ldap auth bind details

[jalal]

I'm trying to get LDAP auth to work (with Active Directory).

LDAP sync works fine and pulls in a list of users, but LDAP auth quietly won't authorize anyone.

The default principal and password are set in the ldap-authentication.properties file, but there is a comment there that this is only used for ldap sync. Where does ldap auth get the principal and password from? Or is the comment wrong?

Along similar lines, if ldap sync works and ldap auth doesn't, where to look next for what the problem is? There doesn't seem to be any logging of user authentication, which makes it difficult.

cheers

[andy]

Hi

Have you looked at the wiki page?

Are you using simple authentication - then you will have to build the user DN - see the examples.
If this is not possible you could use JAAS/Kerberos athentication or NTLM to authenticate or set up another LDAP context to use DIGEST-MD5.
All will work with LDAP sync if set up correctly.

Andy

[jalal]

Hi Andy

I ended up using JAAS/Kerberos which works very well. I'd been put off at first as it sounded complicated and I'm more familiar with LDAP.