IBM Tivoli Monitoring > Version 6.3 Fix Pack 2 > Administrator's Guide > Enable user authentication > User authentication through the hub monitoring server
IBM Tivoli Monitoring, Version 6.3 Fix Pack 2
Ldapsearch for LDAP information
Ldapsearch is a command-line tool available from LDAP server vendors that you can use to verify LDAP information before configuration and to troubleshoot problems encountered during configuration. You can save a lot of time by running ldapsearch to verify the LDAP information before configuring a hub monitoring server for LDAP authentication.
Use this tool only if you are configuring LDAP authentication through the hub monitoring server. If you are configuring LDAP authentication through the Tivoli Enterprise Portal Server, use the TEPS/e (Tivoli Enterprise Portal Server extension server) administration console to verify configuration parameters.
Ideally, ldapsearch is run by the LDAP administrator. The ldapsearch command operates similarly to the ping command. If the values used as input to the command are correct, the command returns a version of the values you use in the search. If the values are not correct, the command returns nothing or returns an error message that can help you determine which value is involved, such as an incorrect password or a bad host name.
IBM Tivoli Directory Server ldapsearch is best suited for IBM Tivoli Monitoring. The Tivoli Directory Server ldapsearch supports GSKit TLS/SSL operations that are used in Tivoli Monitoring and has additional command-line options to support LDAP TLS/SSL searches. Tivoli Monitoring does not include ldapsearch with production installations. For information on Tivoli Directory Server ldapsearch, see "Client utilities" in the Tivoli Directory Server Command Reference on the IBM Security Systems Information Center.
The ldp.exe is a Microsoft Windows LDAP search tool that has the same basic features as the ldapsearch tool. You can download this tool from the Microsoft website for your version of Windows. The ldp.exe tool is included in the Windows Server 2003 CD support tools. For information on using the Microsoft Windows ldp command, see http://support.microsoft.com/kb/224543.
Another tool that can assist in LDAP configuration is the LDAP Browser tool from Softerra.
- ldapsearch command-line options
The following table lists the ldapsearch options in the command-line and their corresponding parameters located in the monitoring server configuration file.
- Sample ldapsearch command (no TLS/SSL)
Here is a sample ldapsearch command and its corresponding output data for a configuration with TLS/SSL disabled.
- Sample ldapsearch command (with TLS/SSL)
Here is a sample ldapsearch command and its corresponding output data for a configuration with TLS/SSL enabled.
Parent topic:
User authentication through the hub monitoring server