Stuck while trying to use ZCS LDAP for external authentication

[indradg]

Hi,

First off, I'm an OpenLDAP newbie. I'm test-running zimbra 3.1.4 on FC4. Zimbra itself is running nicely. Having said that I tried using the following link - http://wiki.zimbra.com/index.php?title=LDAP_Apache.
I was successful in applying having .htaccess authentication against my ZCS Directory

So, excited with the initial success, I tried my hand at another webapp (using php_ldap) that has the provision of authentication against an LDAP server.

This app is asking for the following fields:

1. LDAP Host (this is in my case meghnad.wbut.ac.in)
2. LDAP Port (default=389)
3. Basedn
4. rootdn (for non anonymous binds)
5. Pass (for non-anonymous binds)
5. Connection filter
6. Login Field
7. Use TLS

in case of the .htaccess file (incidentally) I had simply specified the AuthLDAPURL as ldap://meghnad.wbut.ac.in/dc=wbut,dc=ac,dc=in
and that had worked.

I'n the other case, my trails have led me to errors like "invalid credentials" and "too many users found". What am I missing here???

-indra

[indradg]

err... the solution was amazing simple! all I needed to do was to point to the host, the basedn *and* the "Login Field" parameter as "uid" and it worked!!

[jimbo]

I'm having problems with apache authentication with ldap myself...

So what did your .htaccess file end up looking like?

[indradg]

hi,

Originally Posted by jimbo

So what did your .htaccess file end up looking like?

my .htaccess looks like -

   
AuthType Basic
AuthName DDInternal
AuthLDAPURL ldap://meghnad.wbut.ac.in/dc=wbut,dc=ac,dc=in
require valid-user

In my installation the Zimbra was originally installed with the domain "meghnad.wbut.ac.in" which is really the MX for the domain wbut.ac.in, I added "wbut.ac.in as the second domain and then set as the default.

FWIW, the .htaccess file is deployed on another server (http://phpmyadmin.wbut.ac.in ) where I needed to restrict the Login Screen access to my phpmyadmin installation.

[jimbo]

indradg,

Thank you! I modified my AuthLDAPURL string to be:

AuthLDAPURL ldap://mail.example.com/dc=example,dc=com

and it worked!

Thank you so much... have been scratching my head on this one for a while.

jimbo

[gmsmith]

Originally Posted by jimbo

indradg,

Thank you! I modified my AuthLDAPURL string to be:

AuthLDAPURL ldap://mail.example.com/dc=example,dc=com

and it worked!

Thank you so much... have been scratching my head on this one for a while.

jimbo

Anyway to search multiple domains at one time?