#64 End User Log In

[gcadmin]

i need to ask for support please
i managed to coonec to my AD SERVER
DISPLAY ALL THE USERS

i have few Q

my main Q is how to set user log in
i try to login ag USERNARE + PASSWORD
USERNAME@DOMAIN + PASSWORD
...
AND KEEP FAIL

my 2 Q
is how to display only users + contacts and to hide computers or server

[James Turner]

There may be some information in your web server's error log about why logins are failing.

In order to log in, the address book first needs to search the directory for the user's account. If this stage is failing you might see an error in the log like this:

User lookup for LDAP Address Book with '(ldap-search-expression)' failed

The user account which is used to perform this search can be set via the config file, e.g.:

$ldap_server->dn_search_user = "cn=LDAP Address Book User Lookup,cn=Users,dc=ad,dc=example,dc=org";
$ldap_server->dn_search_password = "xxxxxx";

If the user was looked up successfully but their login attempt was rejected you should see an error in the web server log which looks like this...

Authentication to LDAP Address Book as '(ldap-object-dn)' failed, referer: http://addressbook.ad.example.org/

[James Turner]

You can change the $browse_ldap_filter setting in the config file to filter which types of objects get shown. The default setting will show all objects:

$browse_ldap_filter = "objectClass=*";

You can stop computer objects from being shown by changing this to:

$browse_ldap_filter = "(!(objectClass=computer))";

[gcadmin]

many thanks

[gcadmin]

$ldap_server->dn_search_user = "cn=LDAP Address Book User Lookup,cn=Users,dc=ad,dc=example,dc=org";
$ldap_server->dn_search_password = "xxxxxx";

is working for me and thanks

i will searh some data about Authentication to LDAP Address Book as '(ldap-object-dn)' failed, referer: http://addressbook.ad.example.org/

[gcadmin]

hy host is with ispcongig and i cant find any logs
any option to add admin web page for qicj settings and test

[James Turner]

I've attached a version of "utils.php" which displays diagnostic information about how a user's login is being processed, which might help diagnose issues when setting up users/logins.

To use it:

• Ensure you're using LDAP Address Book 0.41
• Replace utils.php with the attached version

To disable the diagnostic output, either switch back to the standard utils.php or add the following line to your config.php:

define("LOGIN_DEBUG",false);

[gcadmin]

many thanks
when i insert the user name and password i dont see any outpot - only in the phone book itself

[gcadmin]

Login Debugging Information
Attempting log in as 'DEFAULT' to LDAP server '$DOMAIN$' (server_id 0, type 'ad')
User 'DEFAULT' has the setting 'login_name' assigned
User 'DEFAULT' has the setting 'allow_browse' assigned
User 'DEFAULT' has the setting 'allow_search' assigned
User 'DEFAULT' has the setting 'allow_view' assigned
User 'DEFAULT' has the setting 'allow_login' assigned
User 'DEFAULT' has the setting 'allow_ldap_path' assigned
Find the user's bind DN
No previously stored bind DN for this server - lookup needed
Result of user 'ldap_dn' setting lookup: 'SEARCH'
Bind as 'CN=$$' to search for user DN: Success (result code 0)
User DN search base: $$
User DN search filter: (sAMAccountName=itt@$DOMAIN$)
User DN search result: Success (result code 0)
Ambiguous result - more than one matching bind DNs found
Log in as the user
Not attempted
Look up UID and permissions
Not attempted

[James Turner]

(I assume you've replaced your actual domain name with $DOMAIN$ for the purposes of this ticket - which is fine)

Based on the above... do you get the same result if you log in as just "itt" instead of "itt@$DOMAIN$"?

If it still says "Ambiguous result - more than one matching bind DNs found" (near the end), do you get more than one user listed if you do search using the LDAP query "(sAMAccountName=itt)" in Active Directory Users and Computers?

(Right click your domain in the left-hand panel, then "Find...", "Custom Search", "Advanced" - see attachment)

[gcadmin]

many thanks i found the issue
i used options for
$ldap_server->add_user("USERNAME",
ldap_server->add_user("DEFAULT",
i was a mistake i removed one of them and its working now
many thanks

[James Turner]

Glad you got it sorted out in the end.