LDAP Search Error: Unable to find users DN with 2008 AD

[draftermath]

i am trying to set up ldap authentication but it keeps failing with the error "LDAP Search Error: Unable to find users DN". We are using a windows 2008 dc to authenticate against. I am trying to give permission to anyone who belongs in the IS-IT group.

here are my following settings.

Protocol Version: 3
Encryption: None
Mode:Specific
Distinguished Name (DN): <username>@domain.com
Require Group Membership: Checked.
Group Distingished Name (DN): CN=IS-IT,OU=Security Groups,DC=DOMAIN,DC=com
Group Member Attribute:member
Group Member Type: Distinguished Name
Search Base: OU=Security Groups,DC=DOMAIN,DC=com
Search Filter: (&(objectClass=user)(objectcategory=user)(sAMAccountName=<username>))

I am not sure what to put for
Search Distingished Name (DN) and Search Password.

i have tried a valid username for the domain but it has not worked.

i have attached a pick from my ldap browser. I think i am just missing soemthign simple here. [/img]

[gandalf]

Moved to windows
Reinhard

[rony]

Put in an account that is allowed to query ADS. Use the following format:

Code: Select all

<username>@<domain>

Replace username with the username and replace domain with the domain specified on the user. I don't recall immediately and I don't have a VM to check, but I think the field is called Primary Name.

[lankienen]

Hi,

i still got the same Error:
my settings:

Mode:Specific
Distinguished Name (DN): <username>@mydomain.local
Require Group Membership: Checked.
Group Distingished Name (DN): CN=NT_IT,OU=Rollen,DC=mydomain,DC=local
Group Member Attribute: memberUid=NT_IT
Group Member Type: Distinguished Name

###

Search Base: ou=Rollen,dc=mydomain,dc=local
Search Filter: (&(objectClass=user)(objectcategory=user)(sAMAccountName=<username>))
Search Distingished Name (DN):
cn=saLDAP,ou=Service-Account,ou=Server,ou=Company,dc=mydomain,dc=local
Search Password: xxxx

Any help appreciated!

Thanks!

[ialbarki]

I faced the same problem, the fix is to change
Distinguished Name (DN): <username>@mydomain.local
to
Distinguished Name (DN): <username>


Regards
Ibrahim