topic LDAP - bind dn in BladeSystem - General

LDAP - bind dn

Ricardo M. Esteves — Tue, 11 Jan 2011 16:32:10 GMT

Hi,

I'm trying to configure Onboard Administrator to login using my LDAP.

The thing is my users dn are like

uid=resteves,ou=People,dc=vi,dc=pt

And from what i see in the ldap logs OA tries do bind with :

[11/Jan/2011:16:23:18 +0000] conn=12274 op=1 BIND dn="cn=resteves,ou=People,dc=vi,dc=pt" method=128 version=2

which fails.

Anyway to specify which ldap field to use as user? Use uid instead of cn?

Re: LDAP - bind dn

Andras Ordogh — Thu, 10 Nov 2011 21:37:40 GMT

hello Ricardo,

try the following:
http://h30499.www3.hp.com/t5/HP-BladeSystem/onboard-administrator-directory-groups/m-p/5030801#M13981

there is a word doc!

andras

Re: LDAP - bind dn

pz7rx8 — Tue, 11 Jan 2011 20:30:22 GMT

Are you trying to use a solution such as openLDAP or SUN DSEE ? Or are you using Active Directory with LDAP. OA does not officially support use of openLDAP but I have been able to get it to work if you need more details let me know. Funny thing is VC supports openLDAP.

Re: LDAP - bind dn

Ricardo M. Esteves — Wed, 12 Jan 2011 10:28:41 GMT

I'm using Fedora Directory Server.

Then problem is that my users are for example:

dn="uid=resteves,ou=People,dc=vi,dc=pt"

and OA searches for:

dn="cn=resteves,ou=People,dc=vi,dc=pt"

Re: LDAP - bind dn

pz7rx8 — Thu, 13 Jan 2011 01:37:14 GMT

Ricardo,
Yep OA is not aware of UID. You need to create users as part of inetOrgPerson object class and that should get you past any authentication issues. But, then you will have authorization issues. The id must also be part of object class "user" and have a "groupMembership" attribute with the OA groups the user can access. If the object class "user" and attribute "groupMembership" does not exist in Fedora then it needs to be added.