[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ajaXplorer and slx-ldap



Hi Martin,

not sure about the settings for lenny (have never installed a lenny tjener)... But from what I have seen in the old Debian Edu lenny code...

On Fr 04 Mai 2012 19:28:42 CEST Martin Schulte wrote:

Hi,

i'm trying to setup ajaXplorer ( http://ajaxplorer.info/ ) on a (still) lenny based skolelinux server. ajaXplorer comes with an ldap plugin. To get an ldap authentication i've to set this variables ( description is here: http://ajaxplorer.info/plugins/auth/ldap/#tabs-2 )

        "LDAP_URL" => 'ldaps://10.0.2.2',
        "LDAP_USER" => 'cn=admin,ou=People,dc=skole,dc=skolelinux,dc=no',

cn=admin,ou=ldap-access,dc=skole,dc=skolelinux,dc=no (?)

        'LDAP_PASSWORD' => 'mySecretPassword',

<tjener's-root-password>

        "LDAP_DN" => 'ou=People,dc=skole,dc=skolelinux,dc=no',
        "LOGIN_REDIRECT" => false,
        "AUTOCREATE_AJXPUSER" => false,

you might want auto creation to be enabled...

        "TRANSMIT_CLEAR_PASS" => true,

really???

        "LDAP_FILTER" => "objectClass=uid"

This is definitely wrong. It has to be ,,objectClass=posixAccount''*

        "LDAP_USERATTR" => 'samaccountname'

This smells like Adtive Directory stuff... not appropriate for Debian Edu / OpenLDAP. Use ,,uid'' as LDAP_USERATTR instead.

Greets,
Mike

--

DAS-NETZWERKTEAM
mike gabriel, dorfstr. 27, 24245 barmissen
fon: +49 (4302) 281418, fax: +49 (4302) 281419

GnuPG Key ID 0xB588399B
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

freeBusy:
https://mail.das-netzwerkteam.de/freebusy/m.gabriel%40das-netzwerkteam.de.xfb

Attachment: pgpMKYHudJ_Oe.pgp
Description: Digitale PGP-Unterschrift


Reply to: