Active Directory LDAP Issues

Maybe its just me but at the moment I feel like I have tried everything.

Is it possible to get 4minitz working with active directory ldap? at the moment all I receieve is “Login error Invalid credentials [403]”

the logs say something along the lines of: {"dn":"","code":49,"name":"InvalidCredentialsError","message":"80090308: LdapErr: DSID-0C0903D3, comment: AcceptSecurityContext error, data 52e, v3839\u0000"}

Current cut down ldap settings.

"ldap": {
        "enabled": true,
        "propertyMap": {
            "username": "sAMAccountName",
            "longname": "cn",
            "email": "mail"
        },
        "searchFilter": "",
        "serverDn": "DC=workplace,DC=local",
        "serverUrl": "ldap://servername.workplace.local:389",
        "allowSelfSignedTLS": true,
        "whiteListedFields": [ "sAMAccountName", "cn", "mail" ],
        "inactiveUsers": {"strategy": "none"},
        "autopublishFields": [ "sAMAccountName", "cn" ],
        "importCronTab": "* 14 5 * * *"

[derwok]

One more thing: I see you have not set an “inactive user” setting… Please ask your LDAP admin and consider something like: "inactiveUsers": {"strategy": "userAccountControl"},

Otherwise users switched to inactive in LDAP will be able to login to 4Minitz.

[derwok]

Yes, we’ve seen errors like this in MS AD environments. Some AD servers need a bind() with valid credentials before they allow queries of the AD DB.

Please try settings like this:

"ldap": {
     "enabled": true,
      [... your stuff...]
      "authentication": {
            "userDn": "YOURDC\\username",
            "password": "XXX"
        }
}

Sometimes this syntax works for authentication: "userDn": "cn=admin, ou=Admins, dc=example, dc=com",

Please report back if this works for you. And don’t foget to “star” us on github if you like 4Minitz. 😉