AD ldap resolver Exception('Wrong credentials',)

[Todd F]

When I test the ldap resolver I get the below screen and the log says.
[2015-04-13 15:53:48,634][9269][139684671203072][WARNING][privacyidea.lib.config:496] unable to load resolver module : 'resolvers.SCIMIdResolver' (ImportError('cannot import name getResolverClass',))

or if I set the bind type to NTLM I get ValueError('need more than 1 value to unpack',)

Thanks,

Todd

[Tom Cole]

I am having the same exact issue.  I have attached a screenshot of the settings.

...

[Cornelius Kölbel]

Hi Tom,

the error message is correct.
The username (Bind DN) as part of the credentials is wrong.

Your BaseDN is wrong!

Take a look at your Active Directory.

It is probably

  OU=atl,dc=carreerbuilder,dc=com

and thus

   cn=paldap,OU=atl,dc=carreerbuilder,dc=com

As DC is a DomainComponent. Maybe you have created an organizational unit to hold your users.

BUT if you really are working in a child domain "atl" and have not touched the location of your users, it probably is:

   dc=atl,dc=carreerbuilder,dc=com

And then your BindDN needs to be:

   cn=paldap,cn=users,dc=atl,dc=carreerbuilder,dc=com


...but I do not know the structure of your AD.

By the way: Just released version 2.3

Kind regards
Cornelius

--
You received this message because you are subscribed to the Google Groups "privacyidea" group.
To unsubscribe from this group and stop receiving emails from it, send an email to privacyidea...@googlegroups.com.
To post to this group, send email to priva...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/privacyidea/6a138a34-371a-4e2b-83b4-b516e91e6608%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

-- 
Cornelius Kölbel
corneliu...@netknights.it
+49 151 2960 1417

NetKnights GmbH
http://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel