LDAP Settings

[Chopperlink]

I heard that the LDAP settings are harder to configure on a Windows machine. What makes it harder?

[Nate Sarr]

From my experience it is harder to configure an active directory LDAP connection compared to a Unix based LDAP one because the connection string is tougher to get correct.  Is this what you mean?

 

-Nate

On Thu, Jun 21, 2012 at 9:03 AM, Chopperlink <choppe...@gmail.com> wrote:

I heard that the LDAP settings are harder to configure on a Windows machine. What makes it harder?

--
You received this message because you are subscribed to the Google Groups "irplus" group.
To view this discussion on the web visit https://groups.google.com/d/msg/irplus/-/ljZwL-dQ5QIJ.
To post to this group, send email to irp...@googlegroups.com.
To unsubscribe from this group, send email to irplus+un...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/irplus?hl=en.

[Ryan McConnell]

Something like that. Is it different from doing this: http://groups.google.com/group/irplus/browse_thread/thread/7a5ce46799154694

[Nate Sarr]

Should be along those lines.  Let me know if you run into any trouble.

 

-Nate

[Ryan McConnell]

Is there a log file for LDAP errors? Or is it all under the irplus log?

[Ryan McConnell]

We did what was on thread, and it just seems like the IRPlus server is not communicating with the LDAP server at all.

[Nate Sarr]

Check the ir_plus log - are there any errors?

 

-Nate

[Ryan McConnell]

No, it turns out we our computer is not responding to the LDAP port.

[Nate Sarr]

Do you think this might be an IR+ issue or a firewall issue or something else?

[Ryan McConnell]

I think we narrowed it down to an IR+ issue. We are able to connect to the LDAP server by other means, and the settings that we put into IR+ should be correct. It looks like IR+ isn't even trying to connect to the LDAP server.

[Nate Sarr]

Could you double check the property:

external.authentication.enabled = false

and make sure it is set to: True

By default it is set to false

[Ryan McConnell]

It is set to true, it seems like it is missing the code to actually connect to the server. We were able to connect to the server by other means using the the same settings that we did for the IR+ config. I think it has to do with the IR+....

[Nate Sarr]

Have you logged into IR+ and added an external username and password to the user account?

[Ryan McConnell]

You mean made a new account in the IR+ that isn't in our LDAP server?

[Nate Sarr]

Yep - IR+ always has a local account for a user and allows the user to also have an external authentication.  When the user logs in if an external account is set up it tries that if it cannot find an internal one.

-Nate

[Ryan McConnell]

Well we can log in using the admin account we created, but it's trying to log in using credentials from the LDAP server we have.

[Ryan McConnell]

Never mind, I think we found out the problem. We didn't connect one of the user names to an account that we created in IR+.

[Nate Sarr]

Ok,  Let me know how it goes and if you need any help.