sa-ldapsearch problem

[jacklai8169]

After I install SA-ldapsearch module in my splunk ,I use this search command "|ldapsearch domain=SPL search="(objectClass=user)" ,but I got this error message...

errread, errwrite)
process = Popen(java_args)
raise child_exception
File "/opt/sbox/splunk/etc/apps/SA-ldapsearch/bin/ldapsearch.py", line 63, in
File "/opt/sbox/splunk/lib/python2.7/subprocess.py", line 1308, in execute_child
File "/opt/sbox/splunk/lib/python2.7/subprocess.py", line 711, in __init_
External search command 'ldapsearch' returned error code 1.
OSError: [Errno 2] No such file or directory
Traceback (most recent call last)

can anyone help me to solve this problem !!!!

[CryDeTaan]

Hi

I had the same issue, it seems that the ldap search app requires java.

For me it was as easy as installing java on my systems. I am running Redhat so yum install java did the job for me.

So just check how to install java for your respective OS.

I found this in the http://docs.splunk.com/Documentation/ActiveDirectory/latest/DeployAD/ConfiguretheSA-ldapsearchsuppor...

Important: The SA-ldapsearch supporting add-on for Active Directory requires the Java Standard Edition Runtime Environment version 1.7 or later. Make sure you have installed this Java runtime environment prior to installing the SA-ldapsearch supporting add-on.

Hope this help.

Cheers
C.

[jacklai8169]

splunk@A2000 ~ $ java -version
java version "1.7.0_45"
Java(TM) SE Runtime Environment (build 1.7.0_45-b18)
Java HotSpot(TM) 64-Bit Server VM (build 24.45-b08, mixed mode)

---

this is my java version result.....

[jacklai8169]

HELLO

this is my log folder files...

HadoopConnect.log license_usage.log scheduler.log splunkd_access.log.2
MSADAppChecker.log license_usage.log.1 scheduler.log.1 splunkd_access.log.3
audit.log license_usage.log.2 scheduler.log.2 splunkd_access.log.4
audit.log.1 license_usage.log.3 scheduler.log.3 splunkd_access.log.5
audit.log.2 license_usage.log.4 scheduler.log.4 splunkd_stderr.log
audit.log.3 license_usage.log.5 scheduler.log.5 splunkd_stdout.log
audit.log.4 metrics.log searchhistory.log web_access.log
audit.log.5 metrics.log.1 sos_ftr.log web_access.log.1
btool.log metrics.log.2 splunkd-utility.log web_access.log.2
django_access.log metrics.log.3 splunkd.log web_access.log.3
django_error.log metrics.log.4 splunkd.log.1 web_access.log.4
django_service.log metrics.log.5 splunkd.log.2 web_access.log.5
entity.log migration.log.2014-04-23.06-09-06 splunkd.log.3 web_availability_modular_input.log
export_metrics.log python.log splunkd.log.4 web_service.log
first_install.log python.log.1 splunkd.log.5 website_monitoring_rest_handler.log
jbridge.log python_modular_input.log splunkd_access.log website_monitoring_rest_handler.log.1

license_audit.log remote_searches.log splunkd_access.log.1

I can not find SA-ldapsearch.log........

[jacklai8169]

SOORY........where is the SA-ldapsearch.log>>

[samhughe]

In the Splunk log directory, eg $SPLUNK_HOME/var/log/splunk/

If it doesn't exist, good chance java's not in your path/java_home isn't set

[samhughe]

I had a similar issue recently, and mine was due to java not being in the path.

Is it creating a SA-ldapsearch.log (or similar log file) in your Splunk logs directory? If not make sure you have JAVA_HOME set and java in your PATH (think it needs jdk1.7). If there is a log, that should give more info as to the error