Menu

LDAP connection issues

2024-06-14
2024-06-19
  • Marcus Berglund

    Marcus Berglund - 2024-06-14

    Hi, I'm having trouble enabling/using the ldap connector.

    LDAP conf

    'authent-ldap' => array (
    'host' => 'xxxxxxxxxx',
    'port' => 389,
    'ms_ldap' => true,
    'default_user' => '',
    'default_pwd' => '',
    'base_dn' => 'DC=some,DC=One,
    'user_query' => '(&(uid=%1$s))',
    'options' => array (
    17 => 3,
    8 => 0,
    ),
    'start_tls' => false,
    'debug' => true,

    I check the error log and get "ldap_authentication: wrong password for user: xxxx". The thing is when I test with a user that exist in the MS AD I get the error and when I create a user in itop that is not in the AD I get the same response.

    I have tried samaccountname=%1$s and it still does not work, this is a critical issue to be a able to use iTOP.

    Any help please.

     
  • Jeffrey Bostoen

    Jeffrey Bostoen - 2024-06-14

    In your configuration, did you correctly specify the bind user in the proper format; and with valid password?

    You may also want to take a look at your user query ("uid" -> you may want to use "samaccountname" perhaps, or "userprincipalname").

    Additionally, nowadays I recommend pointing to port 636 (LDAPS) rather than 389 (LDAP).

     
  • Marcus Berglund

    Marcus Berglund - 2024-06-19

    I got it working now. The modified php file from https://sourceforge.net/p/itop/tickets/1404/ did not work as expected.

     

Log in to post a comment.