Re: Cant set up authentication through AD

[Berend De Schouwer <berend [at] deschouwer.co.za>]

On Mon, 13 Oct, 2014 at 2:42 , Oleg Makarov <oamakarov@platbox.com> 
wrote:
> nslcd: [b0dc51] <authc="testing"> DEBUG: 
> ldap_simple_bind_s("CN=testing,CN=Users,DC=test,DC=local","***") 
> (uri="ldap://192.168.93.95";)
> nslcd: [b0dc51] <authc="testing"> DEBUG: failed to bind to LDAP 
> server ldap://192.168.93.95: Invalid credentials: 80090308: LdapErr: 
> DSID-0C0903C5, comment: AcceptSecurityContext error, data 52e, v2580

You're binding as 'CN=testing,CN=Users,DC=test,DC=local', 
securitycontext error.  Check the AD server for wrong password / wrong 
time / user-not-allowed, etc.

> But ldapsearch works!
> ldapsearch -d8 -H ldap://192.168.93.95/ -W -LLL -o ldif-wrap=no -D 
> 'share@test.local' -b 'cn=users,dc=test,dc=local' 
> '(sAMAccountName=testing)'
> Enter LDAP Password:

You're *binding* as 'share@test.local' but *searching* for 
'(sAMAccountName=testing)'.  Try -D 
'CN=testing,CN=Users,DC=test,DC=local'



--
To unsubscribe send an email to
nss-pam-ldapd-users-unsubscribe@lists.arthurdejong.org or see
http://lists.arthurdejong.org/nss-pam-ldapd-users/