Fork me on GitHub

Need Help with LDAPauth and Novell 6.0 eDirectory 8.7  Bottom

  • I need help configuring ldapauth modules with Novell. I've tried several attempts (mostly guessing at the variables) but have been unable to connect to our Novell server. We currently host a K-12 site using PN726, apache 1.3x, php423 on windows 2000 server. I need help with what each entry in ldapauth means in terms of Novell atuhentication and an example config with notes would really be helpful. Any help is appreciated. Thnks
  • I've not tried it on edirectory 8.7 but i've tested it on 8.6. Since both are LDAP v3 compliant then there should be no problem using it on 8.7.

    How is your LDAP server configured? Does it allow an anonymous bind? or does it require a proxy user?

    You need to use cn (common name) as the search attribute. Also LDAP uses a different convention from edirectory for DN's. eDirectory DN's use . seperator where as LDAP DN's use a comma seperator. So ensure any contexts and users are comma rather dot seperated.

    -Mark

    --
    Visit My homepage and Zikula themes.
  • Mark, my sys admin says we are config anonymous. We tried entering some variable in LDapauth but no luck. Here is what I am entering:
    Server Add: xxx.xxx.xxx.xxx:port#
    Base DN: shonto.bia.edu
    Bind as: anonymous
    Bind Password: (left this blank)
    Search base: cn=users
    Search user using Attribute: cn
    Add new User to Group: users

    As I have said I am just guessing and my sys admin is new to Novell. Your help is greatly appreciated. Thanks
  • If you allow anonymous binding then there is no need to state and bind user since an 'anonymous' bind uses 'public' rights. The bind user has to be a valid user in DS (and therefore needs a password).

    There is also no need to set a port number. Ports under LDAP are predefined - port 389 is a non SSL LDAP call. LDAP auth doesn't support SSL LDAP calls as yet but since most setups will be inside a corporate switched network this isn't normally a problem.

    Also look at your base dn and re-read what i've already said about comma vs dot seperated DN's.

    -Mark

This list is based on users active over the last 60 minutes.