[OGo-Users] connection with LDAP

Adam Tauno Williams users@opengroupware.org
Wed, 22 Aug 2007 08:22:27 -0400


--=-BofjjVknfSmUS/2HSF1q
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

> I installed opengroupware-1.1 on Gentoo and i can't find documentation=20
> on internet for connecting with LDAP.
> My config in /usr/local/share/libFoundation/Defaults/NSGlobalDomain.plist=
 :

Always access defaults via the Defaults command, not manually.  In this
case "Defaults read"

> {
>          Languages    =3D (English);
>          TimeZoneName =3D GMT;
>          LSAuthLDAPServer =3D "<my.server.com>";
>          LSAuthLDAPServerRoot =3D "ou=3Duser,ou=3Daccount,o=3Dldap";
>          LDAPInitialBindDN =3D "uid=3Dnss,ou=3Dadmin,ou=3Daccount,o=3Dlda=
p";
>          LDAPInitialBindPW =3D password;
>          LDAPLoginAttributeName =3D uid;
> }
> Can anybody confirm that this is the right config?

Other than is "ou=3Duser,ou=3Daccount,o=3Dldap" your real server root?  Tha=
t
naming convention doesn't correspond to X.500 or RFC2247.

> Actually it is not working. Sniffing the trafic with ethereal shows that=20
> there is no connection to the ldap server. Can anybody help me there?

Is "<my.server.com>" literal?  If so the "<>" are wrong.  By no
connection do you mean no LDAP packets or no successful connection?  If
your DSA only supports protocol level 3 then you need to set
LDAPInitialBindSpecific (as described in the Authentication chapter of
WMOGAG -
http://docs.opengroupware.org/Members/whitemice/wmogag/file_view )  Also
would be useful to set the LDAPDebugEnabled default. Both
LDAPDebugEnabled and LDAPInitialBindSpecific are boolean values;  set
then to YES or NO.

--=-BofjjVknfSmUS/2HSF1q
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQBGzCqDLRePpNle04MRAk0mAJ0fX/sixNz4dg/oLpjp1QGVwDdQegCdEvel
dv5sNHhUrsyQwMt43gNUfh4=
=Aoxe
-----END PGP SIGNATURE-----

--=-BofjjVknfSmUS/2HSF1q--