Hi Riley, Thank you for your help. It works now. I changed the bind user. And changed from ldap to ldaps and <principal_name> from cn=%s@kis.in<mailto:cn=%25s@kis.in> to %s@kis.in<mailto:%25s@kis.in> It seems that the combination of those 3 things made the difference. Best regards from India, Rudy Wuthrich From: Riley Childs [mailto:rchilds@cucawarriors.com] Sent: Sunday, October 19, 2014 2:01 AM To: KIS ISM Subject: RE: [Koha] Koha 3.16 and Ldap with Active Directory not working It is an issue with bind, I have found that often active directory bind users need to be delegated read permissions for the OU or domain they are providing auth for. Riley Childs Senior Charlotte United Christian Academy Library Services Administrator IT Services (704) 497-2086 rileychilds.net @rowdychildren ________________________________ From: KIS ISM<mailto:ISM@kis.in> Sent: ‎10/‎18/‎2014 11:45 AM To: koha@lists.katipo.co.nz<mailto:koha@lists.katipo.co.nz> Subject: Re: [Koha] Koha 3.16 and Ldap with Active Directory not working I'm testing: root@koha:~# /usr/share/koha/opac/cgi-bin/opac/opac-user.pl userid=AlexandreV password=xxxxxx > /tmp/.txt Here is the error log: kohaversion : 3.1603000 ## checkpw - checking LDAP LDAP bind failed as kohauser AlexandreV: LDAP error #49: LDAP_INVALID_CREDENTIALS # The wrong password was supplied or the SASL credentials could not be processed Use of uninitialized value $stored_hash in string eq at /usr/share/koha/lib/C4/A uth.pm line 1624, <DATA> line 647. Use of uninitialized value $stored_hash in substr at /usr/share/koha/lib/C4/Auth .pm line 1628, <DATA> line 647. Use of uninitialized value $stored_hash in string eq at /usr/share/koha/lib/C4/A uth.pm line 1633, <DATA> line 647. root@koha:~# Does this mean the credentials for the user AlexandreV is not correct Or the credentials for the bind user is not correct? Anyone has an idea that you help me. (Yes, the user can login fine on Moodle with ldap to the same ldap host) Rudy Wuthrich Kodaikanal International School (KIS) Tamil Nadu, India -----Original Message----- From: Koha [mailto:koha-bounces@lists.katipo.co.nz] On Behalf Of KIS ISM Sent: Friday, October 17, 2014 3:37 PM To: koha@lists.katipo.co.nz<mailto:koha@lists.katipo.co.nz> Subject: [Koha] Koha 3.16 and Ldap with Active Directory not working We moved from eDirectory to Active Directory and I have to change the ldap settings in koha-conf.xml Here my koha-conf.xml (part) (xxxxx replaced with real values on system) <useldapserver>1</useldapserver> <!-- LDAP SERVER (optional) --> <ldapserver id="ldapserver" listenref="ldapserver"> <hostname>xxxxx.kis.in</hostname> <base> dc=kis,dc=in</base> <user>cn=xxxxxx,dc=kis,dc=in</user> <!-- DN, if not anonymous --> <pass>xxxxxx</pass> <!-- password, if not anonymous --> <auth_by_bind>1</auth_by_bind> <principal_name>CN=%s@kis.in</principal_name<mailto:CN=%25s@kis.in%3c/principal_name>> <replicate>0</replicate> <!-- add new users from LDAP to Koha database --> <update>0</update> <!-- xupdate existing users in Koha database --> <mapping> <!-- match koha SQL field names to your LDAP record field names --> <firstname is="givenname" ></firstname> <surname is="sn" ></surname> <address is="workforceID" >KIS</address> <city is="workforceID" >Kodaikanal</city> <zipcode is="workforceID" >624 101</zipcode> <branchcode is="workforceID" >KISHS</branchcode> <userid is="sAMAccountName" ></userid> <password is="workforceID" ></password> <email is="mail" ></email> <categorycode is="workforceID" >PT</categorycode> <phone is="workforceID"></phone> </mapping> </ldapserver> I could change Authentication in Moodle without a problem. What is wrong with my configuration for Koha? Rudy Wuthrich Kodaikanal International School (KIS) Tamil Nadu, India _______________________________________________ Koha mailing list http://koha-community.org Koha@lists.katipo.co.nz<mailto:Koha@lists.katipo.co.nz> http://lists.katipo.co.nz/mailman/listinfo/koha _______________________________________________ Koha mailing list http://koha-community.org Koha@lists.katipo.co.nz<mailto:Koha@lists.katipo.co.nz> http://lists.katipo.co.nz/mailman/listinfo/koha