By: Sanjeev Kumar user 12 Jun 2018 at 12:45 a.m. CDT

10 Responses
Sanjeev Kumar gravatar
When we try to create tunnel with command root@authsso:~# ssh -L 5901:localhost:1636 root@[IP of Gluu Server] and when we enter the the password which is also the password of root of our Gluu server. It is showing "Permission denied, please try again." Also please advice the best free lDAP browser for accessing Gluu LDAP.

By Thomas Gasmyr Mougang staff 12 Jun 2018 at 3:35 a.m. CDT

Thomas Gasmyr Mougang gravatar
Hi, What LDAP implementation is used on your server(OpenDJ,OpenLDAP)?

By Sanjeev Kumar user 12 Jun 2018 at 4:08 a.m. CDT

Sanjeev Kumar gravatar
we are using openDJ

By Thomas Gasmyr Mougang staff 12 Jun 2018 at 4:15 a.m. CDT

Thomas Gasmyr Mougang gravatar
You can use **Jxplorer** and the User DN by default is **cn=directory manager, o=gluu**

By Sanjeev Kumar user 12 Jun 2018 at 11:57 p.m. CDT

Sanjeev Kumar gravatar
Dear Team, Do we need to update the ox-auth.properties as there is no entry like **o=gluu** and password is not **foobar**. And when we try to create the tunnel it gives an error ****gluu@authsso:~$ ssh -L 9900:authsso.aiims.edu:1636 gluu@192.168.185.40 gluu@192.168.185.40's password: bind: Address already in use channel_setup_fwd_listener_tcpip: cannot listen to port: 9900 Could not request local forwarding.**** we are not at all able to proceed further regarding implementing LDAP as no help is available on internet regarding the error we are getting. Please guide us as we want to use gluu server at our organisation but completely stuck. thanks in advance.

By Kirill Yashuk user 26 Jun 2018 at 3:58 a.m. CDT

Kirill Yashuk gravatar
Hello everyone, I also can't figure out LDAP connection following this article https://gluu.org/docs/ce/operation/faq/ I fetch file ``` /opt/gluu-server-3.1.3/etc/gluu/conf/ox-ldap.properties ``` there I see ``` bindDN: cn=directory manager bindPassword: UkhctNHR558kUTbxbi+JCg== servers: localhost:1636 useSSL: true ssl.trustStoreFile: /etc/certs/opendj.pkcs12 ssl.trustStorePin: Gcu5erIAynXN5Xkk97GJYg== ssl.trustStoreFormat: pkcs12 ``` test server pass, so no worries I go to [#connect-an-external-ldap-browser](https://gluu.org/docs/ce/operation/faq/#connect-an-external-ldap-browser) I forward port 1636 and can't connect JXplorer, I tried different connection options. then I go to the [#adding-admin-users](https://gluu.org/docs/ce/operation/faq/#adding-admin-users) section, because it has plain commands that can potentially work easier. I execute ``` # service gluu-server-3.1.3 login ``` as put in the article , which brings me to the desired chroot. I copy LDAP search command from the article, with password changed ``` # /opt/opendj/bin/ldapsearch -p 1636 -Z -X -D 'cn=directory manager,o=gluu' -w 'UkhctNHR558kUTbxbi+JCg==' -b o=gluu gluuGroupType=gluuManagerGroup 1.1 Result Code: 49 (Invalid Credentials) ``` I try the bindDN from the properties file: ``` # /opt/opendj/bin/ldapsearch -p 1636 -Z -X -D 'cn=directory manager' -w 'UkhctNHR558kUTbxbi+JCg==' -b o=gluu gluuGroupType=gluuManagerGroup 1.1 Result Code: 49 (Invalid Credentials) ``` Now I'm out of ideas =( How do I actually connect?

By Thomas Gasmyr Mougang staff 26 Jun 2018 at 4:12 a.m. CDT

Thomas Gasmyr Mougang gravatar
``` #/opt/opendj/bin/ldapsearch -h localhost -p 1636 -Z -X -D "cn=directory manager,o=gluu" -w yourpassword -b o=gluu "objectclass=*" ``` The **- w** parameter is the password, not the encrypted version.

By Kirill Yashuk user 26 Jun 2018 at 4:24 a.m. CDT

Kirill Yashuk gravatar
the admin password actually worked, thank you.

By Kirill Yashuk user 26 Jun 2018 at 4:33 a.m. CDT

Kirill Yashuk gravatar
For those confused like I was. In JXplorer connection options: ``` Level: SSL+User+Password User: cn=directory manager Password: {installation admin password} ``` ldapsearch: ``` /opt/opendj/bin/ldapsearch -h localhost -p 1636 -Z -X -D "cn=directory manager" -w {installation admin password} -b o=gluu "objectclass=*" ```

By Sanjeev Kumar user 26 Jun 2018 at 6:32 a.m. CDT

Sanjeev Kumar gravatar
we tried ldapsearch command but we have struct with the error mentioned below: Please set OPENDJ_JAVA_HOME to the root of a Java 7 (or higher) installation or edit the java.properties file and then run the dsjavaproperties script to specify the Java version to be used

By Kirill Yashuk user 28 Jun 2018 at 6:55 a.m. CDT

Kirill Yashuk gravatar
first log into gluu's chroot environment ``` # service gluu-server-3.1.3 login ``` then ``` /opt/opendj/bin/ldapsearch -h localhost -p 1636 -Z -X -D "cn=directory manager" -w {installation admin password} -b o=gluu "objectclass=*" ```