Problems with LDAP plugin.

[Martin Lukasik]

Hello,

I've been trying for hours to configure LDAP plugin, so that my
Windows 2008 Server Standard can work with Mac OS LDAP (Open
Directory).
So the plugin checks the password with LDAP, this works great. It
creates local user on Windows Server. But unfortunately, because this
user is not a member of "Remote Desktop Users", I cannot login via
Remote Desktop.
When the plugin creates user locally, it should add it to these two
groups: Users, Remote Desktop Users
In fact, these should be configurable, or fetch-able from LDAP, and
then mappable (so on LDAP all users are in group 'users', and
administrators in 'admins', so it should map LDAP's group 'users' to
windows 'Users', and LDAP 'admins' to windows 'Administrators'.
But even the default to add Users and Remote Desktop Users would solve
the problem...
I don't quite understand how this could ever work?

Thanks,
Martin

[Evan Horne]

Hi Martin, 

A request for group authorization in the LDAP plugin has already been requested on the github page here:  https://github.com/pgina/pgina/issues/116 

If you're okay with all LDAP users being able to login remotely, you can activate the LocalMachine plugin during the Gateway stage, and enter the Remote Users group under "Mandatory Groups" in the settings. LDAP users should be able to remote in after the system has been restarted. 

Hope this helps.  

[Nate Yocom]

Also note that 'Users' is a built-in group, any user account created
by pGina is automatically in this group.

[Martin Lukasik]

On 6 April 2012 16:54, Nate Yocom <na...@pgina.org> wrote:

Also note that 'Users' is a built-in group, any user account created
by pGina is automatically in this group.

It is not. That's my problem. On my server (running Windows Server 2008 Standard) users created by pgina are not in ANY group.

Martin

 

[Nate Yocom]

Well that's just odd :) Try adding "Users" to the mandatory group list?

[Martin Lukasik]

On 6 April 2012 17:40, Nate Yocom <na...@pgina.org> wrote:

Well that's just odd :) Try adding "Users" to the mandatory group list?

 

That would probably do. If I only knew where to find it :-) Any hints would be greatly appreciated. 

 I'm a Linux admin, but trying to make Windows talk to Mac Server ;)

Thanks!

Martin

[Nate Yocom]

Edit the settings for the local machine plugin (run configuration ui,
double click the local machine plugin in the list), see "Mandatory
Groups", add "Users" and "Remote Desktop Users" if you want them to be
able to RDP.

[Martin Lukasik]

Thanks Nate!

That solved my problem. Would have never thought that I need to look into local plugin's settings!

Thanks again. Great work.

Martin

[Jonathan Viana]

Hi Martin,

I'm new to pGina and i'm having some issues trying to achieve what you already have.

I Have a server 2008 R2 that i want to connect to my OD on a OS X 10.6.8 using pgina so users can RDC to the win server but i think my plug-in setting are al screwy.

Any change you can help me out?  

Happy to send you screen shoots of my setup to you (prefer not to post them here)

hope you can help