having problems with getting LDAP to work - I have read all the previous posts with no joy. Everything looks okay and linking to LDAP with other programs is oaky. Obviously I have something set incorrectly. Running MRBS 1.2.6 on windows 2003, IIS.
Program works fine under internal database, when using LDAP no errors except "unknown user".
Config.inc.php file set as follows: (please note choice of server and domain names were before my time!)
###############################################
# Authentication settings - read AUTHENTICATION
###############################################
$auth["session"] = "php"; # How to get and keep the user ID. One of
# "http" "php" "cookie" "ip" "host" "nt" "omni"
# "remote_user"
$auth["type"] = "ldap"; # How to validate the user/password. One of "none"
# "config" "db" "db_ext" "pop3" "imap" "ldap" "nis"
# "nw" "ext".
# Cookie path override. If this value is set it will be used by the
# 'php' and 'cookie' session schemes to override the default behaviour
# of automatically determining the cookie path to use
$cookie_path_override = '';
# The list of administrators (can modify other peoples settings)
$auth["admin"][] = "127.0.0.1"; # localhost IP address. Useful with IP sessions.
$auth["admin"][] = "administrator"; # A user name from the user list. Useful
#with most other session schemes.
#$auth["admin"][] = "10.0.0.1";
#$auth["admin"][] = "10.0.0.2";
#$auth["admin"][] = "10.0.0.3";
# 'auth_config' user database
# Format: $auth["user"]["name"] = "password";
$auth["user"]["administrator"] = "secret";
$auth["user"]["alice"] = "a";
$auth["user"]["bob"] = "b";
# 'session_http' configuration settings
$auth["realm"] = "mrbs";
# 'session_remote_user' configuration settings
#$auth['remote_user']['logout_link'] = '/logout/link.html';
# 'auth_ext' configuration settings
$auth["prog"] = "";
$auth["params"] = "";
# 'auth_db_ext' configuration settings
$auth['db_ext']['db_host'] = 'localhost';
$auth['db_ext']['db_username'] = 'authuser';
$auth['db_ext']['db_password'] = 'authpass';
$auth['db_ext']['db_name'] = 'authdb';
$auth['db_ext']['db_table'] = 'users';
$auth['db_ext']['column_name_username'] = 'name';
$auth['db_ext']['column_name_password'] = 'password';
# Either 'md5', 'sha1', 'crypt' or 'plaintext'
$auth['db_ext']['password_format'] = 'md5';
# 'auth_ldap' configuration settings
# Where is the LDAP server
$ldap_host = "server.domain.com";
# If you have a non-standard LDAP port, you can define it here
$ldap_port = 389;
# If you do not want to use LDAP v3, change the following to false
$ldap_v3 = true;
# If you want to use TLS, change the following to true
$ldap_tls = false;
# LDAP base distinguish name
# See AUTHENTICATION for details of how check against multiple base dn's
$ldap_base_dn = "ou=fhs,dc=domain,dc=com";
# Attribute within the base dn that contains the username
#$ldap_user_attrib = "uid";
# If you need to search the directory to find the user's DN to bind
# with, set the following to the attribute that holds the user's
# "username". In Microsoft AD directories this is "sAMAccountName"
$ldap_dn_search_attrib = "sAMAccountName";
# If you need to bind as a particular user to do the search described
# above, specify the DN and password in the variables below
$ldap_dn_search_dn = "cn=administrator,ou=builtin,dc=domain,dc=com";
$ldap_dn_search_password = "Chi39Jg";
# 'auth_ldap' extra configuration for ldap configuration of who can use
# the system
# If it's set, the $ldap_filter will be combined with the value of
# $ldap_user_attrib like this:
# (&($ldap_user_attrib=username)($ldap_filter))
# After binding to check the password, this check is used to see that
# they are a valid user of mrbs.
#$ldap_filter = "mrbsuser=y";
Any suggestions gratefully received.
Thanks
