search

tykeal / ep_ldapauth

(Up for adoption) LDAP authentication plugin for Etherpad-lite
GNU General Public License v2.0
25 stars 20 forks source link

searchDN field explanation #33

Open varwiz opened 7 years ago

varwiz commented 7 years ago

can you explain a bit more as to what the searchDN field is ?

i get the below error when I supply my AD userid/password

ep_ldapauth.authenticate: LDAP auth error: ldap bind with uid={{myUID_goes_here}} to {{myldapurl_goes_here}} failed: InvalidCredentialsError: 80090308: LdapErr: DSID-0C0903A8, comment: AcceptSecurityContext error, data 52e, v1db1

tykeal commented 7 years ago

Mind you I don't have an AD system to work against, and haven't touched it in 16 years, but I'm pretty certain that since you're accessing AD via LDAP it needs to be a proper LDAP DN.

So instead of just a username it would be something like "cn=My Name,ou=Users,dc=example,dc=com" or as in the case of most OpenLDAP setups it will be in the same form as what the README has of "uid=myuser,dc=example,dc=com" or perhaps "uid=myuser,ou=Users,dc=example,dc=com".

tykeal commented 7 years ago

Alternatively, it might be that you need to be specifying the username@domain syntax for the user and not just a username or domain/user.