[Freeipa-users] Need LDAP access for host not in IPA domain

[Detlev Habicht]

Hello,

i need a simple, plain LDAP bind for authentication for a host,
which is not part of my IPA domain.

Something like this is working in the domain:

 ldapsearch -vx -H ldaps://xxx.yyy.intern -b "cn=accounts,dc=yyy,dc=intern"

My problem is, it is only working with the hostname xxx.yyy.intern which
is part of my domain yyy.intern. But outside of the domain i have to
use the IP address or something like xxx.yyy.zzz.de .

But than i have this error message:

ldap_initialize( ldaps://xxx.yyy.zzz.de:636/??base )
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

Any idea what i can do?

Thank you!

Detlev

P.S.: I have the same problem in the domain, when i am not using 
      xxx.yyy.intern. IP address for example is also not working.

--
  Detlev  | Institut fuer Mikroelektronische Systeme
  Habicht | D-30167 Hannover +49 511 76219662 habicht at ims.uni-hannover.de
  --------+-------- Handy    +49 172 5415752  ---------------------------



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170505/632c0e13/attachment.htm>