Shiny Server - LDAP Authentication

[Radwa Osama]

Hello All,

I am trying to configure Shiny Server Pro to authenticate users against LDAP using double bind. But I am getting an error during login "Error: Incorrect username or password."

My configurations looks like this:

auth_ldap ldap://organisation.com:3893/CN=Users,DC=organisation,DC=com {
  base_bind "sAMAccountName=bindUserId" "password";
  user_filter "sAMAccountName={username}";
}

In the logs I am getting the following with no mush details

[TRACE] shiny-server - Attempting to bind LDAP user 'sAMAccountName=user.name'
[INFO] shiny-server - Failed login attempt for user: 'user.name'

I tried also, but still getting similar error

auth_ldap ldap://organisation.com:3893/DC=organisation,DC=com {
  base_bind "sAMAccountName=bindUserId,CN=Users,{root}" "password";
  user_filter "sAMAccountName={username}";
}

Any idea what might be wrong?

Thanks

[Radwa Osama]

I got it to work, configurations looked like:
auth_ldap ldap://organisation.com:3893/DC=organisation,DC=com {
  base_bind "bindUserId" "password";
  user_filter "sAMAccountName={username}";
  user_search_base CN=Users;
  user_bind_template "sAMAccountName={username},CN=Users,{root}";
  group_search_base CN=Users;
  group_filter "groupMember={userDN}";
}

Note that the following may change depending on your Ldap strucutre:

• sAMAccountName -> what will be used during login (maybe mail, or any unqiue identifier)
  
• groupMember -> identifies members in a group