NethServer Version: 7.7.1908
Module: Users and Groups / LDAP Auhtentication
Firstly I’m glad to join this community especially I’m proud I can use an Italian distro
Trying to setup my nethserver VM for my homelab with AD authentication, but I got some troubles with LDAp authentication.
I managed to configure the LDAP with Zentyal without problems, but I couldn’t with nethserver, even if I read all the topics and documentation I found on this community and other places.
My setup is:
Proxmox 5.x as hypervisor
Ubuntu Server 18.04 VM with nextcloud 17.x
Nethserver VM ( PDC )
Nethserver-2 VM ( I successfully joined the PDC )
nextcloud is behind a nginx letsecrypt docker container, but this shouldn’t matter.
AD Provider config in nethserver is:
LDAP URl: ldaps://nsdc-nethserver.ad.domain.com AD IP: 192.168.3.2 BASIC DN: dc=ad,dc=domain,dc=eu Start TLS Disabled
I tried to configure nextcloud as follow:
server: ldaps://nsdc-nethserver.ad.domain.com port: 636 user: I tried with several users "firstname.lastname@example.org" , "email@example.com" and with a dedicated user as user.
I also try enablling STARTLS and ldap ( instead of LDAPS ).
I also disabled the SSL verification in advanced options in nextcloud and other settings I found in other posts, but without success.
I tried to query the LDAP with this command:
ldapsearch -H ldaps://192.168.3.2:636 -D "firstname.lastname@example.org" -W -b "dc=ad,dc=domain,dc=com"
ldap_sasl_bind(SIMPLE): Can’t contact LDAP server (-1)
It worked out from the nethserver instances ( both PDC and second installation ), but I got an error from the nextcloud VM.
On the NC VM I installed the package krb5-user ldb-tools and copied the file krb5.conf to nextcloud from nethserver, but no luck.
Running the test-config from nextcloud CLI I got this:
sudo -u www-data php /var/www/html/nextcloud/occ -vvv ldap:test-config s02
The configuration is invalid. Please have a look at the logs for further details.
Same error from GUI.
What I’m doing wrong?
I really would like to setup my environment using nethserver instead of zentyal, but after I spent almost 2 days in research I don’t know what else try out.
Thanks in advance for the support!