RESOLVED - LDAP Question

[jeffs42885]

I turned LDAP on an 08 system with an invalid setting and I cannot get in.

Is there a registry key I can revert to? I checked and cant find anything. Thanks in advance.

[Justin Derrick]

Written for AIX, but it should still work for you:

https://cmod.wiki/index.php/Manually_disabling_LDAP_authentication

[jeffs42885]

Thank you sir! Much appreciated. I will try this and let ya know how i made out.

[jeffs42885]

Written for AIX, but it should still work for you:

http://cmod.wiki/index.php/Manually_disabling_LDAP_authentication

Justin, thanks again. This worked for me. You might want to add to the wiki that you need to restart the library server.

[Justin Derrick]

Excellent tip.  I wrote that article when I couldn't get CMOD to start, so that's a valid point in your scenario.

Thanks!

-JD.

[jeffs42885]

Excellent tip.  I wrote that article when I couldn't get CMOD to start, so that's a valid point in your scenario.

Thanks!

-JD.

Is it safe to assume that this is not an IBM supported method?

[Justin Derrick]

Anything that modifies the database manually is unsupported.  However, if you called them with this problem, this is how you'd have to fix it.

[jeffs42885]

Heh, I did that. And I got a blob from a link.

And the link.

Thanks again JD

[Alessandro Perucchi]

Hello Justin,

just for info, in DB2, you can use the function

BITANDNOT

in order to flip a bit according to your needs.

You were saying in the wiki:

In this example, simply subtract 4 from the value returned on your system, and update the field in the database accordingly

if you write that:

Code Select Expand

$ db2 "update arssys set sys_mask=bitandnot(sys_mask, 4)"

and if the bit 3 is set, then it will be cleared, and if it was cleared, then it stays cleared!

Kind regards,
Alex

[Justin Derrick]

I swear, I learn as much as I teach here.  :D

That's an excellent tip.  Thanks Alessandro!  I'll try and get that updated today.  :)

-JD.

[Justin Derrick]

I actually spent some time re-writing and expanding this article in the wiki -- here's the shortcut: https://cmod.wiki/index.php?title=Manually_disabling_LDAP_authentication