unicheckldap

This command can be used to test:

• The connection with the LDAP server
• The existence of the login provided
• Authentication with the Login+ password provided

In LDAP synchronization mode only, the command allows to have a preview of:

• The list of users matching the filter
• The list of groups matching the filter
• The list of nested groups matching the filter

Syntax:

unicheckldap [-help] [-listgroups] [-listnestedgroups] [-listusers] [–login <val>] [–password <val>]

• -help

  Optional. Displays the command online help

• -listgroups

  Optional. In synchronization mode only, list the groups matching the filter groupsListSearchFilter

• -listnestedgroups

  Optional. In synchronization mode only, list the nested groups matching the filter nestedGroupsListSearchFilter

• -listusers

  Optional. In synchronization mode only, list the users matching the filter usersSearchFilter

• -login <val>

  Optional. Login to authenticate, used alone to test the login presence or used with -password to test the login authentication.

• -password <val>

  Optional. Password associated to the login

All arguments can be combined except -help.

The –login and –password arguments are only necessary to test the LDAP user authentication. The user must belong to usersSearchFilter, usersSearchDepth and usersSearchBase in the ldap.xml file for the unicheckldap -login -password command to be successful.

Examples:

Example of output for a connection test without authentication without login/password:

unicheckldap

UVMS configured with INTERNAL authentication.

Loading ldap.xml with authentication: false

********************

ldap.xml loaded. 1 configuration(s) found(s)

********************

Checking configuration: [LDAP Repository]:

Host: vmsdmdc002.automic.com Port: 389  SSL: false

---------------------------------------------

supported SASL mechanisms:

  + GSSAPI

  + GSS-SPNEGO

  + EXTERNAL

  + DIGEST-MD5

DIGEST-MD5 mechanism supported.

---------------------------------------------

SUCCESS Host: vmsdmdc002.automic.com configuration is OK

        Users search filter: (&(objectClass=person)(userPrincipalName=!login!))

        User list search filter: (&(objectClass=person)(userPrincipalName=*))

        Group list search filter: (&(objectClass=group)(cn=*))

        Nested group: true

        Nested group list Search Filter: (objectClass=group)

        Referral: false

********************

Example of output for a connection test without authentication with login/password:

unicheckldap -login mylogin -password mypassword

UVMS configured with INTERNAL authentication.

Loading ldap.xml with authentication: true

********************

ldap.xml loaded. 1 configuration(s) found(s)

********************

Checking configuration: [LDAP Repository]:

Host: vmsdmdc002.automic.com Port: 389  SSL: false

---------------------------------------------

supported SASL mechanisms:

  + GSSAPI

  + GSS-SPNEGO

  + EXTERNAL

  + DIGEST-MD5

DIGEST-MD5 mechanism supported.

---------------------------------------------

SUCCESS Host: vmsdmdc002.automic.com configuration is OK

        Users search filter: (&(objectClass=person)(userPrincipalName=!login!))

        User list search filter: (&(objectClass=person)(userPrincipalName=*))

        Group list search filter: (&(objectClass=group)(cn=*))

        Nested group: true

        Nested group list Search Filter: (objectClass=group)

        Referral: false

SUCCESS Login: mylogin authentication successful

********************