External LDAP - Users can't log in
Posted: Fri Feb 03, 2006 4:01 pm
I've configured an external Fedora Directory Server to use for authentication, and went to the Authentication Configuration Wizard to configure for external LDAP. I've entered search base, filter, and bind DN, and the Test at the end of the wizard succeeds.
But, when I go to log in as the same user that I used for the test, login fails. Also, should the internal admin still be able to login. If not, how is the administrator determined? The internal admin cannot login in either when external authentication is enabled.
Here is what an entry in my external LDAP directory looks like:
dn: uid=user,ou=People, dc=company,dc=com
mail: user@company.com
uid: user
And an ldap search with this:
ldapsearch -b "dc=company,dc=com" -D "directory manager" -w password "uid=user"
returns the user entry.
Here are the entries used for external authentication:
LDAP Url: ldap://ldap.company.com:389/
LDAP Filter: (uid=%u) or (mail=%n)
LDAP Base Search: ou=People,dc=company,dc=com
Bind DN: cn=directory manager
Bind DN Password: password
which give successful test results.
If it matters, Zimbra is running on FC4 x86.
Any help would be appreciated.
But, when I go to log in as the same user that I used for the test, login fails. Also, should the internal admin still be able to login. If not, how is the administrator determined? The internal admin cannot login in either when external authentication is enabled.
Here is what an entry in my external LDAP directory looks like:
dn: uid=user,ou=People, dc=company,dc=com
mail: user@company.com
uid: user
And an ldap search with this:
ldapsearch -b "dc=company,dc=com" -D "directory manager" -w password "uid=user"
returns the user entry.
Here are the entries used for external authentication:
LDAP Url: ldap://ldap.company.com:389/
LDAP Filter: (uid=%u) or (mail=%n)
LDAP Base Search: ou=People,dc=company,dc=com
Bind DN: cn=directory manager
Bind DN Password: password
which give successful test results.
If it matters, Zimbra is running on FC4 x86.
Any help would be appreciated.