Re: [Fedora-directory-users] Support for Windows login?

[Nathan Kinder <nkinder@xxxxxxxxxx>]

Ian Bishop wrote:

> Rich Megginson wrote:
>
> > Ian Bishop wrote:
> >
> > > Has anyone tested pgina against FDS?
> > >
> > > I've tried creating an entry: cn=ibishop,ou=People,dc=localdomain in 
> > > my directory and then test authenticating against the directory from 
> > > a PC running pgina on WinXP.
> > >
> > > The pgina ldap config is:
> > > LDAP method: map mode
> > > LDAP server: 192.168.2.200
> > > prepend: cn=
> > > append: ou=People,dc=localdomain
> > >
> > >
> > > When I try and bind to this with pgina I get the following in the 
> > > slapd log:
> > >
> > > fd=75 slot=75 connection from 192.168.2.183 to 192.168.2.200
> > > [08/Jun/2005:12:30:47 +1000] conn=42 op=0 BIND 
> > > dn="cn=ibishop,ou=people,dc=localdomain" method=128 version=3
> > > [08/Jun/2005:12:30:47 +1000] conn=42 op=0 RESULT err=32 tag=97 
> > > nentries=0 etime=0
> > > [08/Jun/2005:12:30:47 +1000] conn=42 op=1 UNBIND
> > > [08/Jun/2005:12:30:47 +1000] conn=42 op=1 fd=75 closed - U1
> > >
> > >
> > > My directory has all the default bind permissions (which should 
> > > allow this right?)...can anyone see what I'm doing wrong?
> >
> >
> >
> > Can you use ldapsearch -D "cn=ibishop,ou=people,dc=localdomain" -w 
> > yourpassword -s base -b "cn=ibishop,ou=people,dc=localdomain" 
> > "objectclass=*"
> > ?  If not, do you get the same error in your access log?
>
> No, that fails with:
>
> ldap_simple_bind: No such object
> ldap_simple_bind: matched: ou=people,dc=localdomain
>
> Log shows:
>
> [08/Jun/2005:13:18:10 +1000] conn=52 fd=74 slot=74 connection from 
> 127.0.0.1 to 127.0.0.1
> [08/Jun/2005:13:18:10 +1000] conn=52 op=0 BIND 
> dn="cn=ibishop,ou=people,dc=localdomain" method=128 version=3
> [08/Jun/2005:13:18:10 +1000] conn=52 op=0 RESULT err=32 tag=97 
> nentries=0 etime=0
> [08/Jun/2005:13:18:10 +1000] conn=52 op=1 UNBIND
> [08/Jun/2005:13:18:10 +1000] conn=52 op=1 fd=74 closed - U1
>
>
> If I do a ldapsearch -b "ou=people,dc=localdomain" cn=ibishop, I do 
> get a result..?

You should verify the DN for this entry in the Directory Server.  The 
"cn" attribute may be equal to "ibishop", but the "dn" may be using the 
"uid" as the RDN.

-NGK

> --
> Fedora-directory-users mailing list
> Fedora-directory-users@xxxxxxxxxx
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users