[OGo-Users] LDAPInitialBindSpecific not working
Adam Tauno Williams
users@opengroupware.org
Tue, 06 Mar 2007 08:53:28 -0500
--=-h/z2COIbPYBPYv3XQN8M
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
On Tue, 2007-03-06 at 11:16 +0200, Juuso Alasuutari wrote:
> On Monday 05 March 2007 16:49, Adam Tauno Williams wrote:
> > > > You can also try setting "LDAPDebugEnabled" to "YES"
> > >
> > > Well, what do we have here, some noise
> > > in /var/log/opengroupware.org/ogo/webui.log:
> > > Mar 05 14:01:06 ogo-webui-1.0 [5325]: LDAP: check pwd of login 'root'=
on
> > > ldap.foo.bar,389,dc=3Dfoo,dc=3Dbar ...
> > > Mar 05 14:01:06 ogo-webui-1.0 [5325]: <0xB7A620E0[NGLdapConnection]> =
no
> > > password provided.
> > > Mar 05 14:01:06 ogo-webui-1.0 [5325]: <0xB7B6D000[LSCommandContext]>
> > > +[LSCommandContext(LDAPSupport) isLDAPLoginAuthorized:password:]: LDA=
P
> > > server 'ldap.foo.bar:389' did not authenticate user 'root'
> > > "No password provided"? I do have this line in NSGlobalDomain.plist:
> > Or perhaps this means no password was provided by the session/user in
> > order to perform authentication? Not certain this is what it means, bu=
t
> > if you have LDAP authentication enabled it is going to want a password
> > to authenticate the user; unless mod_auth_kerb is providing that then
> > you'd have a problem here.
> I'm not using Kerberos at all so I don't see how that could be relevant. =
Do=20
> you mean that OGo is expecting LDAP to return some password to use? Why, =
and=20
> what for? Or perhaps I misunderstood what you meant.
Don't worry, that is me confusing this thread with another one.
> I'm very confused by this by now. I've followed the instructions by the m=
ark,=20
> possibly there's something to be configured in slapd.conf I've failed to=20
> notice. But even with the log files the inner workings of OGo still seems=
=20
> like a small mystery to me.
Helge is correct; OGo 1.0 doesn't support LDAPv3 / Specific Binding. I
didn't notice you were using 1.0. This support exists in the alpha
1.1.x releases and [of course] in trunk nightlies.
--=-h/z2COIbPYBPYv3XQN8M
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iD8DBQBF7XJYLRePpNle04MRAlv8AJ0fAWquQk63kQMYitWc2D+PxxC+swCfVQAf
HN4zyQUXe7G8OXegpAQtKcY=
=i6Ax
-----END PGP SIGNATURE-----
--=-h/z2COIbPYBPYv3XQN8M--