This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problems with Auth. server

Edgar_Quintana over 8 years ago

Hi,

I´ve a UTM 125 and two AD servers and I´d like to integrate this device with de AD

I tried to configure like that:

DN : CN=ldap user,OU=Administrador,DC=xxxx,DC=NET but with those parameters,

Server exists and accepts connections, but bind to xxxxxxx failed with this BIND and Password

Any idea?

Regards and thanks

This thread was automatically locked due to age.

0 Scott_Klassen over 8 years ago

Personally, I try to avoid spaces in names, like "ldap User".
Does the ldap user account have proper privileges? It has to have permissions to query for account information.
Although the documentation states that Bind DN may be empty, I always populate it with the root of the directory, i.e. DC=xxxx,DC=NET.
What errors, if any are you seeing in the Client Authentication Daemon log when you run the test?

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 vilic over 8 years ago

Hi,

Beside using full LDAP path (as stated in Help), you can also use username@domain.com format (I personally always use that one in my UTM implementations).

Scott, user doesn't have to be Domain Admin it can be simple Domain User, and Base DN should be blank, unless all of the user accounts are buried somewhere deep in the organization units structure.
Cancel
Vote Up 0 Vote Down

Cancel
0 Edgar_Quintana over 8 years ago in reply to vilic

Hi,

I tried both.. user@domain.net and ldapuser (without spaces) and domain right and same result... Server exists and accepts connections, but bind to xxxxxxx failed with this BIND and Password
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 8 years ago

What errors, if any are you seeing in the Client Authentication Daemon log when you run the test?

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 Edgar_Quintana over 8 years ago in reply to Scott_Klassen

2016:01:15-23:13:10 pasarela aua[25480]: Server exists and accepts connections, but bind to ldap://192.168.157.213:389 failed with this Bind DN and Password"
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 8 years ago

Ok, nothing more detailed them. hhmmmm. Username case sensitivity maybe.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 Edgar_Quintana over 8 years ago in reply to Edgar_Quintana

Hi,

I tried some users... same result.
At the UTM I only have defined ISP DNS, could generate this errors resolving ldap?
Cancel
Vote Up 0 Vote Down

Cancel
0 Edgar_Quintana over 8 years ago in reply to Edgar_Quintana

Hi,

Any idea?

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 vilic over 8 years ago in reply to Edgar_Quintana

Try this:

1. Create a new user object with username "utm" in AD Users container.
2. Configure that username (utm@yourdomain.com) in UTM (replace yourdomain.com with the DNS name of your AD).
Cancel
Vote Up 0 Vote Down

Cancel
0 Edgar_Quintana over 8 years ago in reply to vilic

HI,

Same error:

Server exists and accepts connections, but bind to ldap://192.168.157.213:389 failed with this Bind DN and Password"
Cancel
Vote Up 0 Vote Down

Cancel