LDAP settings

Post general support questions here that do not specifically fall into the Linux or Windows categories.

Moderators: Developers, Moderators

User avatar
pyth
Cacti User
Posts: 94
Joined: Thu Jan 31, 2008 8:45 am
Location: France, Grenoble
Contact:

LDAP settings

Post by pyth »

hi,

Is it possible to have an example or for information on the configuration of "Setting LDAP."

What protocol version should I choose,
If I must put SSL or TLS for encryption,
How is the option Referrals,
And "the way"! (No searching, Anonymous, Specific ....)

For the rest I think I have to give the correct information,
I already make several trying to test myself via LDAP, and each time I return of error messages.
I know that in some cases (Specific searching) that the account who i have put is blocked automatically after 3 attempts (2003 server). So it arrives to find this account, i dont know where is the problem.
Last edited by pyth on Mon Feb 18, 2008 3:20 am, edited 1 time in total.
Cacti : 0.8.7b
Architecture : 2.0
Settings : 0.3
Thold : 0.3.9
Monitor : 0.8.2
Update : 0.4
User avatar
BSOD2600
Cacti Moderator
Posts: 12171
Joined: Sat May 08, 2004 12:44 pm
Location: USA

Post by BSOD2600 »

In this post, I've got a screenshot of the ldap settings that work on my win2k3 domain... It's a very basic setup.

If you want to use encryption, etc, then you're going to need to research what tweaks need to be applied to AD to permit the php_ldap module to function properly.
User avatar
pyth
Cacti User
Posts: 94
Joined: Thu Jan 31, 2008 8:45 am
Location: France, Grenoble
Contact:

Post by pyth »

i have follow this post,
but when i want to login, i have a error message :
"Error: Access Denied, user account disabled"
I have enabled the guest account

and why in this post the "Guest User" and the "User Template" are diferent ?

in Guest user i have put the "guest" account
and in user template i have created a new account "guestldap" (like example)
Last edited by pyth on Fri Feb 15, 2008 5:39 am, edited 1 time in total.
Cacti : 0.8.7b
Architecture : 2.0
Settings : 0.3
Thold : 0.3.9
Monitor : 0.8.2
Update : 0.4
User avatar
pyth
Cacti User
Posts: 94
Joined: Thu Jan 31, 2008 8:45 am
Location: France, Grenoble
Contact:

Post by pyth »

ok i have try, if a person want login on cacti (user from base ldap), i must after go on user management and enable his account, is not possible that his account is enabled already?
Cacti : 0.8.7b
Architecture : 2.0
Settings : 0.3
Thold : 0.3.9
Monitor : 0.8.2
Update : 0.4
User avatar
pyth
Cacti User
Posts: 94
Joined: Thu Jan 31, 2008 8:45 am
Location: France, Grenoble
Contact:

Post by pyth »

its work, but now i have a new problem (there's always I know), the account with a special password (with character *$é etc...) doesnt work, you know how to solve it ?
Cacti : 0.8.7b
Architecture : 2.0
Settings : 0.3
Thold : 0.3.9
Monitor : 0.8.2
Update : 0.4
User avatar
rony
Developer/Forum Admin
Posts: 6022
Joined: Mon Nov 17, 2003 6:35 pm
Location: Michigan, USA
Contact:

Post by rony »

No solution currently for "special" passwords. I'm trying to get this fixed... :(
[size=117][i][b]Tony Roman[/b][/i][/size]
[size=84][i]Experience is what causes a person to make new mistakes instead of old ones.[/i][/size]
[size=84][i]There are only 3 way to complete a project: Good, Fast or Cheap, pick two.[/i][/size]
[size=84][i]With age comes wisdom, what you choose to do with it determines whether or not you are wise.[/i][/size]
User avatar
pyth
Cacti User
Posts: 94
Joined: Thu Jan 31, 2008 8:45 am
Location: France, Grenoble
Contact:

Post by pyth »

ok np :)
Cacti : 0.8.7b
Architecture : 2.0
Settings : 0.3
Thold : 0.3.9
Monitor : 0.8.2
Update : 0.4
User avatar
rony
Developer/Forum Admin
Posts: 6022
Joined: Mon Nov 17, 2003 6:35 pm
Location: Michigan, USA
Contact:

Post by rony »

Try the attached file...

Please download and replace your lib/ldap.php file.
Attachments
ldap.txt
Update lib/ldap.php file for testing of special and encoded characters in usernames and passwords. Rename the attachment to ldap.php.
(15.61 KiB) Downloaded 2131 times
[size=117][i][b]Tony Roman[/b][/i][/size]
[size=84][i]Experience is what causes a person to make new mistakes instead of old ones.[/i][/size]
[size=84][i]There are only 3 way to complete a project: Good, Fast or Cheap, pick two.[/i][/size]
[size=84][i]With age comes wisdom, what you choose to do with it determines whether or not you are wise.[/i][/size]
User avatar
pyth
Cacti User
Posts: 94
Joined: Thu Jan 31, 2008 8:45 am
Location: France, Grenoble
Contact:

doesnt work

Post by pyth »

hi thanks for your answer but its doesnt work,
I give you my orders passed, if you see a mistake :

cd /var/www/cacti/lib
wget http://forums.cacti.net//files/ldap_210.txt
rm ldap.php
mv ldap_210.txt ldap.php
/etc/init.d/apache2 restart
Cacti : 0.8.7b
Architecture : 2.0
Settings : 0.3
Thold : 0.3.9
Monitor : 0.8.2
Update : 0.4
User avatar
rony
Developer/Forum Admin
Posts: 6022
Joined: Mon Nov 17, 2003 6:35 pm
Location: Michigan, USA
Contact:

Post by rony »

What if you local language? French? What is your systems encoding? UTF-8? What is your LDAP encoding? What is your client encoding?
[size=117][i][b]Tony Roman[/b][/i][/size]
[size=84][i]Experience is what causes a person to make new mistakes instead of old ones.[/i][/size]
[size=84][i]There are only 3 way to complete a project: Good, Fast or Cheap, pick two.[/i][/size]
[size=84][i]With age comes wisdom, what you choose to do with it determines whether or not you are wise.[/i][/size]
User avatar
pyth
Cacti User
Posts: 94
Joined: Thu Jan 31, 2008 8:45 am
Location: France, Grenoble
Contact:

Post by pyth »

While this may help you,

i use ubuntu server 6.06,
i have installed php5-ldap,
I touched nothing so I think that is the default configuration.

I dont think can give you more details sorry

ps : I am just an incompetent trying to put in place a very capable tool:)
Cacti : 0.8.7b
Architecture : 2.0
Settings : 0.3
Thold : 0.3.9
Monitor : 0.8.2
Update : 0.4
benton2006
Cacti User
Posts: 50
Joined: Sun Apr 01, 2007 12:47 am

Post by benton2006 »

When I used LDAP authentication, I met below error:
LDAP Error: General bind error, LDAP result: No such object

Then I patch upper ldap.php file. It can login, but I find the user doesn't exist in LDAP server also can login.

Below is my LDAP config:
Authentication Method: Ldap Authentication
User Template: guest
Server: ldap.***.com
Port Standard: 389
Protocol Version: Version 3
Encryption: None
Referrals: disabled
Mode: No searching
Search Base:ou=People,o=***.com,o=SDS
User avatar
rony
Developer/Forum Admin
Posts: 6022
Joined: Mon Nov 17, 2003 6:35 pm
Location: Michigan, USA
Contact:

Post by rony »

And how did it work before you used the patch file?
[size=117][i][b]Tony Roman[/b][/i][/size]
[size=84][i]Experience is what causes a person to make new mistakes instead of old ones.[/i][/size]
[size=84][i]There are only 3 way to complete a project: Good, Fast or Cheap, pick two.[/i][/size]
[size=84][i]With age comes wisdom, what you choose to do with it determines whether or not you are wise.[/i][/size]
benton2006
Cacti User
Posts: 50
Joined: Sun Apr 01, 2007 12:47 am

Post by benton2006 »

Sorry, before using this patch ,there is the same issue.
benton2006
Cacti User
Posts: 50
Joined: Sun Apr 01, 2007 12:47 am

Post by benton2006 »

OK now
My setting is wrong
should be
Distinguished Name (DN) : uid=<username>,ou=people,o=***.com,o=SDS
Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests