Asset ID:	1-72-1009968.1
Update Date:	2009-09-14
Keywords:

---

Solution Type  Problem Resolution Sure

Solution  1009968.1 :   Cannot resolve users on NAS through OpenLDAP when user DN is other and ou=People  


PreviouslyPublishedAs
213654

Symptoms

If OpenLDAP have users listed under any other DN except ou=People, NAS would fail to resolve the users.

Example

If we have DN ou=User which is populated with users details on OpenLDAP.

 dn: ou=User,dc=mydomain,dc=com
ou: User
objectClass: top
objectClass: organizationalUnit

Than NAS would fail to resolve the Users as by default NAS would send a search string to OpenLDAP with ou=People, as shown below :

 ou=people,dc=mydomain,dc=com

Resolution

One of the workaround for this problem is create an alias for DN ou=User on OpenLDAP so that whenever NAS send a search string "ou=people,dc=mydomain,dc=com", OpenLDAP redirect the search to "ou=User,dc=mydomain,dc=com"

For the above example we can create an alias for ou=People. To create an alias, we need to create an entry with the objectClass's alias and extensibleObject. The extensibleObject allows us to include the part of the DN in the alias, which is required before one can be added.

 dn: ou=People,dc=mydomain,dc=com
objectclass: alias
objectclass: extensibleObject
uid: People
aliasedobjectname: ou=User,dc=mydomain,dc=com

Once the above alias is added to the OpenLDAP we will be able to resolve the users from NAS.

Additional Information

Please refer to InfoDoc #89475 on how to troubleshoot OpenLDAP issue with NAS.

Product
Sun StorageTek 5210 NAS Appliance
Sun StorageTek 5320 NAS Gateway/Cluster System
Sun StorageTek 5320
Sun StorageTek 5320 NAS Appliance
Sun StorageTek 5310 NAS Gateway/Cluster System
Sun StorageTek 5310 NAS Gateway System
Sun StorageTek 5220 NAS Appliance
Sun StorageTek 5310 NAS Appliance

Internal Comments

It looks ou=People is hard coded in the NAS OS. Please refer to Esc : 1-21910344. Please monitor RFE CR #6588845 for updated status on this issue.

NAS, OpenLDAP, 5210, 5310, 5320, 5220
Previously Published As
90151

Change History
Date: 2007-08-05
User Name: 97961
Action: Approved
Comment: - Tidied up formatting
- Made simple sentence/grammatical corrections
Version: 4
Date: 2007-08-05
User Name: 97961
Action: Accept
Comment:
Version: 0
Date: 2007-08-05
User Name: 160775
Action: Approved
Comment: Reviewed for technical accuracy, added minor changes to wording of 'internal' section.
Version: 0
Date: 2007-08-02
User Name: 156181
Action: Approved
Comment: Hi William

Thank you for accepting this document and providing the feedback.

As suggest by you I have opened a RFE and added the same to internal section. Please review the document and provide your inputs if any.

Kind Regards
Krishan Parmar
Version: 0
Date: 2007-08-02
User Name: 156181
Action: Rejected
Comment: Hi William

Thank you for accepting this document and providing the feedback.

As suggest by you I have opened a RFE and added the same to internal section. Please review the document and provide your inputs if any.

Kind Regards
Krishan Parmar
Version: 0
Date: 2007-08-02
User Name: 160775
Action: Rejected
Comment: Good document. One small request, please add the CR # to the 'internal' field so that colleagues can track the status and see if it has been fixed before applying the workaround. I'm assuming the CR exists already, if not, please either create it or ask RPE to do so.
Version: 0
Date: 2007-08-02
User Name: 160775
Action: Accept
Comment:
Version: 0
Date: 2007-08-01
User Name: 156181
Action: Approved
Comment: Dear Sir / Madam

Please review the document and provide your inputs.

Kind Regards
Krishan Parmar
Version: 0
Date: 2007-08-01
User Name: 156181
Action: Created
Comment:
Version: 0
Product_uuid
d4e4fc3d-7c3f-11d8-9e3a-080020a9ed93|Sun StorageTek 5210 NAS Appliance
ef8d4cb2-9cd6-11da-85b4-080020a9ed93|Sun StorageTek 5320 NAS Gateway/Cluster System
9d23ea64-a8be-11da-85b4-080020a9ed93|Sun StorageTek 5320
27ca3082-cb13-11da-857a-080020a9ed93|Sun StorageTek 5320 NAS Appliance
fb861199-9cd7-11da-85b4-080020a9ed93|Sun StorageTek 5310 NAS Gateway/Cluster System
8a8b6eeb-092e-11da-99bc-080020a9ed93|Sun StorageTek 5310 NAS Gateway System
a656fa3d-fc97-11da-ac3d-080020a9ed93|Sun StorageTek 5220 NAS Appliance
63654ce5-f88d-11d8-ab63-080020a9ed93|Sun StorageTek 5310 NAS Appliance

Attachments

This solution has no attachment