Skip to main content

vserver services name-service ldap check

Contributors
Suggest changes

Display validation status of a LDAP configuration

Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

Description

Use the vserver services name-service ldap check command to check the status of the LDAP configuration.

Parameters

{ [-fields <fieldname>,…​]

If you specify the -fields <fieldname>, …​ parameter, the command output also includes the specified field or fields. You can use '-fields ?' to display the fields to specify.

| [-instance ] }

If you specify the -instance parameter, the command displays detailed information about all fields.

-vserver <Vserver Name> - Vserver

Use this parameter to specify the Vserver whose LDAP configuration needs to be validated.

[-client-config <text>] - Client Configuration Name

Use this parameter to specify the LDAP client configuration which is assigned to LDAP configuration for the specified Vserver.

[-ldap-status {up|down}] - LDAP Status

Use this parameter to display information only about LDAP configurations with a status that matches the value you specify.

[-ldap-status-details <text>] - LDAP Status Details

Use this parameter to display information only about LDAP configurations with a status detail that matches the value you specify.

[-ldap-dn-status-details <text>,…​] - LDAP DN Status Details

Use this parameter to display information only about LDAP DN configurations with a status detail that matches the value you specify.

Examples

The following examples check the LDAP configuration on the SVM vs0:

cluster1::> vserver services name-service ldap check -vserver vs0
                  Vserver: vs0
Client Configuration Name: c1
              LDAP Status: up
      LDAP Status Details: Successfully connected to LDAP server "10.11.12.13".
   LDAP DN Status Details: All the configured DNs are available.
cluster1::> vserver services name-service ldap check -vserver vs0
                  Vserver: vs0
Client Configuration Name: c1
              LDAP Status: up
      LDAP Status Details: Successfully connected to LDAP server "10.11.12.13".
   LDAP DN Status Details: Validation of Domains specified in the LDAP client configuration failed. Reason: bind-dn is invalid or bind credentials are invalid. Correct the configuration and try again.
In the above example, you can correct the LDAP configuration by performing either of the following procedures:
    -- If the bind-dn is invalid, use the "ldap client modify" command to correct it.
    -- If the bind credentials are invalid, use the "ldap client modify-bind-password" command to correct them.