Subject: LDAP communications over ppp
To: None <tech-net@netbsd.org>
From: Scott Presnell <srp@zgi.com>
List: tech-net
Date: 08/04/1999 09:14:23
Hi Folks,
   I have two host, A and B connected via ppp.  Host A is running irix 6.5,
and host B runs NetBSD 1.4.

    I've successfully set up a LDAP server on host A using OpenLDAP, and
I'm able to communicate with that server via several mechanisms on the
local machine (irix 6.2 Netscape, ldap tools, etc) and other machines
(Netscape under Windows95) on the same wire (ethernet).

When I try to connect from host B across the ppp pipe, I can connect to the
LDAP server using the "ldapsearch" tool included with the OpenLDAP package.
Everything is as it should be...

However, using Netscape 4.61 for bsdi (communicator-v461.x86-bsdi-bsd2) on
the NetBSD side, I get "cannot connect to LDAP server 0x5B".

This appears to be a problem with BSDI netscape 4.61 under NetBSD 1.4,
but I'd like to make it work if there's anything I can do about it.

I've included packet dumps from both the failed and the successful
connection attempts.  Can someone help me interpret these TCP headers?

	   Thanks for any clues.

	   - Scott Presnell (srp@zgi.com)


Packet trace on the ppp interface:

(host B: BSDI Netscape LDAP request)

07:27:20.506307 B.zgi.com.65084 > A.zgi.com.389: S 23698585:23698585(0) win 16384 <mss 1460>
                         4500 002c 91c6 0000 4006 b366 c09c da37
                         c09c da2e fe3c 0185 0169 9c99 0000 0000
                         6002 4000 84c2 0000 0204 05b4
07:27:20.663882 A.zgi.com.389 > B.zgi.com.65084: S 915407312:915407312(0) ack 23698586 win 49152 <mss 1460> (DF)
                         4500 002c 4a4a 4000 3b06 bfe2 c09c da2e
                         c09c da37 0185 fe3c 3690 01d0 0169 9c9a
                         6012 c000 cc50 0000 0204 05b4
07:27:20.663952 B.zgi.com.65084 > A.zgi.com.389: R 23698586:23698586(0) win 0
                         4500 0028 91c7 0000 4006 b369 c09c da37
                         c09c da2e fe3c 0185 0169 9c9a 0000 0000
                         5004 0000 dc7b 0000


(host B: ldapsearch -b foo -h A.zgi.com objectclass=\*)

07:27:57.165132 B.zgi.com.65083 > A.zgi.com.389: S 1291834841:1291834841(0) win 16384 <mss 1460>
                         4500 002c 91c8 0000 4006 b364 c09c da37
                         c09c da2e fe3b 0185 4cff d5d9 0000 0000
                         6002 4000 ffec 0000 0204 05b4
07:27:57.323927 A.zgi.com.389 > B.zgi.com.65083: S 920140112:920140112(0) ack 1291834842 win 49152 <mss 1460> (DF)
                         4500 002c 4a58 4000 3b06 bfd4 c09c da2e
                         c09c da37 0185 fe3b 36d8 3950 4cff d5da
                         6012 c000 0fb3 0000 0204 05b4
07:27:57.323993 B.zgi.com.65083 > A.zgi.com.389: . ack 1 win 17520
                         4500 0028 91c9 0000 4006 b367 c09c da37
                         c09c da2e fe3b 0185 4cff d5da 36d8 3951
                         5010 4470 a300 0000
07:27:57.324172 B.zgi.com.65083 > A.zgi.com.389: P 1:15(14) ack 1 win 17520
                         4500 0036 91ca 0000 4006 b358 c09c da37
                         c09c da2e fe3b 0185 4cff d5da 36d8 3951
                         5018 4470 e378 0000 300c 0201 0160 0702
                         0102 0400 8000
07:27:57.495536 A.zgi.com.389 > B.zgi.com.65083: P 1:15(14) ack 15 win 49152 (DF)
                         4500 0036 4a5b 4000 3b06 bfc7 c09c da2e
                         c09c da37 0185 fe3b 36d8 3951 4cff d5e8
                         5018 c000 e3d3 0000 300c 0201 0161 070a
                         0100 0400 0400
07:27:57.496151 B.zgi.com.65083 > A.zgi.com.389: P 15:58(43) ack 15 win 17520
                         4500 0053 91cb 0000 4006 b33a c09c da37
                         c09c da2e fe3b 0185 4cff d5e8 36d8 395f
                         5018 4470 a9fe 0000 3029 0201 0263 2404
                         0463 3d55 530a 0102 0a01 0002 0100 0201
                         0001 0100 870b 6f62 6a65 6374 636c 6173
                         7330 00
07:27:57.781239 A.zgi.com.389 > B.zgi.com.65083: P 15:52(37) ack 58 win 49152 (DF)
                         4500 004d 4a6a 4000 3b06 bfa1 c09c da2e
                         c09c da37 0185 fe3b 36d8 395f 4cff d613
                         5018 c000 d465 0000 3023 0201 0264 1e04
                         0463 3d55 5330 1630 1404 0b6f 626a 6563
                         7463 6c61 7373 3105 0403 746f 70
07:27:57.865415 B.zgi.com.65083 > A.zgi.com.389: . ack 52 win 17520
                         4500 0028 91cc 0000 4006 b364 c09c da37
                         c09c da2e fe3b 0185 4cff d613 36d8 3984
                         5010 4470 a294 0000