You are viewing a plain text version of this content. The canonical link for it is here.

Posted to user@openmeetings.apache.org by Maxim Solodovnik <so...@gmail.com> on 2020/05/04 14:21:24 UTC

Re: Integration with Active Directory

Hello Osvaldo,

thanks for the log

You can see

 BindResponse
        Ldap Result
            Result code : (INVALID_CREDENTIALS) invalidCredentials
            Matched Dn : ''
            Diagnostic message : ''

There is something wrong with your config

can you "anonymize" and share it?

On Thu, 30 Apr 2020 at 14:45, Maxim Solodovnik <so...@gmail.com> wrote:

> I doubt I can help with such report: it has no details
>
> On Wed, 29 Apr 2020 at 22:12, Osvaldo OBA. Benítez Aliaga
> <os...@gmail.com> wrote:
> >
> > Good morning community.
> >
> > Someone has successfully integrated with the active directory. I've been
> > following the steps as indicated:
> >
> >
> https://openmeetings.apache.org/LdapAndADS.html#ldap-and-active-directory-integration
> >
> > and I have not been able to do it. I don't see where the error is.
> >
>
>
> --
> Best regards,
> Maxim
>


-- 
Best regards,
Maxim

Re: Integration with Active Directory

Posted by Maxim Solodovnik <so...@gmail.com>.

Osvaldo,

please do not write personal emails write to the user@ list instead

As I wrote before you have to check below with any LDAP explorer
I would change your config to be

ldap_userdn_format=CN=%s,CN=Users,DC=domain,DC=co,DC=cu

and try to login with
user: `support`
pass: `password for this user`

please ensure LDAp config is enabled in Admin->LDAP
and "append domain" is UNchecked


On Mon, 4 May 2020 at 22:21, Osvaldo OBA. Benítez Aliaga <
osval1980ba@gmail.com> wrote:

> Sorry, but I do not understand. This is my stage.
> I have a domain controller on Windows Server 2016.
> My domain is domain.co.cu
> In the User organizational unit the user is created so that OpenMeetings
> can authenticate: the user is support.
> It would be: CN = support, CN = Users, DC = domain, DC = co, DC = cu
> Create an organizational unit called Domain Users where the users are
> located.
> It would be: OU = Users of the domain, DC = domain, DC = co, DC = cu
>
> How would the configuration file look like?
>
> El 4/5/2020 a las 10:52, Maxim Solodovnik escribió:
> > would it be successful?
>


-- 
Best regards,
Maxim

Re: Integration with Active Directory

Posted by Maxim Solodovnik <so...@gmail.com>.

Thanks for the config

So you have
ldap_provisionning=AUTOCREATE
ldap_auth_type=SIMPLEBIND
ldap_userdn_format=uid=%s,OU=Domain user,DC=domain,DC=co,DC=cu

In such case I would recommend to get any LDAP explorer (I'm using
Apace Directory Studio)
And check if you will be able to login with
DN constructed fron user input i.e. if user has entered `test` as login the
DN will be
`uid=test,OU=Domain user,DC=domain,DC=co,DC=cu`
And user entered password

would it be successful?



On Mon, 4 May 2020 at 21:21, Maxim Solodovnik <so...@gmail.com> wrote:

> Hello Osvaldo,
>
> thanks for the log
>
> You can see
>
>  BindResponse
>         Ldap Result
>             Result code : (INVALID_CREDENTIALS) invalidCredentials
>             Matched Dn : ''
>             Diagnostic message : ''
>
> There is something wrong with your config
>
> can you "anonymize" and share it?
>
> On Thu, 30 Apr 2020 at 14:45, Maxim Solodovnik <so...@gmail.com>
> wrote:
>
>> I doubt I can help with such report: it has no details
>>
>> On Wed, 29 Apr 2020 at 22:12, Osvaldo OBA. Benítez Aliaga
>> <os...@gmail.com> wrote:
>> >
>> > Good morning community.
>> >
>> > Someone has successfully integrated with the active directory. I've been
>> > following the steps as indicated:
>> >
>> >
>> https://openmeetings.apache.org/LdapAndADS.html#ldap-and-active-directory-integration
>> >
>> > and I have not been able to do it. I don't see where the error is.
>> >
>>
>>
>> --
>> Best regards,
>> Maxim
>>
>
>
> --
> Best regards,
> Maxim
>


-- 
Best regards,
Maxim