LDAP Connection

[Peter Schober]

* Ogunleye, Philip <Philip.Ogunleye at snapon.com> [2013-01-15 15:54]:
> Thanks for your help, I looked a little further and found the issue,
> although setup correctly in the directory the uid is not part of the dn
> so the lookup on the uid was failing.

Fyi, there's no requirement in LDAP to only search on attributes which
are part of the DN. Searching for any existing attribute would return
the object.

> I amended the filter to search by cn={0} and this has resolved that
> issue.  It is finally authenticating, I will be writing out a document
> for my team to ensure that nobody else suffers the pain that I've just
> been through, I expect it's a bug in the version of the Apache Directory
> Service.

Not returning the the object could also be missing a ACL/ACI or
possibly even a missing index (though that should only cause
performance degradation).

> I am now getting back a response, albeit a failure one for a strange
> reason as the principal cannot be found.  Despite the logs indicating
> that it has found the user it says it cannot, I'll look into this and
> have this resolved.

Did you already provide the exact error log somewhere (because it's
not attached to this message of yours),
-peter