[Fedora-directory-users] Support for Windows login?

[Nathan Kinder]

Ian Bishop wrote:

>
> Rich Megginson wrote:
>
>> Ian Bishop wrote:
>>
>>> Has anyone tested pgina against FDS?
>>>
>>> I've tried creating an entry: cn=ibishop,ou=People,dc=localdomain in 
>>> my directory and then test authenticating against the directory from 
>>> a PC running pgina on WinXP.
>>>
>>> The pgina ldap config is:
>>> LDAP method: map mode
>>> LDAP server: 192.168.2.200
>>> prepend: cn=
>>> append: ou=People,dc=localdomain
>>>
>>>
>>> When I try and bind to this with pgina I get the following in the 
>>> slapd log:
>>>
>>> fd=75 slot=75 connection from 192.168.2.183 to 192.168.2.200
>>> [08/Jun/2005:12:30:47 +1000] conn=42 op=0 BIND 
>>> dn="cn=ibishop,ou=people,dc=localdomain" method=128 version=3
>>> [08/Jun/2005:12:30:47 +1000] conn=42 op=0 RESULT err=32 tag=97 
>>> nentries=0 etime=0
>>> [08/Jun/2005:12:30:47 +1000] conn=42 op=1 UNBIND
>>> [08/Jun/2005:12:30:47 +1000] conn=42 op=1 fd=75 closed - U1
>>>
>>>
>>> My directory has all the default bind permissions (which should 
>>> allow this right?)...can anyone see what I'm doing wrong?
>>
>>
>>
>> Can you use ldapsearch -D "cn=ibishop,ou=people,dc=localdomain" -w 
>> yourpassword -s base -b "cn=ibishop,ou=people,dc=localdomain" 
>> "objectclass=*"
>> ?  If not, do you get the same error in your access log?
>>
>
> No, that fails with:
>
> ldap_simple_bind: No such object
> ldap_simple_bind: matched: ou=people,dc=localdomain
>
> Log shows:
>
> [08/Jun/2005:13:18:10 +1000] conn=52 fd=74 slot=74 connection from 
> 127.0.0.1 to 127.0.0.1
> [08/Jun/2005:13:18:10 +1000] conn=52 op=0 BIND 
> dn="cn=ibishop,ou=people,dc=localdomain" method=128 version=3
> [08/Jun/2005:13:18:10 +1000] conn=52 op=0 RESULT err=32 tag=97 
> nentries=0 etime=0
> [08/Jun/2005:13:18:10 +1000] conn=52 op=1 UNBIND
> [08/Jun/2005:13:18:10 +1000] conn=52 op=1 fd=74 closed - U1
>
>
> If I do a ldapsearch -b "ou=people,dc=localdomain" cn=ibishop, I do 
> get a result..?

You should verify the DN for this entry in the Directory Server.  The 
"cn" attribute may be equal to "ibishop", but the "dn" may be using the 
"uid" as the RDN.

-NGK

>
> -- 
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3174 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20050608/6c39f616/attachment.bin>