You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@cloudstack.apache.org by Dean Kamali <de...@gmail.com> on 2013/07/12 04:38:58 UTC

openldap and cloudstack

Hello everyone

Just wondering if I could use openldap for authentication with CS? docs
says it works with apacheDS but no where it says openldap.

Dose anyone know if it is possible? openldap is more popular and I'm more
familiar with it.

Thank you

Re: openldap and cloudstack

Posted by David Nalley <da...@gnsa.us>.

On Tue, Jul 16, 2013 at 4:21 PM, Dean Kamali <de...@gmail.com> wrote:
> shanker
>
> Thank you so much, I have used CloudMonkey and worked from the first try, I
> haven't had much success with using the URL and browser.
>
> I'm now able to use ldap passwords to log in,for existing users
> in CloudStack, now the natural question follows, is there is away I could
> sync ldap users with CloudStack?
>
> Thank you
>

Take a look at the php script in this blogpost for syncing users.
http://sysadminnotebook.blogspot.com/2012/03/cloudstack-ldap.html

--David

Re: openldap and cloudstack

Posted by Shanker Balan <sh...@shapeblue.com>.

On 16-Jul-2013, at 9:21 PM, Dean Kamali <de...@gmail.com>> wrote:

shanker

Thank you so much, I have used CloudMonkey and worked from the first try, I
haven't had much success with using the URL and browser.

CloudMonkey is wonderful. Never had success with the URL and browser myself. :)

I'm now able to use ldap passwords to log in,for existing users
in CloudStack, now the natural question follows, is there is away I could
sync ldap users with CloudStack?

I think David Nalley just posted a sync script in an earlier email. Let us know how that goes. I might have to do the same myself.

--
Shanker Balan
Managing Consultant

[cid:E7CE8425-E245-4C99-B967-713DF2967392@local]

M: +91 98860 60539
shanker.balan@shapeblue.com<ma...@shapeblue.com> | www.shapeblue.com<http://www.shapeblue.com> | Twitter:@shapeblue
ShapeBlue India, 22nd floor, Unit 2201A, World Trade Centre, Bangalore - 560 055

This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.

Re: openldap and cloudstack

Posted by Shanker Balan <sh...@shapeblue.com>.

On 16-Jul-2013, at 9:25 PM, Chip Childers <ch...@sungard.com>> wrote:

Not easily, no.

However, there is work in progress to add the capability to manage LDAP
accounts via CloudStack (creating a user in CloudStack would create them in
LDAP). That's a Google Summer of Code student project, so it's probably not
going to be out until 4.3 (end of year).

Yes, its good to know that CloudStack is one of the beneficiaries from GSoC this year. Looking forward to more "enterprisey" features for Authentication/Authorisation/Accounting making its way into CloudStack.

--
Shanker Balan
Managing Consultant

[cid:E7CE8425-E245-4C99-B967-713DF2967392@local]

Re: openldap and cloudstack

Posted by Chip Childers <ch...@sungard.com>.

Not easily, no.

However, there is work in progress to add the capability to manage LDAP
accounts via CloudStack (creating a user in CloudStack would create them in
LDAP). That's a Google Summer of Code student project, so it's probably not
going to be out until 4.3 (end of year).


On Tue, Jul 16, 2013 at 4:21 PM, Dean Kamali <de...@gmail.com> wrote:

> shanker
>
> Thank you so much, I have used CloudMonkey and worked from the first try, I
> haven't had much success with using the URL and browser.
>
> I'm now able to use ldap passwords to log in,for existing users
> in CloudStack, now the natural question follows, is there is away I could
> sync ldap users with CloudStack?
>
> Thank you
>
>
> On Tue, Jul 16, 2013 at 11:27 AM, Shanker Balan <
> shanker.balan@shapeblue.com
> > wrote:
>
> >  On 15-Jul-2013, at 9:05 PM, Dean Kamali <de...@gmail.com> wrote:
> >
> > okay, I have been trying to excite the following in my browser
> >
> > http://10.0.10.5:8080/client/api?
> >
> command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=password&port=389&response=json
> >  <
> >
> http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=rootboot&port=389&response=json
> > >
> >
> >
> > where 10.0.10.5 is my CloudStack Management server and 10.0.10.43 is
> > the OpenLDAP server
> >
> >
> > The response in the browser is
> >
> > { "ldapconfigresponse" : {"errorcode":401,"errortext":"unable to
> > verify user credentials and/or request signature"} }
> >
> >
> > Any ideas on what do I need to check?
> >
> >
> >
> >  Hi Dean,
> >
> >  I just setup CloudStack 4.1 to use Active Directory via OpenLDAP proxies
> > and it works fine. One thing that I did differently is to use CloudMonkey
> > CLI to add the LDAP configuration.
> >
> >  $ cloudmonkey
> > cloudmonkey> api ldapConfig hostname=1.2.3.4 searchbase=DC=XXX,DC=LOCAL
> > queryfilter=(uid=%u) binddn=CN=XXX,DC=XXX,DC=LOCAL bindpass=1.2.3.4
> port=389
> > ldapconfig:
> > binddn = CN=xxxx
> > hostname = 1.2.3.4
> > port = false
> > queryfilter = (uid=%u)
> > searchbase = DC=XXX,DC=LOCAL
> >
> >  I assumed that CloudStack would automatically populate the user entry on
> > successful authentication which it did not.
> >
> >  You need to create an identical user in CloudStack else authentication
> > will fail. The other thing is that CloudStack allows only one ldap server
> > to connect to. Will need to use a LB in front of the LDAP servers in case
> > you need HA for authentication.
> >
> >  Hth.
> > @shankerbalan
> >
> >
> >
> > Thanks
> >
> >
> >
> > On Mon, Jul 15, 2013 at 11:35 AM, Dean Kamali <de...@gmail.com>
> > wrote:
> >
> > In fact, I will set it up today, and let you guys know
> >
> >
> > On Mon, Jul 15, 2013 at 11:33 AM, Gavin Henry <ghenry@suretec.co.uk
> >wrote:
> >
> >  Installation of OpenLDAP:
> > http://imduffy15.blogspot.ie/2013/06/setting-up-openldap-server.html
> >
> >
> > Hi all,
> >
> > If you're doing this for a production system please don't use any
> > distro bundled version of OpenLDAP especially on Red Hat and CentOS
> > distros. Debian isn't too bad and either is Ubuntu. Please get a
> > proper up to date version from:
> >
> > http://ltb-project.org/wiki/download
> >
> > Thanks,
> >
> > Gavin. (ghenry@OpenLDAP.org)
> >
> > --
> > Kind Regards,
> >
> > Gavin Henry.
> > Managing Director.
> >
> > T +44 (0) 1224 279484
> > M +44 (0) 7930 323266
> > F +44 (0) 1224 824887
> > E ghenry@suretec.co.uk
> >
> > Open Source. Open Solutions(tm).
> >
> > http://www.suretecsystems.com/
> >
> > Suretec Systems is a limited company registered in Scotland. Registered
> > number: SC258005. Registered office: 24 Cormack Park, Rothienorman,
> > Inverurie,
> > Aberdeenshire, AB51 8GL.
> >
> > Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html
> >
> > Do you know we have our own VoIP provider called SureVoIP? See
> > http://www.surevoip.co.uk
> >
> > Did you see our API? http://www.surevoip.co.uk/api
> >
> >
> >
> >
> > --
> > Shanker Balan
> > Managing Consultant
> >
> >
> >
> >  M: +91 98860 60539
> >  shanker.balan@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
> >  ShapeBlue India, 22nd floor, Unit 2201A, World Trade Centre, Bangalore -
> > 560 055
> >
> > This email and any attachments to it may be confidential and are intended
> > solely for the use of the individual to whom it is addressed. Any views
> or
> > opinions expressed are solely those of the author and do not necessarily
> > represent those of Shape Blue Ltd or related companies. If you are not
> the
> > intended recipient of this email, you must neither take any action based
> > upon its contents, nor copy or show it to anyone. Please contact the
> sender
> > if you believe you have received this email in error. Shape Blue Ltd is a
> > company incorporated in England & Wales. ShapeBlue Services India LLP is
> > operated under license from Shape Blue Ltd. ShapeBlue is a registered
> > trademark.
> >
>

Re: openldap and cloudstack

Posted by Dean Kamali <de...@gmail.com>.

shanker

Thank you so much, I have used CloudMonkey and worked from the first try, I
haven't had much success with using the URL and browser.

I'm now able to use ldap passwords to log in,for existing users
in CloudStack, now the natural question follows, is there is away I could
sync ldap users with CloudStack?

Thank you


On Tue, Jul 16, 2013 at 11:27 AM, Shanker Balan <shanker.balan@shapeblue.com
> wrote:

>  On 15-Jul-2013, at 9:05 PM, Dean Kamali <de...@gmail.com> wrote:
>
> okay, I have been trying to excite the following in my browser
>
> http://10.0.10.5:8080/client/api?
> command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=password&port=389&response=json
>  <
> http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=rootboot&port=389&response=json
> >
>
>
> where 10.0.10.5 is my CloudStack Management server and 10.0.10.43 is
> the OpenLDAP server
>
>
> The response in the browser is
>
> { "ldapconfigresponse" : {"errorcode":401,"errortext":"unable to
> verify user credentials and/or request signature"} }
>
>
> Any ideas on what do I need to check?
>
>
>
>  Hi Dean,
>
>  I just setup CloudStack 4.1 to use Active Directory via OpenLDAP proxies
> and it works fine. One thing that I did differently is to use CloudMonkey
> CLI to add the LDAP configuration.
>
>  $ cloudmonkey
> cloudmonkey> api ldapConfig hostname=1.2.3.4 searchbase=DC=XXX,DC=LOCAL
> queryfilter=(uid=%u) binddn=CN=XXX,DC=XXX,DC=LOCAL bindpass=1.2.3.4 port=389
> ldapconfig:
> binddn = CN=xxxx
> hostname = 1.2.3.4
> port = false
> queryfilter = (uid=%u)
> searchbase = DC=XXX,DC=LOCAL
>
>  I assumed that CloudStack would automatically populate the user entry on
> successful authentication which it did not.
>
>  You need to create an identical user in CloudStack else authentication
> will fail. The other thing is that CloudStack allows only one ldap server
> to connect to. Will need to use a LB in front of the LDAP servers in case
> you need HA for authentication.
>
>  Hth.
> @shankerbalan
>
>
>
> Thanks
>
>
>
> On Mon, Jul 15, 2013 at 11:35 AM, Dean Kamali <de...@gmail.com>
> wrote:
>
> In fact, I will set it up today, and let you guys know
>
>
> On Mon, Jul 15, 2013 at 11:33 AM, Gavin Henry <gh...@suretec.co.uk>wrote:
>
>  Installation of OpenLDAP:
> http://imduffy15.blogspot.ie/2013/06/setting-up-openldap-server.html
>
>
> Hi all,
>
> If you're doing this for a production system please don't use any
> distro bundled version of OpenLDAP especially on Red Hat and CentOS
> distros. Debian isn't too bad and either is Ubuntu. Please get a
> proper up to date version from:
>
> http://ltb-project.org/wiki/download
>
> Thanks,
>
> Gavin. (ghenry@OpenLDAP.org)
>
> --
> Kind Regards,
>
> Gavin Henry.
> Managing Director.
>
> T +44 (0) 1224 279484
> M +44 (0) 7930 323266
> F +44 (0) 1224 824887
> E ghenry@suretec.co.uk
>
> Open Source. Open Solutions(tm).
>
> http://www.suretecsystems.com/
>
> Suretec Systems is a limited company registered in Scotland. Registered
> number: SC258005. Registered office: 24 Cormack Park, Rothienorman,
> Inverurie,
> Aberdeenshire, AB51 8GL.
>
> Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html
>
> Do you know we have our own VoIP provider called SureVoIP? See
> http://www.surevoip.co.uk
>
> Did you see our API? http://www.surevoip.co.uk/api
>
>
>
>
> --
> Shanker Balan
> Managing Consultant
>
>
>
>  M: +91 98860 60539
>  shanker.balan@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
>  ShapeBlue India, 22nd floor, Unit 2201A, World Trade Centre, Bangalore -
> 560 055
>
> This email and any attachments to it may be confidential and are intended
> solely for the use of the individual to whom it is addressed. Any views or
> opinions expressed are solely those of the author and do not necessarily
> represent those of Shape Blue Ltd or related companies. If you are not the
> intended recipient of this email, you must neither take any action based
> upon its contents, nor copy or show it to anyone. Please contact the sender
> if you believe you have received this email in error. Shape Blue Ltd is a
> company incorporated in England & Wales. ShapeBlue Services India LLP is
> operated under license from Shape Blue Ltd. ShapeBlue is a registered
> trademark.
>

Re: openldap and cloudstack

Posted by Shanker Balan <sh...@shapeblue.com>.

On 15-Jul-2013, at 9:05 PM, Dean Kamali <de...@gmail.com>> wrote:

okay, I have been trying to excite the following in my browser

http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=password&port=389&response=json
<http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=rootboot&port=389&response=json>

where 10.0.10.5 is my CloudStack Management server and 10.0.10.43 is
the OpenLDAP server


The response in the browser is

{ "ldapconfigresponse" : {"errorcode":401,"errortext":"unable to
verify user credentials and/or request signature"} }


Any ideas on what do I need to check?



Hi Dean,

I just setup CloudStack 4.1 to use Active Directory via OpenLDAP proxies and it works fine. One thing that I did differently is to use CloudMonkey CLI to add the LDAP configuration.

$ cloudmonkey
cloudmonkey> api ldapConfig hostname=1.2.3.4 searchbase=DC=XXX,DC=LOCAL queryfilter=(uid=%u) binddn=CN=XXX,DC=XXX,DC=LOCAL bindpass=1.2.3.4 port=389
ldapconfig:
binddn = CN=xxxx
hostname = 1.2.3.4
port = false
queryfilter = (uid=%u)
searchbase = DC=XXX,DC=LOCAL

I assumed that CloudStack would automatically populate the user entry on successful authentication which it did not.

You need to create an identical user in CloudStack else authentication will fail. The other thing is that CloudStack allows only one ldap server to connect to. Will need to use a LB in front of the LDAP servers in case you need HA for authentication.

Hth.
@shankerbalan



Thanks



On Mon, Jul 15, 2013 at 11:35 AM, Dean Kamali <de...@gmail.com>> wrote:

In fact, I will set it up today, and let you guys know


On Mon, Jul 15, 2013 at 11:33 AM, Gavin Henry <gh...@suretec.co.uk>>wrote:

Installation of OpenLDAP:
http://imduffy15.blogspot.ie/2013/06/setting-up-openldap-server.html

Hi all,

If you're doing this for a production system please don't use any
distro bundled version of OpenLDAP especially on Red Hat and CentOS
distros. Debian isn't too bad and either is Ubuntu. Please get a
proper up to date version from:

http://ltb-project.org/wiki/download

Thanks,

Gavin. (ghenry@OpenLDAP.org)

--
Kind Regards,

Gavin Henry.
Managing Director.

T +44 (0) 1224 279484
M +44 (0) 7930 323266
F +44 (0) 1224 824887
E ghenry@suretec.co.uk

Open Source. Open Solutions(tm).

http://www.suretecsystems.com/

Suretec Systems is a limited company registered in Scotland. Registered
number: SC258005. Registered office: 24 Cormack Park, Rothienorman,
Inverurie,
Aberdeenshire, AB51 8GL.

Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html

Do you know we have our own VoIP provider called SureVoIP? See
http://www.surevoip.co.uk

Did you see our API? http://www.surevoip.co.uk/api




--
Shanker Balan
Managing Consultant

[cid:E7CE8425-E245-4C99-B967-713DF2967392@local]

M: +91 98860 60539
shanker.balan@shapeblue.com<ma...@shapeblue.com> | www.shapeblue.com<http://www.shapeblue.com> | Twitter:@shapeblue
ShapeBlue India, 22nd floor, Unit 2201A, World Trade Centre, Bangalore - 560 055

This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. Any views or opinions expressed are solely those of the author and do not necessarily represent those of Shape Blue Ltd or related companies. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. Shape Blue Ltd is a company incorporated in England & Wales. ShapeBlue Services India LLP is operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.

RE: openldap and cloudstack

Posted by Suresh Sadhu <Su...@citrix.com>.

Are you able to connect using 389 port manually. Most probably the provided credentials or configuration might be wrong. Hope you already checked manually if not Can you please confirm by manually connecting from ldap client with below details to your ldap server.

Regards
sadhu

-----Original Message-----
From: Dean Kamali [mailto:dean.kamali@gmail.com] 
Sent: 16 July 2013 01:35
To: users@cloudstack.apache.org
Subject: Re: openldap and cloudstack

okay, I have been trying to excite the following in my browser

http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=password&port=389&response=json
<http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=rootboot&port=389&response=json>

where 10.0.10.5 is my CloudStack Management server and 10.0.10.43 is the OpenLDAP server


The response in the browser is

{ "ldapconfigresponse" : {"errorcode":401,"errortext":"unable to verify user credentials and/or request signature"} }


Any ideas on what do I need to check?


Thanks



On Mon, Jul 15, 2013 at 11:35 AM, Dean Kamali <de...@gmail.com> wrote:

> In fact, I will set it up today, and let you guys know
>
>
> On Mon, Jul 15, 2013 at 11:33 AM, Gavin Henry <gh...@suretec.co.uk>wrote:
>
>> > Installation of OpenLDAP:
>> > http://imduffy15.blogspot.ie/2013/06/setting-up-openldap-server.htm
>> > l
>>
>> Hi all,
>>
>> If you're doing this for a production system please don't use any 
>> distro bundled version of OpenLDAP especially on Red Hat and CentOS 
>> distros. Debian isn't too bad and either is Ubuntu. Please get a 
>> proper up to date version from:
>>
>> http://ltb-project.org/wiki/download
>>
>> Thanks,
>>
>> Gavin. (ghenry@OpenLDAP.org)
>>
>> --
>> Kind Regards,
>>
>> Gavin Henry.
>> Managing Director.
>>
>> T +44 (0) 1224 279484
>> M +44 (0) 7930 323266
>> F +44 (0) 1224 824887
>> E ghenry@suretec.co.uk
>>
>> Open Source. Open Solutions(tm).
>>
>> http://www.suretecsystems.com/
>>
>> Suretec Systems is a limited company registered in Scotland. 
>> Registered
>> number: SC258005. Registered office: 24 Cormack Park, Rothienorman, 
>> Inverurie, Aberdeenshire, AB51 8GL.
>>
>> Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html
>>
>> Do you know we have our own VoIP provider called SureVoIP? See 
>> http://www.surevoip.co.uk
>>
>> Did you see our API? http://www.surevoip.co.uk/api
>>
>
>

Re: openldap and cloudstack

Posted by Kirk Jantzer <ki...@gmail.com>.

Did you create an account in CS to match that of the one on the leap server
you're using to bind with the authentication?

Regards,

Kirk Jantzer
(678) 561-5475
http://about.me/kirkjantzer
On Jul 15, 2013 5:42 PM, "Dean Kamali" <de...@gmail.com> wrote:

> I just did, getting the same output
>
> I am expecting to see some sort of a sucsess message?
> On Jul 15, 2013 5:30 PM, "Kirk Jantzer" <ki...@gmail.com> wrote:
>
> > Try enabling the api on port 8096 in global settings, then changing you
> url
> > to use that port.
> >
> > Regards,
> >
> > Kirk Jantzer
> > (678) 561-5475
> > http://about.me/kirkjantzer
> > On Jul 15, 2013 4:06 PM, "Dean Kamali" <de...@gmail.com> wrote:
> >
> > > okay, I have been trying to excite the following in my browser
> > >
> > >
> > >
> >
> http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=password&port=389&response=json
> > > <
> > >
> >
> http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=rootboot&port=389&response=json
> > > >
> > >
> > > where 10.0.10.5 is my CloudStack Management server and 10.0.10.43 is
> > > the OpenLDAP server
> > >
> > >
> > > The response in the browser is
> > >
> > > { "ldapconfigresponse" : {"errorcode":401,"errortext":"unable to
> > > verify user credentials and/or request signature"} }
> > >
> > >
> > > Any ideas on what do I need to check?
> > >
> > >
> > > Thanks
> > >
> > >
> > >
> > > On Mon, Jul 15, 2013 at 11:35 AM, Dean Kamali <de...@gmail.com>
> > > wrote:
> > >
> > > > In fact, I will set it up today, and let you guys know
> > > >
> > > >
> > > > On Mon, Jul 15, 2013 at 11:33 AM, Gavin Henry <ghenry@suretec.co.uk
> > > >wrote:
> > > >
> > > >> > Installation of OpenLDAP:
> > > >> >
> > http://imduffy15.blogspot.ie/2013/06/setting-up-openldap-server.html
> > > >>
> > > >> Hi all,
> > > >>
> > > >> If you're doing this for a production system please don't use any
> > > >> distro bundled version of OpenLDAP especially on Red Hat and CentOS
> > > >> distros. Debian isn't too bad and either is Ubuntu. Please get a
> > > >> proper up to date version from:
> > > >>
> > > >> http://ltb-project.org/wiki/download
> > > >>
> > > >> Thanks,
> > > >>
> > > >> Gavin. (ghenry@OpenLDAP.org)
> > > >>
> > > >> --
> > > >> Kind Regards,
> > > >>
> > > >> Gavin Henry.
> > > >> Managing Director.
> > > >>
> > > >> T +44 (0) 1224 279484
> > > >> M +44 (0) 7930 323266
> > > >> F +44 (0) 1224 824887
> > > >> E ghenry@suretec.co.uk
> > > >>
> > > >> Open Source. Open Solutions(tm).
> > > >>
> > > >> http://www.suretecsystems.com/
> > > >>
> > > >> Suretec Systems is a limited company registered in Scotland.
> > Registered
> > > >> number: SC258005. Registered office: 24 Cormack Park, Rothienorman,
> > > >> Inverurie,
> > > >> Aberdeenshire, AB51 8GL.
> > > >>
> > > >> Subject to disclaimer at
> http://www.suretecgroup.com/disclaimer.html
> > > >>
> > > >> Do you know we have our own VoIP provider called SureVoIP? See
> > > >> http://www.surevoip.co.uk
> > > >>
> > > >> Did you see our API? http://www.surevoip.co.uk/api
> > > >>
> > > >
> > > >
> > >
> >
>

Re: openldap and cloudstack

Posted by Dean Kamali <de...@gmail.com>.

I just did, getting the same output

I am expecting to see some sort of a sucsess message?
On Jul 15, 2013 5:30 PM, "Kirk Jantzer" <ki...@gmail.com> wrote:

> Try enabling the api on port 8096 in global settings, then changing you url
> to use that port.
>
> Regards,
>
> Kirk Jantzer
> (678) 561-5475
> http://about.me/kirkjantzer
> On Jul 15, 2013 4:06 PM, "Dean Kamali" <de...@gmail.com> wrote:
>
> > okay, I have been trying to excite the following in my browser
> >
> >
> >
> http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=password&port=389&response=json
> > <
> >
> http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=rootboot&port=389&response=json
> > >
> >
> > where 10.0.10.5 is my CloudStack Management server and 10.0.10.43 is
> > the OpenLDAP server
> >
> >
> > The response in the browser is
> >
> > { "ldapconfigresponse" : {"errorcode":401,"errortext":"unable to
> > verify user credentials and/or request signature"} }
> >
> >
> > Any ideas on what do I need to check?
> >
> >
> > Thanks
> >
> >
> >
> > On Mon, Jul 15, 2013 at 11:35 AM, Dean Kamali <de...@gmail.com>
> > wrote:
> >
> > > In fact, I will set it up today, and let you guys know
> > >
> > >
> > > On Mon, Jul 15, 2013 at 11:33 AM, Gavin Henry <ghenry@suretec.co.uk
> > >wrote:
> > >
> > >> > Installation of OpenLDAP:
> > >> >
> http://imduffy15.blogspot.ie/2013/06/setting-up-openldap-server.html
> > >>
> > >> Hi all,
> > >>
> > >> If you're doing this for a production system please don't use any
> > >> distro bundled version of OpenLDAP especially on Red Hat and CentOS
> > >> distros. Debian isn't too bad and either is Ubuntu. Please get a
> > >> proper up to date version from:
> > >>
> > >> http://ltb-project.org/wiki/download
> > >>
> > >> Thanks,
> > >>
> > >> Gavin. (ghenry@OpenLDAP.org)
> > >>
> > >> --
> > >> Kind Regards,
> > >>
> > >> Gavin Henry.
> > >> Managing Director.
> > >>
> > >> T +44 (0) 1224 279484
> > >> M +44 (0) 7930 323266
> > >> F +44 (0) 1224 824887
> > >> E ghenry@suretec.co.uk
> > >>
> > >> Open Source. Open Solutions(tm).
> > >>
> > >> http://www.suretecsystems.com/
> > >>
> > >> Suretec Systems is a limited company registered in Scotland.
> Registered
> > >> number: SC258005. Registered office: 24 Cormack Park, Rothienorman,
> > >> Inverurie,
> > >> Aberdeenshire, AB51 8GL.
> > >>
> > >> Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html
> > >>
> > >> Do you know we have our own VoIP provider called SureVoIP? See
> > >> http://www.surevoip.co.uk
> > >>
> > >> Did you see our API? http://www.surevoip.co.uk/api
> > >>
> > >
> > >
> >
>

Re: openldap and cloudstack

Posted by Kirk Jantzer <ki...@gmail.com>.

Try enabling the api on port 8096 in global settings, then changing you url
to use that port.

Regards,

Kirk Jantzer
(678) 561-5475
http://about.me/kirkjantzer
On Jul 15, 2013 4:06 PM, "Dean Kamali" <de...@gmail.com> wrote:

> okay, I have been trying to excite the following in my browser
>
>
> http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=password&port=389&response=json
> <
> http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=rootboot&port=389&response=json
> >
>
> where 10.0.10.5 is my CloudStack Management server and 10.0.10.43 is
> the OpenLDAP server
>
>
> The response in the browser is
>
> { "ldapconfigresponse" : {"errorcode":401,"errortext":"unable to
> verify user credentials and/or request signature"} }
>
>
> Any ideas on what do I need to check?
>
>
> Thanks
>
>
>
> On Mon, Jul 15, 2013 at 11:35 AM, Dean Kamali <de...@gmail.com>
> wrote:
>
> > In fact, I will set it up today, and let you guys know
> >
> >
> > On Mon, Jul 15, 2013 at 11:33 AM, Gavin Henry <ghenry@suretec.co.uk
> >wrote:
> >
> >> > Installation of OpenLDAP:
> >> > http://imduffy15.blogspot.ie/2013/06/setting-up-openldap-server.html
> >>
> >> Hi all,
> >>
> >> If you're doing this for a production system please don't use any
> >> distro bundled version of OpenLDAP especially on Red Hat and CentOS
> >> distros. Debian isn't too bad and either is Ubuntu. Please get a
> >> proper up to date version from:
> >>
> >> http://ltb-project.org/wiki/download
> >>
> >> Thanks,
> >>
> >> Gavin. (ghenry@OpenLDAP.org)
> >>
> >> --
> >> Kind Regards,
> >>
> >> Gavin Henry.
> >> Managing Director.
> >>
> >> T +44 (0) 1224 279484
> >> M +44 (0) 7930 323266
> >> F +44 (0) 1224 824887
> >> E ghenry@suretec.co.uk
> >>
> >> Open Source. Open Solutions(tm).
> >>
> >> http://www.suretecsystems.com/
> >>
> >> Suretec Systems is a limited company registered in Scotland. Registered
> >> number: SC258005. Registered office: 24 Cormack Park, Rothienorman,
> >> Inverurie,
> >> Aberdeenshire, AB51 8GL.
> >>
> >> Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html
> >>
> >> Do you know we have our own VoIP provider called SureVoIP? See
> >> http://www.surevoip.co.uk
> >>
> >> Did you see our API? http://www.surevoip.co.uk/api
> >>
> >
> >
>

Re: openldap and cloudstack

Posted by Dean Kamali <de...@gmail.com>.

okay, I have been trying to excite the following in my browser

http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=password&port=389&response=json
<http://10.0.10.5:8080/client/api?command=ldapConfig&hostname=10.0.10.43&searchbase=OU%3DUsers,DC%3Dmidnetworks,DC%3Dcorp&queryfilter=%28%26%28uid%3D%25u%29%29&binddn=CN%3Dadmin,DC%3Dmidnetworks,DC%3Dcorp&bindpass=rootboot&port=389&response=json>

where 10.0.10.5 is my CloudStack Management server and 10.0.10.43 is
the OpenLDAP server


The response in the browser is

{ "ldapconfigresponse" : {"errorcode":401,"errortext":"unable to
verify user credentials and/or request signature"} }


Any ideas on what do I need to check?


Thanks



On Mon, Jul 15, 2013 at 11:35 AM, Dean Kamali <de...@gmail.com> wrote:

> In fact, I will set it up today, and let you guys know
>
>
> On Mon, Jul 15, 2013 at 11:33 AM, Gavin Henry <gh...@suretec.co.uk>wrote:
>
>> > Installation of OpenLDAP:
>> > http://imduffy15.blogspot.ie/2013/06/setting-up-openldap-server.html
>>
>> Hi all,
>>
>> If you're doing this for a production system please don't use any
>> distro bundled version of OpenLDAP especially on Red Hat and CentOS
>> distros. Debian isn't too bad and either is Ubuntu. Please get a
>> proper up to date version from:
>>
>> http://ltb-project.org/wiki/download
>>
>> Thanks,
>>
>> Gavin. (ghenry@OpenLDAP.org)
>>
>> --
>> Kind Regards,
>>
>> Gavin Henry.
>> Managing Director.
>>
>> T +44 (0) 1224 279484
>> M +44 (0) 7930 323266
>> F +44 (0) 1224 824887
>> E ghenry@suretec.co.uk
>>
>> Open Source. Open Solutions(tm).
>>
>> http://www.suretecsystems.com/
>>
>> Suretec Systems is a limited company registered in Scotland. Registered
>> number: SC258005. Registered office: 24 Cormack Park, Rothienorman,
>> Inverurie,
>> Aberdeenshire, AB51 8GL.
>>
>> Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html
>>
>> Do you know we have our own VoIP provider called SureVoIP? See
>> http://www.surevoip.co.uk
>>
>> Did you see our API? http://www.surevoip.co.uk/api
>>
>
>

Re: openldap and cloudstack

Posted by Dean Kamali <de...@gmail.com>.

In fact, I will set it up today, and let you guys know


On Mon, Jul 15, 2013 at 11:33 AM, Gavin Henry <gh...@suretec.co.uk> wrote:

> > Installation of OpenLDAP:
> > http://imduffy15.blogspot.ie/2013/06/setting-up-openldap-server.html
>
> Hi all,
>
> If you're doing this for a production system please don't use any
> distro bundled version of OpenLDAP especially on Red Hat and CentOS
> distros. Debian isn't too bad and either is Ubuntu. Please get a
> proper up to date version from:
>
> http://ltb-project.org/wiki/download
>
> Thanks,
>
> Gavin. (ghenry@OpenLDAP.org)
>
> --
> Kind Regards,
>
> Gavin Henry.
> Managing Director.
>
> T +44 (0) 1224 279484
> M +44 (0) 7930 323266
> F +44 (0) 1224 824887
> E ghenry@suretec.co.uk
>
> Open Source. Open Solutions(tm).
>
> http://www.suretecsystems.com/
>
> Suretec Systems is a limited company registered in Scotland. Registered
> number: SC258005. Registered office: 24 Cormack Park, Rothienorman,
> Inverurie,
> Aberdeenshire, AB51 8GL.
>
> Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html
>
> Do you know we have our own VoIP provider called SureVoIP? See
> http://www.surevoip.co.uk
>
> Did you see our API? http://www.surevoip.co.uk/api
>

Re: openldap and cloudstack

Posted by Gavin Henry <gh...@suretec.co.uk>.

> Installation of OpenLDAP:
> http://imduffy15.blogspot.ie/2013/06/setting-up-openldap-server.html

Hi all,

If you're doing this for a production system please don't use any
distro bundled version of OpenLDAP especially on Red Hat and CentOS
distros. Debian isn't too bad and either is Ubuntu. Please get a
proper up to date version from:

http://ltb-project.org/wiki/download

Thanks,

Gavin. (ghenry@OpenLDAP.org)

--
Kind Regards,

Gavin Henry.
Managing Director.

T +44 (0) 1224 279484
M +44 (0) 7930 323266
F +44 (0) 1224 824887
E ghenry@suretec.co.uk

Open Source. Open Solutions(tm).

http://www.suretecsystems.com/

Suretec Systems is a limited company registered in Scotland. Registered
number: SC258005. Registered office: 24 Cormack Park, Rothienorman,
Inverurie,
Aberdeenshire, AB51 8GL.

Subject to disclaimer at http://www.suretecgroup.com/disclaimer.html

Do you know we have our own VoIP provider called SureVoIP? See
http://www.surevoip.co.uk

Did you see our API? http://www.surevoip.co.uk/api

Re: openldap and cloudstack

Posted by Ian Duffy <ia...@ianduffy.ie>.

Hi Dean,

As Sadhu mentioned OpenLDAP is supported within the current
implementation within Cloudstack 4.0 =>

Configuration of cloudstack:
http://imduffy15.blogspot.ie/2013/06/configuring-cloudstack-to-authenticate.html
(My own post)

Installation of OpenLDAP:
http://imduffy15.blogspot.ie/2013/06/setting-up-openldap-server.html

Official docs:
https://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.0.2/html/Admin_Guide/LDAPserver-for-user-authentication.html

Other blogs:
http://sysadminnotebook.blogspot.co.uk/2012/03/cloudstack-ldap.html
(Contains a user import script)
http://kirkjantzer.blogspot.co.uk/2013/03/ldap-authentication-in-cloudstack-v401.html

If you need any help getting it up just shout. I'm currently working
on improving it, hopefully these changes will be seen in Cloudstack
4.3

Thanks!
Ian

On 12 July 2013 04:49, Suresh Sadhu <Su...@citrix.com> wrote:
> HI Dean,
> Yes you can use it,It will also work with openldap.
>
> Regards
> sadhu
>
> -----Original Message-----
> From: Nguyen Anh Tu [mailto:ng.tuna@gmail.com]
> Sent: 12 July 2013 09:03
> To: Ian Duffy; dev@cloudstack.apache.org
> Subject: Fwd: openldap and cloudstack
>
> Hi Dean,
>
> In GSOC period, Ian is working on integrating LDAP to CS. I forward your mail to him
>
> ---------- Forwarded message ----------
> From: Dean Kamali <de...@gmail.com>
> Date: 2013/7/12
> Subject: openldap and cloudstack
> To: users@cloudstack.apache.org
>
>
> Hello everyone
>
> Just wondering if I could use openldap for authentication with CS? docs says it works with apacheDS but no where it says openldap.
>
> Dose anyone know if it is possible? openldap is more popular and I'm more familiar with it.
>
> Thank you
>
>
>
> --
>
> N.g.U.y.e.N.A.n.H.t.U

RE: openldap and cloudstack

Posted by Suresh Sadhu <Su...@citrix.com>.

HI Dean,
Yes you can use it,It will also work with openldap.

Regards
sadhu

-----Original Message-----
From: Nguyen Anh Tu [mailto:ng.tuna@gmail.com] 
Sent: 12 July 2013 09:03
To: Ian Duffy; dev@cloudstack.apache.org
Subject: Fwd: openldap and cloudstack

Hi Dean,

In GSOC period, Ian is working on integrating LDAP to CS. I forward your mail to him

---------- Forwarded message ----------
From: Dean Kamali <de...@gmail.com>
Date: 2013/7/12
Subject: openldap and cloudstack
To: users@cloudstack.apache.org

Hello everyone

Just wondering if I could use openldap for authentication with CS? docs says it works with apacheDS but no where it says openldap.

Dose anyone know if it is possible? openldap is more popular and I'm more familiar with it.

Thank you

-- 

N.g.U.y.e.N.A.n.H.t.U

Fwd: openldap and cloudstack

Posted by Nguyen Anh Tu <ng...@gmail.com>.

Hi Dean,

In GSOC period, Ian is working on integrating LDAP to CS. I forward your
mail to him

---------- Forwarded message ----------
From: Dean Kamali <de...@gmail.com>
Date: 2013/7/12
Subject: openldap and cloudstack
To: users@cloudstack.apache.org

Hello everyone

Just wondering if I could use openldap for authentication with CS? docs
says it works with apacheDS but no where it says openldap.

Dose anyone know if it is possible? openldap is more popular and I'm more
familiar with it.

Thank you

-- 

N.g.U.y.e.N.A.n.H.t.U

答复: openldap and cloudstack

Posted by Jerry Jiang <je...@sjcloud.cn>.

Yes, it supports as long as openldap sticks to LDAP standard.

Jerry

-----邮件原件-----
发件人: Dean Kamali [mailto:dean.kamali@gmail.com] 
发送时间: 2013年7月12日 星期五 10:39
收件人: users@cloudstack.apache.org
主题: openldap and cloudstack

Hello everyone

Just wondering if I could use openldap for authentication with CS? docs says
it works with apacheDS but no where it says openldap.

Dose anyone know if it is possible? openldap is more popular and I'm more
familiar with it.

Thank you