[Xerte] Re: Xerte LDAP Authentication to AD Not Working

[Pat Lockley]

Hello,

It doesn't like dollars in passwords (that's the only curve ball I found)

Pat

On Wed, Apr 11, 2012 at 10:43 AM, James Burns
<JBurns at kirkleescollege.ac.uk> wrote:
> Hi all,
>
>
>
> I continually get this error when trying to authenticate a user through
> Xerte (http://hudxot01.kirkleescollege.ac.uk/xerte/index.php)  :-
>
>
>
> “sorry that password combination was incorrect”
>
>
>
> However, the username and password are correct & I can authenticate using
> the Softerra LDAP Win32 browser with no issue using same credentials.
>
>
>
> This is what is in some key fields in the LDAP table in MYSQL :-
>
>
>
> Ldap_host: huddc02.kirklees.local  -  (host pings ok from xerte box & I can
> connect to port 389 on ldap host using wget from xerte box)
>
> Ldap_port: 389
>
> Ldap_username: CN=Xot,OU=Service
> Accounts,OU=Administration,DC=kirklees,DC=local
>
> Ldap_basedn: DC=kirklees,DC=local
>
> Ldap_filter:  CN=
>
> Ldap_filter_att: sAMAccountName
>
>
>
> Ldap_password is a combination of numbers and letters
>
>
>
> I have been looking for something in /var/log/messages, /var/log/syslog or
> the Apache error logs to see more about the error, but can find nothing.
>
>
>
> Ldap PHP module installed and enabled & showing ok in phpinfo
>
>
>
> Have been able to successfully test LDAP access through Softerra using both
> defined xerte ldap “proxy” account and my test ldap user account.
>
> I have tried using quotations at start and end of “ldap_username” due to
> space between “service” & “accounts” in string – no difference.
>
>
>
> In AD, both tested usernames have same value fro both “cn” and
> “sAMAccountName”
>
>
>
> Firewall on xerte box is set to allow all traffic for testing.
>
>
>
> Is there something I am missing, or are there any other suggestions?
>
>
>
> TIA
>
> This email and any attachments are confidential and should not be used by
> anyone who is not the original intended recipient. If you receive this in
> error, please contact the sender and delete the material from your computer.
> You are not authorised to, and must not, read, copy, distribute, use or
> retain this message or any part of it. Kirklees College cannot accept
> liability for any statements made which are clearly the sender's own and not
> expressly made on behalf of Kirklees College or one of its agents.
>
> KIRKLEES COLLEGE
> YOUR SUCCESS IS OUR FOCUS
>
> Please consider the environment. Don't print this e-mail unless necessary.
>
> This message and any attachment are intended solely for the addressee and
> may contain confidential information. If you have received this message in
> error, please send it back to me, and immediately delete it. Please do not
> use, copy or disclose the information contained in this message or in any
> attachment. Any views or opinions expressed by the author of this email do
> not necessarily reflect the views of the University of Nottingham.
>
> This message has been checked for viruses but the contents of an attachment
> may still contain software viruses which could damage your computer system:
> you are advised to perform your own checks. Email communications with the
> University of Nottingham may be monitored as permitted by UK legislation.
>
>
> _______________________________________________
> Xerte mailing list
> Xerte at lists.nottingham.ac.uk
> http://lists.nottingham.ac.uk/mailman/listinfo/xerte
>
> This message and any attachment are intended solely for the addressee and
> may contain confidential information. If you have received this message in
> error, please send it back to me, and immediately delete it.   Please do not
> use, copy or disclose the information contained in this message or in any
> attachment.  Any views or opinions expressed by the author of this email do
> not necessarily reflect the views of the University of Nottingham.
>
> This message has been checked for viruses but the contents of an attachment
> may still contain software viruses which could damage your computer system:
> you are advised to perform your own checks. Email communications with the
> University of Nottingham may be monitored as permitted by UK legislation.
>
>