Sogo users in NS ldap client cannot login to NS ldap server

[davidep (Davide Principi)]

@wclemo

bind failed: Invalid credentials (0x31) INFO:{“error_code” = 49; login = “cn=testuser,dc=example,dc=com”; }

The login = "cn=testuser,dc=example,dc=com" looks strange, it is not what I would expect for a ns7 server…

@wclemo

conn=2950 op=1 SRCH base=“dc=example,dc=com”

I’d say the search base should be “dc=directory,dc=nh”

@wclemo

baseDN = "dc=example,dc=com";
bindDN = "";
bindPassword = "";
scope = ONE;

This search criteria cannot match a user entry in LDAP. That baseDN with scope = ONE does not lead to a posixAccount entry in ns7 LDAP.

@stephdl I think the key is the search base. If scope is ONE it should be something like ou=People,dc=directory,dc=nh, whilst if scope is SUB it can be dc=directory,dc=nh. IIRC it is more specific because of SOGo user and group management.

---

We are working on an improvement of automatic probing of LDAP settings, when a remote LDAP account provider is configured. As said during the last hangout we’re almost done:

Accounts provider - Service Pack 1

I was talking with @giacomo and @filippo_carletti about the Accounts provider page and all around. We would like to improve it, by adding (or exposing) some useful features and make the resulting server configuration more flexible. Please, join this discussion and provide your thoughts! Set a custom Realm name in local DC configuration Today the Realm has the same value of the domain suffix of the machine FQDN. Let’s say the FQDN is seven.nethserver.org, the domain suffix is nethserver.org and…