[CPS-devel] CPSLDAPsetup for ActiveDirectory - So close

[Florent Guillaume]

 From the third line of the log, you see that AD uses sAMAccountName  
and not uid for the unique id field.
Change your CPS LDAP config to match that.

Florent

On 30 May 2006, at 06:41, Damian Georgiou wrote:

> I have finally had the chance to start on the AD implimentation of  
> CPLDAPsetup.
>
> After configuring the directories and schema's i am now able to  
> search the ActiveDirectory using all three search methods within  
> the ZMI (backing/stack/meta).
>
> How ever, if i try to log in using the CPS login interface i get an  
> authentication failure. I have included the event.log entry for the  
> authentication attempt.
>
> any idea's what it could be?
>
> what does the two lines containing "getUserWithAuthentication No  
> result for uid=DamianG" mean?
>
>
>
> <pre>
> 2006-05-30T14:17:47 TRACE ZODBDirectory._searchEntries Searching  
> cache for {'return_fields': None, 'uid': ['DamianG']}
> ------
> 2006-05-30T14:17:47 TRACE ZODBDirectory._searchEntries  -> results=[]
> ------
> 2006-05-30T14:17:47 TRACE searchLDAP Searching cache for {'filter':  
> '(&(sAMAccountName=DamianG)(|(objectClass=top)(objectClass=person) 
> (objectClass=user)))', 'scope': 2, 'base':  
> 'ou=Departments,ou=Main,dc=bhs,dc=org,dc=au,dc=local', 'attrs':  
> ['dn', 'sAMAccountName']}
> ------
> 2006-05-30T14:17:47 TRACE searchLDAP  -> results=[('CN=Damian  
> Georgiou,OU=IT  
> Services,OU=Departments,OU=Main,DC=bhs,DC=org,DC=au,DC=local',  
> {'sAMAccountName': ['DamianG']})]
> ------
> 2006-05-30T14:17:47 TRACE ZODBDirectory._searchEntries Searching  
> cache for {'return_fields': ['sAMAccountName'], 'sAMAccountName':  
> ['DamianG']}
> ------
> 2006-05-30T14:17:47 TRACE ZODBDirectory._searchEntries  -> results=[]
> ------
> 2006-05-30T14:17:47 TRACE getUserWithAuthentication No result for  
> uid=DamianG
> ------
> 2006-05-30T14:17:47 TRACE ZODBDirectory._searchEntries Searching  
> cache for {'return_fields': None, 'uid': ['DamianG']}
> ------
> 2006-05-30T14:17:47 TRACE ZODBDirectory._searchEntries  -> results=[]
> ------
> 2006-05-30T14:17:47 TRACE searchLDAP Searching cache for {'filter':  
> '(&(sAMAccountName=DamianG)(|(objectClass=top)(objectClass=person) 
> (objectClass=user)))', 'scope': 2, 'base':  
> 'ou=Departments,ou=Main,dc=bhs,dc=org,dc=au,dc=local', 'attrs':  
> ['dn', 'sAMAccountName']}
> ------
> 2006-05-30T14:17:47 TRACE searchLDAP  -> results=[('CN=Damian  
> Georgiou,OU=IT  
> Services,OU=Departments,OU=Main,DC=bhs,DC=org,DC=au,DC=local',  
> {'sAMAccountName': ['DamianG']})]
> ------
> 2006-05-30T14:17:47 TRACE ZODBDirectory._searchEntries Searching  
> cache for {'return_fields': ['sAMAccountName'], 'sAMAccountName':  
> ['DamianG']}
> ------
> 2006-05-30T14:17:47 TRACE ZODBDirectory._searchEntries  -> results=[]
> ------
> 2006-05-30T14:17:47 TRACE getUserWithAuthentication No result for  
> uid=DamianG
>
> </pre>
>
> cheers,
>
> Damian
> _______________________________________________
> cps-devel mailing list
> http://lists.nuxeo.com/mailman/listinfo/cps-devel

-- 
Florent Guillaume, Nuxeo (Paris, France)   Director of R&D
+33 1 40 33 71 59   http://nuxeo.com   fg at nuxeo.com