configuring ldap client.
 

i have configured ldapserver on rhel4 for creating address book

following are configuration files on ldap server
/etc/openldap/slapd.conf
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/nis.schema

pidfile /var/run/slapd.pid
argsfile /var/run/slapd.ar

database bdb
directory /var/lib/ldap/example

suffix "dc=example, dc=com"
rootdn "cn=manager, dc=example, dc=com"
rootpw {MD5}kzbr8lCH2RyBjubp7Cn4wQ==

loglevel 4096

/etc/openldap/example.ldif

dn: dc=example, dc=com
objectclass: dcobject
objectclass: organization
dc: example
o: example

dn: cn=Manager, dc=example, dc=com
objectclass: organizationalRole
cn: Manager

dn: ou=sales, dc=example, dc=com
objectclass: organizationalunit
ou: sales

dn: cn=sandy, ou=sales, dc=example, dc=com
objectclass: organizationalPerson
objectclass: inetorgperson
displayname: sandy ronald
cn: sandy
sn: ronald
title: mailadmin
employeeNumber: 1113
mail: sandy.ronald@example.com
telephoneNumber: 411234636
mobile: 91223238
street: lakevilla, west hill road, Princeton town
postalcode: 400787
ou: sales
o: example.com

i am able to import this ldif file into database.
also when i perform the ldapsearch on this server with command
"ldapsearch –x –W –D “cn=manager, dc=example, dc =com” –b “dc=example, dc=com”"
i get correct output.

but when i am trying to search from another client machine, i am getting "error ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)"

my ldap client configuration file /etc/openldap/ldap.conf is
HOST 10.48.13.141
BASE dc=example,dc=com
port 389
.

also when i configured address book on mozilla on server., it is working fine.

but not working on another machine.

is any configuration is missing on client machine.

please help.

both ldap server and client are configured on rhel4es without any firewall or selinux.

!Can't contact" suggests a network / irewall issue, or the server is not listening on that ip. does netstat -plnt on the server show it is listening?

yes, please find the output of netstat.

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program na me
tcp 0 0 0.0.0.0:389 0.0.0.0:* LISTEN 20199/slapd
tcp 0 0 :::389 :::* LISTEN 20199/slapd
tcp 0 0 :::22 :::* LISTEN 6107/sshd

output of ldapsearch -x -D "cn=manager, dc=example, dc=com" -W -b "dc=example, dc=com" -d 4095
ldap_create
Enter LDAP Password:
ldap_sasl_bind
ldap_send_initial_request
ldap_new_connection 1 1 0
ldap_int_open_connection
ldap_connect_to_host: TCP localhost:389
ldap_new_socket: 3
ldap_prepare_socket: 3
ldap_connect_to_host: Trying 127.0.0.1:389
ldap_pvt_connect: fd: 3 tm: -1 async: 0
ldap_close_socket: 3
ldap_err2string
ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)