AD Integration

[BenI]

Good day,

We have egrouware 14.1 running on debian 7 and would like to integrate it AD but can’t seem to get it working. Not sure what configurations we are not specifying.

We have the following configuration, that we changed:
Select which type of authentication you are using: Active Directory
Host/IP domain controller (use space to separate multiple): hostname.sub.domain.name
Domain name: sub.domain.name
Admin user: Service Account Name
Password: Specified password

The rest of the configurations are default.

When I try to login, I receive the following error message: “apache2: auth_ads::authenticate(‘usr’) authenticated, but user NOT found!”

Thank you for your assistance.

Regards,

[das-Wunder]

Hi,

i have the same problem. Till now my analysis of the problem guided me to a problem with the uses ADLDAP library. With that the authentication against the our Windows Server 2012 works fine, but afterwards the egroupware needs some more information about the user from the AD but this fails.

So “$adldap->user()->info($username, $attributes))” returns no results so this leads to the error message we get.

Does anybody perhaps know why this is a problem.??

Thanks for help

[das-Wunder]

So some solution for me was the the following:

I replaced the line:
$sr = ldap_search($this->adldap->getLdapConnection(), $this->adldap->getBaseDn(), $filter, $fields);

with:
$BindDN =“CN=Users,DC=domain,DC=com” for ADS domain “domain.com” //this is only a placeholder
$sr = ldap_search($this->adldap->getLdapConnection(), $BindDN, $filter, $fields);

in the function info in the file egroupwareRootDir/phpgwapi/inc/adldap/classes/adLDAPUsers.php

The problem seems to be that the BaseDn, which ADLDAP is only the first DC=domain, what in my case is not enough.

But now i’m stuck at the following error message:
auth_ads::authenticate(‘user’) account_status check returning FALSE

Does anybody know what it means, or what the background is ??