LDAP authentication on GSA1001 Current system version: 6.0.0.G.32

[jisnch1]

We are trying to setup LDAP authentication using Kerberos/IAW on our
GSA. When you try to search "public and secure content", it prompts
for a second sign-on which says, "Connecting to google.mycompany.com"
and prompts for your sign on. After entering valid LDAP credentials,
it returns to the sign on and appears to be authenticating to a GOOGLE
domain (GOOGLE\username). We have verified the keytab is correct,
based on the documentation provided by Google. I have two questions 1)
what are we missing? 2) shouldn't there be a single signon, if using a
valid domain account to log in to the PC?

[Lonekazoo]

I have an open incident with Google on a similar issue with 6.0.0-G32
and LDAP against Microsoft Active Directory.

A reply from support:
--
"This is a known issue 2099404 (Default AD group filter in LDAP config
on Admin Console does not work to get user's groups) for 6.0 but not
6.2.

That issue is fixed in 6.2 and we are working on the patch for 6.0"
--

My development GSA running 6.2 is, unfortunately, having the same
issue.

George

[jisnch1]

Thanks for your help. I have not downloaded 6.2, since we haven't been
able to get 6.0 working correctly. I'll keep an eye on this patch.

> > valid domain account to log in to the PC?- Hide quoted text -
>
> - Show quoted text -