
> How i can set authentication to this action ?

The term for this is "anonymous binds". How to disable them is mentioned in
the relevant guides; for instance if you are running FreeIPA from
RHEL/CentOS 8, the RHEL docs refer to:

https://access.redhat.com/documentation/en-us/red_hat_directory_server/11/ht...

When i  change port
> ldapsearch -h ldap.exemple.com -p 636 -x -b dc=exemple,dc=com -L
> I didnt get any response
> why is that so ?

389 is the default, non-encrypted port; while 636 is the encrypted one. If
you want to use encryption, I suggest you use:

$ ldapsearch -H ldaps://ldap.example.com -x ....

Cheers,

Álex

[Florence Blanc-Renaud]

On 3/27/20 9:40 AM, dmitriys via FreeIPA-users wrote:
> Hi!
> When i use command
> ldapsearch -h ldap.exemple.com -p 389 -x -b dc=exemple,dc=com -L
>
> I get all information about my instance without any authentication
> How i can set authentication to this action ?

-x means "Use simple authentication instead of SASL". If you add -D 
<binddn> -w <password>, your request will be authenticated with 
username/password. Otherwise the request is done anonymously.

All the info is available in ldapsearch man page.
HTH,
flo
> When i  change port
> ldapsearch -h ldap.exemple.com -p 636 -x -b dc=exemple,dc=com -L
> I didnt get any response
> why is that so ?
>
> Thank you!
> _______________________________________________
> FreeIPA-users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/[e-mail]...