mihafan, I'm not familiar with Microsofts LDAP schema, but, Are you sure this is correct?? <base>dc=koha,dc=local</base> <user>cn=Administrator,cn=Users,dc=koha,dc=md</user> as I understand it <base> section sets the base to start searching for users for authentication, not the <base> for the server? do you need to put in the full dn for the user even after you specified the "base" ? maybe try: <base>dc=koha,dc=md</base> <user>cn=Administrator,cn=Users</user> <pass>Q1W2e3r4</pass> Here is my working LDAP config. section for eDir. maybe it will point you in the correct direction. in the <base> section my T = my root tree name ************************************** <useldapserver>1</useldapserver><!-- see C4::Auth_with_ldap for extra configs you must add if you want to turn this on --> <!-- LDAP SERVER (optional) --> <ldapserver id="ldapserver" listenref="ldapserver"> <hostname>10.1.1.7</hostname> <base>T=ALMASCHOOLS</base> <user>*************</user> <!-- DN, if not anonymous --> <pass>*************</pass> <!-- password, if not anonymous --> <replicate>1</replicate> <!-- add new users from LDAP to Koha database --> <update>0</update> <!-- update existing users in Koha database --> <mapping> <!-- match koha SQL field names to your LDAP record field names --> <firstname is="givenname" ></firstname> <surname is="sn" ></surname> <address is="" >Alma Public Schools</address> <city is="" >Alma</city> <zipcode is="" >48801</zipcode> <branchcode is="" >PINE</branchcode> <userid is="cn" ></userid> <password is="" ></password> <email is="mail" ></email> <categorycode is="" >PT</categorycode> <phone is="telephonenumber"></phone> </mapping> </ldapserver> **************************************************
mihafan<mihafan@gmail.com> 5/10/2011 3:14 AM >>> Description of problem:
On local machine is installed windows server 2003 with configured active director. I installed Debian on another machine, here I installed Koha 3.2 which still works well. Koha have configured to use a active directory ldap server. I test this ldap server with Softerra LDAP Browser and it works, to test this ldap server I use a credentials: cn=Administrator,cn=Users,dc=koha,dc=local, password: Q1W2e3r4. koha-conf.xml contents: <yazgfs> .............. <config> .......................... <memcached_servers></ memcached_servers> <memcached_namespace></memcached_namespace> <useldapserver>1</useldapserver> <ldapserver id="ldapserver"> <hostname>192.168.11.90:389</hostname> <base>dc=koha,dc=local</base> <user>cn=Administrator,cn=Users,dc=koha,dc=md</user> <pass>Q1W2e3r4</pass> <replicate>1</replicate> <update>1</update> <auth_by_bind>1</auth_by_bind> <principal_name>%@koha.local</principal_name> <mapping> <firstname is="givenName" ></firstname> <surname is="sn" ></surname> <address is="postalAddress" ></address> <city is="l" ></city> <branchcode is="" >MAIN</branchcode> <userid is="sAMAccountName" >Administrator</userid> <password is="userPassword" ></password> <categorycode is="">PT</categorycode> </mapping> </ldapserver> </config> </yazgfs> When I try to log in OPAC module, I give a error "Invalid username or password"! -- View this message in context: http://koha.1045719.n5.nabble.com/Koha-ldap-authentification-tp4383836p43838... Sent from the Koha - Discuss mailing list archive at Nabble.com. _______________________________________________ Koha mailing list http://koha-community.org Koha@lists.katipo.co.nz http://lists.katipo.co.nz/mailman/listinfo/koha