Ruckus LDAP Authentication

[altecsole]

I've been setting up our ZoneDirector and I'm having a problem getting LDAP authentication to work. Active Directory authentication works without a problem, but I'd like to setup an additional LDAP authentication method so that I can make the Zero-IT Activation page only available to members of our staff OU. I've tried setting LDAP on the Users OU, but when I test the credentials it reports 'Failed! Invalid username or password'; the same credentials work with AD authentication.

 

Our FQDN is: school_name.school_county.sch.uk

 

The LDAP Base DN used is: ou=Users,dc=school_name,dc=school_county,dc=sch,dc=uk

 

Has anybody got AD and LDAP working together? We have Windows 2003 DCs.

 

Thanks for taking the time to read and reply.

[Edu-IT]

Did you get this working? I'm trying to do the same thing and getting the same message.

[Nixphoe]

I can't speak from experience with ZoneDirector. But with working with other devices you also have to configure the Common Name so it'll know what to look for in your orginizational unit.

 

cn=Users,dc=school_name,dc=school_county,dc=sch,dc=uk

ou=Users,dc=school_name,dc=school_county,dc=sch,dc=uk

 

Hope that at least leads you in the right direction.

[altecsole]

Yes, I did try these combinations, but it still wouldn't work. It seems that the authentication method used isn't compatible with AD LDAP.

[spc-rocket]

Yes, I did try these combinations, but it still wouldn't work. It seems that the authentication method used isn't compatible with AD LDAP.

 

Hi,

 

If you have AD then can you do the authentication using AD directly and not LDAP. You would only need to tag the group attribute this way to lock down access to certain AD groups if required.

 

Ash.

[altecsole]

Hi,

 

If you have AD then can you do the authentication using AD directly and not LDAP. You would only need to tag the group attribute this way to lock down access to certain AD groups if required.

 

Ash.

 

Yes, that's what I did. I liked the idea of LDAP as you can specify the OU that you authenticate users against.

[Nixphoe]

The last bit of advice I can give is we had issues with LDAP authenication due to the account ldap needed to authenticate. We used administrator. Now that account needs to be in the root Users OU. Not sure if ZoneDirector has an account for that.

[harish_haridass88]

Hi There,

 

Please log in to the device check for the syslog,

save syslog in text form, post extraction > open syslog in notepad editior++ (freeware tool) search for Auth username status=0 ( for success authentication). Auth username status=2 ( unauthentication) do a packet capture & check for LDAP packet... please let me what LDAP you are trying to use... Please drop a detail email to [email protected] I can help you to set up the authentication.. if you are using AD with LDAP

 

1. Login to AD as admin

2. Ctrl + R > run

3. LDP.exe give you a LDAP interface for the same AD server instance.

4. In LDP.exe click connect >put the IP address

5. bind > put Admin user name and password.

6. View > select the domain controler

7. copy past the Base DN

8. Check for the key filter see you are using

9. Put the attribute filter *

 

let me know what happen to the test connection.

please provide the system logs after sanititation.

 

Lets close this ticket soon ....... .

 

regards

harish