<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style>
<!--
@font-face
{font-family:Calibri}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
span.EmailStyle17
{font-family:"Calibri","sans-serif";
color:windowtext}
.MsoChpDefault
{font-family:"Calibri","sans-serif"}
@page WordSection1
{margin:72.0pt 72.0pt 72.0pt 72.0pt}
div.WordSection1
{}
-->
</style>
</head>
<body lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">Hi all,</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Issue partially resolved. I used an LDAP LAN trace and found out what the authentication issue was…..</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">The initial LDAP “proxy” bind was working ok, but then I found the issue :-</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">The subsequent LDAP Search was looking for a match on SAMAccountName, then requesting both “sn” and “given name” attributes (for logging I guess). This returned a successful response from the correct object.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">However, as I had set the base search from the Domain Root, it was continuing the search, by requesting the same information from other areas of AD it was not appropriate or have rights to access (under AD “configuration” partition, for
example). If this came up against an error at this stage, it stopped the general login.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Therefore, when I constrained the search to the specific user account containers, the login worked fully for single host/basedn.</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Now I have the issue of not being able to successfully specify multiple LDAP basedn’s or hosts, using $$$ as the delimiter (as seen in other thread). I have tried adding $$$ option to all ldap options with no success. Authentication only
works to single host with single LDAP basedn at the moment. Has anyone any suggestions?</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">Regards</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal">James</p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"> </p>
<p class="MsoNormal"> </p>
</div>
This email and any attachments are confidential and should not be used by anyone who is not the original intended recipient. If you receive this in error, please contact the sender and delete the material from your computer. You are not authorised to, and must
not, read, copy, distribute, use or retain this message or any part of it. Kirklees College cannot accept liability for any statements made which are clearly the sender's own and not expressly made on behalf of Kirklees College or one of its agents.
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>KIRKLEES COLLEGE</title>
</head>
<body>
<br />
KIRKLEES COLLEGE<br />
YOUR SUCCESS IS OUR FOCUS <br />
<br />Please consider the environment. Don't print this e-mail unless necessary.
</body>
</html>
</body>
</html>