kvspb / nginx-auth-ldap

LDAP authentication module for nginx
BSD 2-Clause "Simplified" License
731 stars 251 forks source link

nginx-auth-ldap with openldap #129

Open NXP-TWA opened 8 years ago

NXP-TWA commented 8 years ago

Hi,

Being interested in the nginx ldap module, I have installed an openldap server to try it out. For some reason, I get a "No such objecet" error when entering my username and password to the nginx login prompt.

Attached is :

Does anyone have a clue about the issue I am encountering ? I am starting to doubt my openldap server configuration as I cannot see what is wrong on the nginx side.

Any help would be very appreciated.

T. nginx configuration.txt nginx logs.txt openldap server data.txt

gcavelier commented 8 years ago

Hello,

It looks like your ldap_server block is incorrect. Could you try with :

ldap_server ldap-server { url ldap://x.x.x.x:389/dc=domaine-maquette,dc=com?uid?sub?(&(objectClass=account)); binddn "cn=admin,dc=domaine-maquette,dc=com"; binddn_passwd "thepassword"; group_attribute memberuid; require group "cn=kibana-adm,ou=groups,dc=domaine-maquette,dc=com"; require valid_user; }

On Wed, Apr 20, 2016 at 5:03 PM, NXP-TWA notifications@github.com wrote:

Hi,

Being interested in that nginx ldap module, I have installed an openldap server to try it out. For some reason, I get a "No such objecet" error when entering my username and password to nginx.

Attached is :

  • the openldap server data content
  • the nginx configuration file
  • the log showing the "No such object" error

Does anyone have a clue about the issue I am encountering ? I am starting to doubt my openldap server configuration as I cannot see what is wrong on the nginx side.

Any help would be very appreciated.

T. nginx configuration.txt https://github.com/kvspb/nginx-auth-ldap/files/228176/nginx.configuration.txt nginx logs.txt https://github.com/kvspb/nginx-auth-ldap/files/228177/nginx.logs.txt openldap server data.txt https://github.com/kvspb/nginx-auth-ldap/files/228178/openldap.server.data.txt

— You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub https://github.com/kvspb/nginx-auth-ldap/issues/129

NXP-TWA commented 8 years ago

Helllo gcavelier,

Thanks for your reply. I did try with the ldap_server block you above and I still get the same result (No such object).

I also would like to add that I don't have any issue with ldapsearch.

Query exemple : ldapsearch -v -h x.x.x.x -D "cn=admin,dc=domaine-maquette,dc=com" -b "dc=domaine-maquette,dc=com" -x -W '(&(objectClass=account))'