ClassroomBookings & LDAP / AD Settings

[EduardoUK]

Hi,

 

I am trying to set up authentication in Classroom Bookings to work with Active Directory (server 2016) and wondered if anyone that had this set up and working could advise where I am going wrong. Specifically I am am only wanting to authenticate / search for users within a particular group (bookingsystem) but seeing an error that says "LDAP search did not return exactly one result." when testing credentials.

 

 

Current settings below (our actual domain has been replaced with "mydomain" in this post):

 

Bind DN format

:[email protected]

 

Base DN

DC=mydomain,DC=internal

 

Search filter

(&(uid=:user)(memberof=CN=bookingsystem,OU=Users,DC=mydomain,DC=internal))

 

Any help with this would be massively appreciated as the software it's self is pretty amazing and just what we are after.

 

Best Regards,

Ed

[Griff]

Here is the settings I use;

server: dc.schoolname.internal

port: 389

use TSL: off

ignore cert: ticked on

bind dn format: domain\:user

base dn: OU=Staff,OU=All Users,DC=SCHOOLDOMAIN,DC=internal

attrib mapping:

Displayname: givenName

email address: mail

 

Search filter blank for us.

[EduardoUK]

Hi Griff,

 

Thanks for replying. Using the settings you provided I can at least authenticate, but without a search filter any account can sign in / authenticate which I would like to restrict to staff, preferably a separate group.

 

Ed

[Griff]

I just put in a search filter on mine and whilst I get the same message as you it still finds the account I was looking for but I think the reason it says more than one search result as its listing it from finding it in both the Bind DN and the search filter..see my test result below from doing the authentication test.

 

Bind DN: school\username

 

Search filter: (&(uid=username)(memberof=CN=Staff,OU=Staff,DC=school,DC=internal))

[EduardoUK]

Hi Griff,

 

I get the same - it shows the account when testing. But it does not create an account where the account does not already exist with the booking system. I wonder if this could simply be the wrong syntax in the search field? Although from all the documentation I have read it looks ok to me.

 

Cheers

Ed

[EduardoUK]

Ok, I think this one is sorted. It didn't like the syntax within the search filter. Current settings that are working, hopefully someone may find them useful ) :

 

Bind DN format

 

mydomain\:user

 

Base DN

 

DC=mydomain,DC=internal

 

Search filter

 

(&(cn=:user)(memberof=CN=bookingsystem,OU=Users,D C=mydomain,DC=internal))

 

Cheers for the help Griff!

Ed

Edited April 12, 2021 by EduardoUK

[985ach]

Search filter

(&(cn=:user)(memberof=CN=bookingsystem,OU=Users,D C=mydomain,DC=internal))

 

I know this is now an old thread but the above search filter didn't work for me, how ever this is the one I used:

 

(&(objectClass=user)(sAMAccountName=:user)(memberof=CN=SecurityGroupStaff,OU=Groups,OU=Organisation,dc=myinternal,dc=domain))