On older distributions (such as RHEL 6), _ldap.so in the app attempts to import libpython2.7.so.1.0 but fails (unless Software Collections were to be used). At search time this manifests itself by all ldapquery commands failing with exit code 1:
02-28-2018 18:11:30.620 INFO ChunkedExternProcessor - Running process: /opt/splunk/bin/python /opt/splunk/etc/apps/TA-pyLDAP/bin/ldapquery.py
02-28-2018 18:11:30.683 ERROR ChunkedExternProcessor - stderr: Traceback (most recent call last):
02-28-2018 18:11:30.683 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-pyLDAP/bin/ldapquery.py", line 6, in
02-28-2018 18:11:30.683 ERROR ChunkedExternProcessor - stderr: import ldap
02-28-2018 18:11:30.683 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-pyLDAP/bin/ldap/init.py", line 22, in
02-28-2018 18:11:30.683 ERROR ChunkedExternProcessor - stderr: import _ldap
02-28-2018 18:11:30.683 ERROR ChunkedExternProcessor - stderr: ImportError: libpython2.7.so.1.0: cannot open shared object file: No such file or directory
02-28-2018 18:11:30.687 ERROR ChunkedExternProcessor - EOF while attempting to read transport header
02-28-2018 18:11:30.687 ERROR ChunkedExternProcessor - Error in 'ldapquery' command: External search command exited unexpectedly with non-zero error code 1.
On older distributions (such as RHEL 6), _ldap.so in the app attempts to import libpython2.7.so.1.0 but fails (unless Software Collections were to be used). At search time this manifests itself by all
ldapquery
commands failing with exit code 1:02-28-2018 18:11:30.620 INFO ChunkedExternProcessor - Running process: /opt/splunk/bin/python /opt/splunk/etc/apps/TA-pyLDAP/bin/ldapquery.py 02-28-2018 18:11:30.683 ERROR ChunkedExternProcessor - stderr: Traceback (most recent call last): 02-28-2018 18:11:30.683 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-pyLDAP/bin/ldapquery.py", line 6, in
02-28-2018 18:11:30.683 ERROR ChunkedExternProcessor - stderr: import ldap
02-28-2018 18:11:30.683 ERROR ChunkedExternProcessor - stderr: File "/opt/splunk/etc/apps/TA-pyLDAP/bin/ldap/init.py", line 22, in
02-28-2018 18:11:30.683 ERROR ChunkedExternProcessor - stderr: import _ldap
02-28-2018 18:11:30.683 ERROR ChunkedExternProcessor - stderr: ImportError: libpython2.7.so.1.0: cannot open shared object file: No such file or directory
02-28-2018 18:11:30.687 ERROR ChunkedExternProcessor - EOF while attempting to read transport header
02-28-2018 18:11:30.687 ERROR ChunkedExternProcessor - Error in 'ldapquery' command: External search command exited unexpectedly with non-zero error code 1.