Re: [Fedora-directory-users] Support for Windows login?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Nathan Kinder wrote:
Ian Bishop wrote:


Rich Megginson wrote:

Ian Bishop wrote:

Has anyone tested pgina against FDS?

I've tried creating an entry: cn=ibishop,ou=People,dc=localdomain in my directory and then test authenticating against the directory from a PC running pgina on WinXP.

The pgina ldap config is:
LDAP method: map mode
LDAP server: 192.168.2.200
prepend: cn=
append: ou=People,dc=localdomain


When I try and bind to this with pgina I get the following in the slapd log:

fd=75 slot=75 connection from 192.168.2.183 to 192.168.2.200
[08/Jun/2005:12:30:47 +1000] conn=42 op=0 BIND dn="cn=ibishop,ou=people,dc=localdomain" method=128 version=3 [08/Jun/2005:12:30:47 +1000] conn=42 op=0 RESULT err=32 tag=97 nentries=0 etime=0
[08/Jun/2005:12:30:47 +1000] conn=42 op=1 UNBIND
[08/Jun/2005:12:30:47 +1000] conn=42 op=1 fd=75 closed - U1


My directory has all the default bind permissions (which should allow this right?)...can anyone see what I'm doing wrong?




Can you use ldapsearch -D "cn=ibishop,ou=people,dc=localdomain" -w yourpassword -s base -b "cn=ibishop,ou=people,dc=localdomain" "objectclass=*"
?  If not, do you get the same error in your access log?


No, that fails with:

ldap_simple_bind: No such object
ldap_simple_bind: matched: ou=people,dc=localdomain

Log shows:

[08/Jun/2005:13:18:10 +1000] conn=52 fd=74 slot=74 connection from 127.0.0.1 to 127.0.0.1 [08/Jun/2005:13:18:10 +1000] conn=52 op=0 BIND dn="cn=ibishop,ou=people,dc=localdomain" method=128 version=3 [08/Jun/2005:13:18:10 +1000] conn=52 op=0 RESULT err=32 tag=97 nentries=0 etime=0
[08/Jun/2005:13:18:10 +1000] conn=52 op=1 UNBIND
[08/Jun/2005:13:18:10 +1000] conn=52 op=1 fd=74 closed - U1


If I do a ldapsearch -b "ou=people,dc=localdomain" cn=ibishop, I do get a result..?


You should verify the DN for this entry in the Directory Server. The "cn" attribute may be equal to "ibishop", but the "dn" may be using the "uid" as the RDN.

Ahh, that's it. It works now binding with uid=ibishop,ou=people,dc=localdomain

Sorry, I'm still getting my head around LDAP.  :/

Thanks,
Ian.

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Index of Archives]     [Fedora Directory Users]     [Fedora Directory Devel]     [Fedora Announce]     [Fedora Legacy Announce]     [Kernel]     [Fedora Legacy]     [Share Photos]     [Fedora Desktop]     [PAM]     [Red Hat Watch]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite News]

  Powered by Linux