Active Directory LDAP

[Abdallah Hamad]

Hello everyone,

I really don't know what i'm doing wrong, I read a lot in the discussion forum regarding enabling LDAP authontication.

I created a user account with LDAP profile and the Login is identical to the actual username:

in the configuration this is my settings

$MyModuleSettings = array(
'authent-ldap' => array (
'host' => 'IP or AD server name',
'port' => 389,
'default_user' => 'Domain\Username',
'default_pwd' => 'Password',
'base_dn' => 'DC=Domaint,DC=local',
'user_query' => '(&(sAMAccountName=%1$s)',
'options' => array (
17 => 3,
8 => 0,
),
'start_tls' => false,
'debug' => true,

    in the error log i always get this

    Error | ldap_set_option('8', '0') returned true

2017-08-29 14:02:09 | Error | ldap_authentication: no entry found with the query '(&(sAMAccountName=Username)', base_dn = 'DC=Domain,DC=local'. User not found in LDAP.

I used the same accounts for another LDAP authontication and it is working withount any issues.

could anyone help me with this or tell me what i'm doing wrong. in PHP the LPAD extension is enabled btw

i really do appreciate your kind help,

[mateo]

Hi,

I have checked my working config file of my iTop 2.3.3 that is connecting to WIN 2012 R2 LDAP and I found one difference in a row "user_query" :

Please try this :
'user_query' => '(&(samaccountname=%1$s)

Also I have only one domain and therefore I use simple record 'default_user' => 'itop'. (without domain)

[Abdallah Hamad]

Thank you for your reply, I tried nearly everything without any luck I use iTop latest version.

I will try to change the base dn maybe I have some luck, the weird thing that I have another open source systems all working without any problem with LDAP.

again thank you for your reply.

[joebert jacaba]

your user_query is wrong. you use & but you only got one filter. just use (samaccountname=%1$s)