Try auth_by_bind, optionally with a "principal_name" setting, if your version is newer than June 30, 2009, when this patch was applied:<br><br><a href="http://git.koha.org/cgi-bin/gitweb.cgi?p=Koha;a=commit;h=7c2e7ad410e59d6f0c21d76859656b8aa8838ecb">http://git.koha.org/cgi-bin/gitweb.cgi?p=Koha;a=commit;h=7c2e7ad410e59d6f0c21d76859656b8aa8838ecb<br>
</a><br>principal_name is designed to compensate for the differences between openldap and active directory.<br>--Joe<br><br><div class="gmail_quote">On Mon, Sep 14, 2009 at 11:55 AM, Nijnatten, Jan van <span dir="ltr"><<a href="mailto:jan.v.nijnatten@philips.com">jan.v.nijnatten@philips.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi all,<br>
<br>
Earlier this month Anselm Olweny wrote:<br>
<br>
======<br>
I have installed koha in my institution library and would like patrons<br>
to login at the opac using their active directory accounts.<br>
<br>
I have followed the instructions in the Auth_with_ldap.pm file and<br>
made the necessary changes in the koha-conf.xml file.<br>
<br>
I have koha version 3.0100041, however when I login using a valid<br>
Active Directory account I get "You entered an incorrect username or<br>
password." in the opac. There are also no errors in both apache and<br>
koha error logs.<br>
<br>
I am kindly requesting for any assistance in making this work. I would<br>
appreciate help relating to what changes I may need to do in active<br>
directory as well or Auth_with_ldap.pm. I have attached a copy of my<br>
koha-conf.xml so that you may show me what am getting wrong.<br>
======<br>
<br>
I have exactly the same problem: incorrect username, password.<br>
I haven't modified <a href="http://auth_with_ldap.pm" target="_blank">auth_with_ldap.pm</a> .<br>
<br>
See my koha-conf.xml attached.<br>
<br>
What are we doing wrong? Where can we debug?<br>
<br>
<br>
koha-conf.xml:<br>
<yazgfs><br>
<!-- [scheme:]host[:port][/databaseName] --><br>
<!-- scheme: tcp, ssl, unix, http, sru --><br>
<!-- can run all servers on tcp, but the unix socket is faster --><br>
<br>
<listen id="biblioserver" >unix:/var/run/koha/zebradb/bibliosocket</listen><br>
<listen id="authorityserver" >unix:/var/run/koha/zebradb/authoritysocket</listen><br>
<!-- public server runs on tcp --><br>
<!-- <listen id="publicserver" >tcp:@:9999</listen> --><br>
<br>
<!-- Settings for special biblio server instance for PazPar2.<br>
Because PazPar2 only connects to a Z39.50 server using TCP/IP,<br>
it cannot use the Unix-domain socket that biblioserver uses.<br>
Therefore, a custom server is defined. --><br>
<!--<br>
<listen id="mergeserver">tcp:@:11001</listen><br>
<server id="mergeserver" listenref="mergeserver"><br>
<directory>/var/lib/koha/zebradb/biblios</directory><br>
<config>/etc/koha/zebradb/zebra-biblios.cfg</config><br>
<cql2rpn>/etc/koha/zebradb/pqf.properties</cql2rpn><br>
</server><br>
--><br>
<br>
<!-- BIBLIOGRAPHIC RECORDS --><br>
<server id="biblioserver" listenref="biblioserver"><br>
<directory>/var/lib/koha/zebradb/biblios</directory><br>
<config>/etc/koha/zebradb/zebra-biblios.cfg</config><br>
<cql2rpn>/etc/koha/zebradb/pqf.properties</cql2rpn><br>
<!-- <docpath>xsl</docpath> --><br>
<!-- <stylesheet>xsl/default.xsl</stylesheet> --><br>
<!-- <maximumrecordsize>2000000</maximumrecordsize> --><br>
<retrievalinfo><br>
<retrieval syntax="usmarc" name="F"/><br>
<retrieval syntax="usmarc" name="B"/><br>
<retrieval syntax="xml" name="F"/><br>
<retrieval syntax="xml" name="B"/><br>
<retrieval syntax="xml" name="marcxml"<br>
identifier="info:srw/schema/1/marcxml-v1.1"><br>
<backend syntax="usmarc" name="F"><br>
<marc inputformat="marc" outputformat="marcxml"<br>
inputcharset="utf-8"/><br>
</backend><br>
</retrieval><br>
<retrieval syntax="xml" name="dc"><br>
<backend syntax="usmarc" name="F"><br>
<marc inputformat="marc" outputformat="marcxml"<br>
inputcharset="utf-8"/><br>
<xslt stylesheet="/usr/share/koha/intranet/htdocs/intranet-tmpl/prog/en/xslt/MARC21slim2DC.xsl"/><br>
</backend><br>
</retrieval><br>
<retrieval syntax="xml" name="mods"><br>
<backend syntax="usmarc" name="F"><br>
<marc inputformat="marc" outputformat="marcxml"<br>
inputcharset="utf-8"/><br>
<xslt stylesheet="/usr/share/koha/intranet/htdocs/intranet-tmpl/prog/en/xslt/MARC21slim2MODS.xsl"/><br>
</backend><br>
</retrieval><br>
<retrieval syntax="xml" name="rdfdc"><br>
<backend syntax="usmarc" name="F"><br>
<marc inputformat="marc" outputformat="marcxml"<br>
inputcharset="utf-8"/><br>
<xslt stylesheet="/usr/share/koha/intranet/htdocs/intranet-tmpl/prog/en/xslt/MARC21slim2RDFDC.xsl"/><br>
</backend><br>
</retrieval><br>
<retrieval syntax="xml" name="rss2"><br>
<backend syntax="usmarc" name="F"><br>
<marc inputformat="marc" outputformat="marcxml"<br>
inputcharset="utf-8"/><br>
<xslt stylesheet="/usr/share/koha/intranet/htdocs/intranet-tmpl/prog/en/xslt/MARC21slim2RSS2.xsl"/><br>
</backend><br>
</retrieval><br>
<retrieval syntax="xml" name="utils"><br>
<backend syntax="usmarc" name="F"><br>
<marc inputformat="marc" outputformat="marcxml"<br>
inputcharset="utf-8"/><br>
<xslt stylesheet="/usr/share/koha/intranet/htdocs/intranet-tmpl/prog/en/xslt/MARC21slimUtils.xsl"/><br>
</backend><br>
</retrieval><br>
</retrievalinfo><br>
<xi:include href="/etc/koha/zebradb/explain-biblios.xml"<br>
xmlns:xi="<a href="http://www.w3.org/2001/XInclude" target="_blank">http://www.w3.org/2001/XInclude</a>"><br>
<xi:fallback><br>
<explain xmlns="<a href="http://explain.z3950.org/dtd/2.0/" target="_blank">http://explain.z3950.org/dtd/2.0/</a>"><br>
<serverInfo><br>
<host>localhost</host><br>
<port>9998</port><br>
<database>biblios</database><br>
</serverInfo><br>
</explain><br>
</xi:fallback><br>
</xi:include><br>
</server><br>
<serverinfo id="biblioserver"><br>
<ccl2rpn>/etc/koha/zebradb/ccl.properties</ccl2rpn><br>
<user>kohauser</user><br>
<password>[our kohauser pw]</password><br>
</serverinfo><br>
<br>
<!-- AUTHORITY RECORDS --><br>
<server id="authorityserver" listenref="authorityserver" ><br>
<directory>/var/lib/koha/zebradb/authorities</directory><br>
<config>/etc/koha/zebradb/zebra-authorities.cfg</config><br>
<cql2rpn>/etc/koha/zebradb/pqf.properties</cql2rpn><br>
<!-- <docpath>xsl</docpath> --><br>
<!-- <stylesheet>xsl/default.xsl</stylesheet> --><br>
<!-- <maximumrecordsize>2000000</maximumrecordsize> --><br>
<xi:include href="/etc/koha/zebradb/retrieval-info-auth-grs1.xml"<br>
xmlns:xi="<a href="http://www.w3.org/2001/XInclude" target="_blank">http://www.w3.org/2001/XInclude</a>"><br>
<xi:fallback><br>
<retrievalinfo><br>
<retrieval syntax="usmarc" name="F"/><br>
<retrieval syntax="usmarc" name="B"/><br>
<retrieval syntax="xml" name="marcxml"<br>
identifier="info:srw/schema/1/marcxml-v1.1"><br>
<backend syntax="usmarc" name="F"><br>
<marc inputformat="marc" outputformat="marcxml"<br>
inputcharset="utf-8"/><br>
</backend><br>
</retrieval><br>
<retrieval syntax="xml" name="dc"><br>
<backend syntax="usmarc" name="F"><br>
<marc inputformat="marc" outputformat="marcxml"<br>
inputcharset="utf-8"/><br>
<xslt stylesheet="/usr/share/koha/intranet/htdocs/intranet-tmpl/prog/en/xslt/MARC21slim2DC.xsl"/><br>
</backend><br>
</retrieval><br>
<retrieval syntax="xml" name="mods"><br>
<backend syntax="usmarc" name="F"><br>
<marc inputformat="marc" outputformat="marcxml"<br>
inputcharset="utf-8"/><br>
<xslt stylesheet="/usr/share/koha/intranet/htdocs/intranet-tmpl/prog/en/xslt/MARC21slim2MODS.xsl"/><br>
</backend><br>
</retrieval><br>
<retrieval syntax="xml" name="rdfdc"><br>
<backend syntax="usmarc" name="F"><br>
<marc inputformat="marc" outputformat="marcxml"<br>
inputcharset="utf-8"/><br>
<xslt stylesheet="/usr/share/koha/intranet/htdocs/intranet-tmpl/prog/en/xslt/MARC21slim2RDFDC.xsl"/><br>
</backend><br>
</retrieval><br>
<retrieval syntax="xml" name="utils"><br>
<backend syntax="usmarc" name="F"><br>
<marc inputformat="marc" outputformat="marcxml"<br>
inputcharset="utf-8"/><br>
<xslt stylesheet="/usr/share/koha/intranet/htdocs/intranet-tmpl/prog/en/xslt/MARC21slimUtils.xsl"/><br>
</backend><br>
</retrieval><br>
</retrievalinfo><br>
</xi:fallback><br>
</xi:include><br>
<xi:include href="/etc/koha/zebradb/explain-authorities.xml"<br>
xmlns:xi="<a href="http://www.w3.org/2001/XInclude" target="_blank">http://www.w3.org/2001/XInclude</a>"><br>
<xi:fallback><br>
<explain xmlns="<a href="http://explain.z3950.org/dtd/2.0/" target="_blank">http://explain.z3950.org/dtd/2.0/</a>"><br>
<serverInfo><br>
<host>localhost</host><br>
<port>9999</port><br>
<database>authorities</database><br>
</serverInfo><br>
</explain><br>
</xi:fallback><br>
</xi:include><br>
</server><br>
<serverinfo id="authorityserver"><br>
<ccl2rpn>/etc/koha/zebradb/ccl.properties</ccl2rpn><br>
<user>kohauser</user><br>
<password>[our kohauser pw]</password><br>
</serverinfo><br>
<br>
<!-- ADDITIONAL KOHA CONFIGURATION DIRECTIVE --><br>
<br>
<br>
<!-- db_scheme should follow the DBD driver name --><br>
<!-- port info: mysql:3306 Pg:5432 (5433 on Debian) --><br>
<config><br>
<db_scheme>mysql</db_scheme><br>
<database>koha</database><br>
<hostname>localhost</hostname><br>
<port>3306</port><br>
<user>kohaadmin</user><br>
<pass>[our kohaadmin pw]</pass><br>
<biblioserver>biblios</biblioserver><br>
<biblioservershadow>1</biblioservershadow><br>
<authorityserver>authorities</authorityserver><br>
<authorityservershadow>1</authorityservershadow><br>
<intranetdir>/usr/share/koha/intranet/cgi-bin</intranetdir><br>
<opacdir>/usr/share/koha/opac/cgi-bin/opac</opacdir><br>
<opachtdocs>/usr/share/koha/opac/htdocs/opac-tmpl</opachtdocs><br>
<intrahtdocs>/usr/share/koha/intranet/htdocs/intranet-tmpl</intrahtdocs><br>
<includes>/usr/share/koha/intranet/htdocs/intranet-tmpl/prog/en/includes/</includes><br>
<logdir>/var/log/koha</logdir><br>
<pazpar2url><a href="http://kohadeb:11002/search.pz2" target="_blank">http://kohadeb:11002/search.pz2</a></pazpar2url><br>
<install_log>/usr/share/koha/misc/koha-install-log</install_log><br>
<useldapserver>1</useldapserver><br>
<!-- LDAP SERVER (optional) --><br>
<ldapserver id="ldapserver" listenref="ldapserver"><br>
<hostname><a href="http://nlvhtcway1dc001.code1.emi.philips.com" target="_blank">nlvhtcway1dc001.code1.emi.philips.com</a></hostname><br>
<base>dc=code1,dc=emi,dc=philips,dc=com</base><br>
<user>[our admin CN ]</user> <!-- DN, if not anonymous --><br>
<pass>[our password]</pass> <!-- password, if not anonymous --><br>
<replicate>1</replicate> <!-- add new users from LDAP to Koha database --><br>
<update>1</update> <!-- update existing users in Koha database --><br>
<auth_by_bind>0</auth_by_bind> <!-- set to 1 to authenticate by binding instead of<br>
password comparison, e.g., to use Active Directory --><br>
<mapping> <!-- match koha SQL field names to your LDAP record field names --><br>
<firstname is="givenName" ></firstname><br>
<surname is="sn" ></surname><br>
<address is="company" ></address><br>
<city is="l" >Athens, OH</city><br>
<zipcode is="postalCode" ></zipcode><br>
<branchcode is="branch" >MAIN</branchcode><br>
<userid is="sAMAccountName" ></userid><br>
<password is="userPassword" ></password><br>
<email is="mail" ></email><br>
<categorycode is="employeeType" >PT</categorycode><br>
<phone is="telephoneNumber"></phone><br>
</mapping><br>
</ldapserver><br>
</config><br>
</yazgfs><br>
<br>
<br>
<br>
<br>
<br>
Jan van Nijnatten MSc | information architect | Philips Research - HTC 34 p076 | +31.40.27.47894<br>
<br>
The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.<br>
_______________________________________________<br>
Koha mailing list<br>
<a href="mailto:Koha@lists.katipo.co.nz">Koha@lists.katipo.co.nz</a><br>
<a href="http://lists.katipo.co.nz/mailman/listinfo/koha" target="_blank">http://lists.katipo.co.nz/mailman/listinfo/koha</a><br>
</blockquote></div><br>