LDAP - bind dn

[Ricardo M. Esteves]

Hi,

I'm trying to configure Onboard Administrator to login using my LDAP.

The thing is my users dn are like

uid=resteves,ou=People,dc=vi,dc=pt

And from what i see in the ldap logs OA tries do bind with :

[11/Jan/2011:16:23:18 +0000] conn=12274 op=1 BIND dn="cn=resteves,ou=People,dc=vi,dc=pt" method=128 version=2

which fails.

Anyway to specify which ldap field to use as user? Use uid instead of cn?

[Andras Ordogh]

hello Ricardo,

try the following:
http://h30499.www3.hp.com/t5/HP-BladeSystem/onboard-administrator-directory-groups/m-p/5030801#M13981

there is a word doc!

andras

[pz7rx8]

Are you trying to use a solution such as openLDAP or SUN DSEE ? Or are you using Active Directory with LDAP. OA does not officially support use of openLDAP but I have been able to get it to work if you need more details let me know. Funny thing is VC supports openLDAP.

[Ricardo M. Esteves]

I'm using Fedora Directory Server.

Then problem is that my users are for example:

dn="uid=resteves,ou=People,dc=vi,dc=pt"

and OA searches for:

dn="cn=resteves,ou=People,dc=vi,dc=pt"

[pz7rx8 · Accepted solution]

Ricardo,
Yep OA is not aware of UID. You need to create users as part of inetOrgPerson object class and that should get you past any authentication issues. But, then you will have authorization issues. The id must also be part of object class "user" and have a "groupMembership" attribute with the OA groups the user can access. If the object class "user" and attribute "groupMembership" does not exist in Fedora then it needs to be added.