• Recent
    • Unsolved
    • Tags
    • Popular
    • Users
    • Groups
    • Search
    • Register
    • Login

    FOG LDAP plugin

    Scheduled Pinned Locked Moved
    General Problems
    4
    15
    2.7k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • fry_pF
      fry_p Moderator @Fernando Gietz
      last edited by

      @fernando-gietz Does the built in Domain Admin have such permissions? That’s the account I am using.

      Like open source community computing? Why not do it for a good cause?
      Use your computer/server for humanitarian projects when it is idle!
      https://join.worldcommunitygrid.org?recruiterId=1026912

      F 1 Reply Last reply Reply Quote 0
      • F
        Fernando Gietz Developer @fry_p
        last edited by

        @fry_p said in FOG LDAP plugin:

        Does the built in Domain Admin have such permissions? That’s the account I am using.

        The user that I use in the plugin only has read permissions.
        In the Bind DN field I only write the username and not cn=xxx,ou=yyy,dc=zzz

        Tom ElliottT 1 Reply Last reply Reply Quote 0
        • Tom ElliottT
          Tom Elliott @Fernando Gietz
          last edited by

          @fernando-gietz I believe you need the full DN for the field, but I don’t think you need the OU itself.

          So you could do:
          cn={username},dc={domain},dc={org,com,net}

          Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG! Get in contact with me (chat bubble in the top right corner) if you want to join in.

          Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

          Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

          F 1 Reply Last reply Reply Quote 0
          • F
            Fernando Gietz Developer @Tom Elliott
            last edited by

            @tom-elliott In my case I config the Bind DN as {username}.

            Tom ElliottT 1 Reply Last reply Reply Quote 0
            • Tom ElliottT
              Tom Elliott @Fernando Gietz
              last edited by

              @fernando-gietz You’re using openldap correct?

              Please help us build the FOG community with everyone involved. It's not just about coding - way more we need people to test things, update documentation and most importantly work on uniting the community of people enjoying and working on FOG! Get in contact with me (chat bubble in the top right corner) if you want to join in.

              Web GUI issue? Please check apache error (debian/ubuntu: /var/log/apache2/error.log, centos/fedora/rhel: /var/log/httpd/error_log) and php-fpm log (/var/log/php*-fpm.log)

              Please support FOG if you like it: https://wiki.fogproject.org/wiki/index.php/Support_FOG

              1 Reply Last reply Reply Quote 0
              • F
                Fernando Gietz Developer
                last edited by

                Jajaja I think so.

                1 Reply Last reply Reply Quote 0
                • F
                  Fernando Gietz Developer
                  last edited by

                  0_1528908932902_Screenshot-2018-6-13 LDAP General.png

                  fry_pF 1 Reply Last reply Reply Quote 0
                  • fry_pF
                    fry_p Moderator @Fernando Gietz
                    last edited by

                    @fernando-gietz I believe I have successfully bound. However, when I try to log in as myself, I see the below error in /var/log/php-fpm/www-error.log
                    0_1528914674881_Capturework.PNG

                    I believe the issue is in my search dn.

                    I am trying to log in as fry_p. I am a member of the security group “fogusers” in AD. It can be found here:
                    CN=fogusers,OU=Security Groups,OU=Domain Users,DC=domainhere,DC=org

                    fry_p is a member of this group.

                    Like open source community computing? Why not do it for a good cause?
                    Use your computer/server for humanitarian projects when it is idle!
                    https://join.worldcommunitygrid.org?recruiterId=1026912

                    1 Reply Last reply Reply Quote 0
                    • F
                      Fernando Gietz Developer
                      last edited by

                      Maybe, the blank space in the OUs?

                      fry_pF 2 Replies Last reply Reply Quote 0
                      • fry_pF
                        fry_p Moderator @Fernando Gietz
                        last edited by

                        @fernando-gietz Is there a different way in the DN language to designate spaces? I tried single and double quotes but it didn’t stick. In the actual AD structure (much to my chagrin) there are spaces.

                        Like open source community computing? Why not do it for a good cause?
                        Use your computer/server for humanitarian projects when it is idle!
                        https://join.worldcommunitygrid.org?recruiterId=1026912

                        1 Reply Last reply Reply Quote 0
                        • fry_pF
                          fry_p Moderator @Fernando Gietz
                          last edited by

                          @fernando-gietz I feel foolish now. This taught me the lesson that I shouldn’t change multiple variables when trying to troubleshoot an issue.

                          Here is a screen shot of my working config:
                          0_1529084567169_fogworks.PNG

                          I think I had an incorrect group search DN set. When I put the correct DN I also messed around with the Group Member Attribute. I changed it back to sAMAccountName and presto! Thanks for everything boys!

                          Like open source community computing? Why not do it for a good cause?
                          Use your computer/server for humanitarian projects when it is idle!
                          https://join.worldcommunitygrid.org?recruiterId=1026912

                          1 Reply Last reply Reply Quote 0
                          • 1 / 1
                          • First post
                            Last post

                          143

                          Online

                          12.0k

                          Users

                          17.3k

                          Topics

                          155.2k

                          Posts
                          Copyright © 2012-2024 FOG Project