LDAPAccountManager / lam

LDAP Account Manager
https://www.ldap-account-manager.org
Other
429 stars 68 forks source link

Problem to access LDAP via simple authentication #263

Closed rohani2255 closed 8 months ago

rohani2255 commented 9 months ago

We have issue to access LDAP via SASL (simple authentication), we have checked the password and this is correct. Please find the below screenshot. root@tenang:/etc/ldap# ldapsearch -x -H Ldaps://tenang.perkeso.gov.my:636 -b "dc=perkeso,dc=gov,dc=my" -D "cn=admin,dc=perkeso,dc=gov,dc=my" -W Enter LDAP Password: ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)

gruberroland commented 9 months ago

Try "ldaps://" instead of "Ldaps://" The error message is a bout a connection problem, not wrong password. If the fix above does not work then maybe your LDAP server certificate is not trusted.

rohani2255 commented 9 months ago

Still same issue after run the command base on your input. We use a wildcard cert from Digicert and tested working for other servers

Sent from Outlook for Androidhttps://aka.ms/AAb9ysg


From: gruberroland @.> Sent: Tuesday, December 12, 2023 5:27:45 PM To: LDAPAccountManager/lam @.> Cc: Rohani ishak @.>; Author @.> Subject: Re: [LDAPAccountManager/lam] Problem to access LDAP via simple authentication (Issue #263)

Try "ldaps://" instead of "Ldaps://" The error message is a bout a connection problem, not wrong password. If the fix above does not work then maybe your LDAP server certificate is not trusted.

— Reply to this email directly, view it on GitHubhttps://github.com/LDAPAccountManager/lam/issues/263#issuecomment-1851626680, or unsubscribehttps://github.com/notifications/unsubscribe-auth/BESUJVXGSJKJNICNEVL6AATYJAPRDAVCNFSM6AAAAABARBJYY6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNJRGYZDMNRYGA. You are receiving this because you authored the thread.Message ID: @.***>

gruberroland commented 9 months ago

Try adding the debug level to the command, e.g. "-d 1". You can also temporarily set "TLS_REQCERT never" in /etc/ldap/ldap.conf to disable certificate check.