Problem with native ldapsearch in Solaris 10

Question

Hi all,
someone could tell me please why native ldapsearch in Solaris 10 do not work with SSL connection when same command comes with Sun Directory Server 5.2 works perfectly ?
With native ldapsearch in Solaris 10, I get the error message "Can't contact LDAP server":
# /bin/ldapsearch -v -h ldapserver -p 636 -Z -P /var/ldap -b dc=exemple,dc=fr -s base objectclass=\*
ldap_init( ldapserver, 636 )
filter pattern: objectclass=*
returning: ALL
filter is: (objectclass=*)
ldap_search: Can't contact LDAP server
When, on the same host, on which Directory server is installed, there's no problem:
# /var/opt/mps/serverroot/shared/bin/ldapsearch -v -h ldapserver -p 636 -Z -P /var/ldap -b dc=exemple,dc=fr -s base objectclass=\*
ldap_init( exemple, 636 )
ldaptool_getcertpath -- /var/opt/mps/serverroot/alias
ldaptool_getkeypath -- /var/opt/mps/serverroot/alias
ldaptool_getdonglefilename -- (null)
filter pattern: objectclass=*
returning: ALL
filter is: (objectclass=*)
version: 1
dn: dc=exemple,dc=fr
nisDomain: exemple.fr
objectClass: top
objectClass: domain
objectClass: nisDomainObject
1 matches
What can I do to bind to ldap server with SSL connection from an ordinary work station?
Thank you in advance.
Dra

Answer 1

Hi :
"The /usr/bin/ldapsearch is an old version that does not support the "-Z" and "-P" flags to test SSL connection on port 636, use the ldapsearch command from SUN DS5.0/5.1 that comes bundled with Solaris9 and usually installed at /usr/iplanet/ds5 (DS5.0/5.1) or /var/Sun/mps (DS5.1/5.2) or /var/opt/mps/serverroot (DS5.2)"
Source : http://forums.sun.com/thread.jspa?threadID=5089467
Hope this can help,
Regards,
Groucho_fr