Sun StorageTek[TM] NAS: Cannot resolve users on NAS through OpenLDAP when user DN is other and ou=People

Asset ID:	1-72-1009968.1
Update Date:	2013-01-31
Keywords:

Solution Type Problem Resolution Sure

Solution 1009968.1 : Sun StorageTek[TM] NAS: Cannot resolve users on NAS through OpenLDAP when user DN is other and ou=People

Related Items


Sun Storage 5210 NAS Appliance
 Sun Storage 5220 NAS Appliance
 Sun Storage 5320 NAS Appliance
 Sun Storage 5310 NAS Appliance
 Sun Storage 5310 NAS Gateway System

Related Categories


PLA-Support>Sun Systems>DISK>ZFS Storage>SN-DK: SE5xxx NAS

PreviouslyPublishedAs
213654

Symptoms

If OpenLDAP have users listed under any other DN except ou=People, NAS would fail to resolve the users.

Example

If we have DN ou=User which is populated with users details on OpenLDAP.

 dn: ou=User,dc=mydomain,dc=com
ou: User
objectClass: top
objectClass: organizationalUnit

Than NAS would fail to resolve the Users as by default NAS would send a search string to OpenLDAP with ou=People, as shown below :

 ou=people,dc=mydomain,dc=com

Resolution

One of the workaround for this problem is create an alias for DN ou=User on OpenLDAP so that whenever NAS send a search string "ou=people,dc=mydomain,dc=com", OpenLDAP redirect the search to "ou=User,dc=mydomain,dc=com"

For the above example we can create an alias for ou=People. To create an alias, we need to create an entry with the objectClass's alias and extensibleObject. The extensibleObject allows us to include the part of the DN in the alias, which is required before one can be added.

 dn: ou=People,dc=mydomain,dc=com
objectclass: alias
objectclass: extensibleObject
uid: People
aliasedobjectname: ou=User,dc=mydomain,dc=com

Once the above alias is added to the OpenLDAP we will be able to resolve the users from NAS.

Additional Information

Please refer to How to debug Open LDAP issues when used with Sun StorageTek[TM] NAS. (Doc ID 1017560.1)

Internal Comments
It looks ou=People is hard coded in the NAS OS. Please refer to Esc : 1-21910344. Please monitor RFE CR #6588845 for updated status on this issue.
NAS, OpenLDAP, 5210, 5310, 5320, 5220
Previously Published As
90151

Product_uuid
d4e4fc3d-7c3f-11d8-9e3a-080020a9ed93|Sun StorageTek 5210 NAS Appliance
ef8d4cb2-9cd6-11da-85b4-080020a9ed93|Sun StorageTek 5320 NAS Gateway/Cluster System
9d23ea64-a8be-11da-85b4-080020a9ed93|Sun StorageTek 5320
27ca3082-cb13-11da-857a-080020a9ed93|Sun StorageTek 5320 NAS Appliance
fb861199-9cd7-11da-85b4-080020a9ed93|Sun StorageTek 5310 NAS Gateway/Cluster System
8a8b6eeb-092e-11da-99bc-080020a9ed93|Sun StorageTek 5310 NAS Gateway System
a656fa3d-fc97-11da-ac3d-080020a9ed93|Sun StorageTek 5220 NAS Appliance
63654ce5-f88d-11d8-ab63-080020a9ed93|Sun StorageTek 5310 NAS Appliance

Attachments

This solution has no attachment