bug in ldaptest.c

Epp, Matthew Mr CTR USA USA matthew.epp at us.army.mil
Mon Aug 30 19:25:28 CEST 2010


So it appears that there's a bug in part of the ldap testing code.

---
bbnet/ldaptest.c (lines 85-86)
                 dbgprintf("Forcing port %d for ldaps with STARTTLS\n", LDAP_PORT );
                 ludp->lud_port = LDAP_PORT;
---

Even if you're attempting an ldaps test with a specified port, the test is still only performing a 
389 port test. I changed LDAP_PORT to LDAPS_PORT and recompiled, then tried an ldaps test again, 
however now it just doesn't appear to connect.

---
2010-08-27 16:06:45 Opening file /home/xymon/server/etc/bb-hosts
2010-08-27 16:06:45 Adding hostname 'x.x.x.x' to resolver queue
2010-08-27 16:06:45 Processing 1 DNS lookups with ARES
2010-08-27 16:06:45 Got DNS result for host x.x.x.x : 10.x.x.x
2010-08-27 16:06:45 Finished ARES queue after loop 2
2010-08-27 16:06:45 Concurrency evaluation: rlim_cur=1024, FD_SETSIZE=0, absmax=1024, initial=1014
2010-08-27 16:06:45 About to do 0 TCP tests running 256 in parallel, abs.max 1014
2010-08-27 16:06:45 TCP tests completed normally
2010-08-27 16:06:45 Forcing port 636 for ldaps with STARTTLS
2010-08-27 16:06:45 Initiating LDAP session for host x.x.x.x port 636
2010-08-27 16:06:45 Attempting to select LDAPv3
2010-08-27 16:06:45 Trying to enable TLS for session
2010-08-27 16:06:55 ldap_start_tls failed
URL        : ldaps://x.x.x.x/ou=people,dc=x,dc=x,dc=x?dn?sub?uid=healthcheck
Time spent : 0.00
LDAP output:
Can't contact LDAP server
---

The server I'm running the test against is Sun Directory 6.2, so should this test work, or should I 
give up and just use an external script for my ldaps testing?



More information about the Xymon mailing list