SIM 6.3 on CentOS 5.6 server. LDAP issue

[jlbillman]

I have a SIM server running CentOS 5.6 with HP SIM 6.3 installed.  I can login to SIM as root but I cannot sign in as any of the users I have setup.  The users are in LDAP and can sign into the box. I get a message in red on the SIM signon screen saying Sign-in failure and an email is kicked out indication the failure.  I added a local user and am able to login to SIM with that user.

Have I missed something?

[shocko]

Have you setup the directory config under Options -> Directory Services

[jlbillman]

Thanks for the reply.  I set my LDAP server and the port we use.  However we use StartTLS encryption.  I didn't see a way to set that.  I hit the test connectiuon button in the UI and got a message saying the connection test was successful.

I tried to login anyway and it failed.

[shocko]

'However we use StartTLS encryption'

You mean your directory uses this? Might cause SIM some issues alright. You'd need ot look at a packet trace to see the TLS return codes.

[jlbillman]

Thanks, I inherited this system and am learing as I go.

[PaMa]

Hi. Long time since last post in this thread but i have been having problems with this also so i thought i post a solution.

I finally managed to logon with AD account. All explained in this post. http://www.theitblog.se/2014/11/19/ldap-hp-sim/

This is without TLS though but maby its possible to add encryption if you get it to work like this first.

briefly i did this.

1. Install krb5 winbind

2. edit krb, samba, nsswitch configuration files

3. add computer to domain.

4. set mxpamauthrealm to winbind

5. add AD group to HP-sim.

6. reboot and login with AD account.