This Question is Answered

19 Replies Last post: May 30, 2008 8:56 AM by Todd Getz  
Mat Dailey Bronze 7 posts since
May 22, 2008
Currently Being Moderated

May 22, 2008 12:56 PM

No users were found using the specified configuration.

 

I have attempted to setup openfire with ldap, however I cannot seem to figure the issue out at this time.

 

 

 

 

For some reason I cannot get ldap to work, My Domain controller is "dc1" on the "SMI" domain.

 

 

My baseDN is "CN=ChatUsers,OU=corporateusers,dc=dc1,DC=SMI,DC=com"

 

 

 

 

Attached is a screen shot of my domain architecture.  All help is appreciated.

 

 

Thanks.

 

 

 

 

 

 

Attachments:
Bill Silver 53 posts since
Sep 27, 2007
Currently Being Moderated
May 22, 2008 2:19 PM in response to: Mat Dailey
Re: No users were found using the specified configuration.

 

Try removing the dc=dc1 parameter from your BaseDN string.

 

 

 

 

CN=ChatUsers,OU=corporateusers,DC=SMI,DC=com

 

 

Todd Getz KeyContributor 2,214 posts since
Apr 2, 2007
Currently Being Moderated
May 22, 2008 2:45 PM in response to: Bill
Re: No users were found using the specified configuration.

 

The group ChatUsers should not be in your baseDN.  It should simply be OU=corporateusers,DC=SMI,DC=com.  You add the group to the User search filter in the openfire.xml like this:

 

 

 

 

 <searchFilter> <![CDATA[[(&(objectClass=organizationalPerson)(memberOf=cn=ChatISteam,ou=Cha tGroups,ou=accounts,dc=domain,dc=com))]]]></searchFilter> 

 

 

Bill Silver 53 posts since
Sep 27, 2007
Currently Being Moderated
May 22, 2008 3:42 PM in response to: Mat Dailey
Re: No users were found using the specified configuration.

 

Is this a typo in your config "DC=co" or should it be"DC=com".

 

 

<baseDN>CN=ChatUsers,OU=corporateusers,DC=SMI,DC=co</baseDN>

 

 

Also your adminDN should be in a similar format as the baseDN

 

 

<adminDN>smi\mathew</adminDN> will not work

 

 

Might look something like

 

 

<adminDN>CN=mathew,OU=corporateusers,DC=SMI,DC=com</adminDN>

 

 

 

 

If you have an ldap tool like adsiedit you can lookup the actual Distinguished Names that both fileds require.

 

 

Todd Getz KeyContributor 2,214 posts since
Apr 2, 2007
Currently Being Moderated
May 22, 2008 3:57 PM in response to: Mat Dailey
Re: No users were found using the specified configuration.

I have attached an edited openfire.xml.  You may need to edit it futher with a decent text editor such as notepad++ for authorizedUsernames and adminPasswords.

Attachments:
Todd Getz KeyContributor 2,214 posts since
Apr 2, 2007
Currently Being Moderated
May 22, 2008 3:48 PM in response to: Bill
Re: No users were found using the specified configuration.

 

Your statement on the adminDN is completely incorrect.  domain\username is a completely valid structure for Active Directory.  As a matter of fact that is how mine is configured. 

 

 

 

 

When I open the openfire.xml it has al lot of invalid characters in it.  What was it edited with?  I will try to clean it up for you.

 

 

Todd Getz KeyContributor 2,214 posts since
Apr 2, 2007
Currently Being Moderated
May 23, 2008 1:58 PM in response to: Mat Dailey
Re: No users were found using the specified configuration.

 

What is the status of this issue?  Was my editted openfire config of any help.

 

 

Todd Getz KeyContributor 2,214 posts since
Apr 2, 2007
Currently Being Moderated
May 23, 2008 2:51 PM in response to: Mat Dailey
Re: No users were found using the specified configuration.

I may be able to help you better if I had a diagram of your AD OU structure.  this should be very easy to get working with LDAP.  If you tak a screenshot or multiple of your AD users and computers expanded I may be able to help you better.  Of cours edit an sensitive data.  I do not want you to compromise your network to get help.  You may send me a Private Message for my email address instead of posting the images here (security first).

Bill Silver 53 posts since
Sep 27, 2007
Currently Being Moderated
May 23, 2008 8:30 AM in response to: Todd Getz
Re: No users were found using the specified configuration.

Cool didn't know that, thought it had to be a normal LDAP structured string.

Todd Getz KeyContributor 2,214 posts since
Apr 2, 2007
Currently Being Moderated
May 23, 2008 10:01 AM in response to: Bill
Re: No users were found using the specified configuration.

nope you can use LDAP structure, domain\user structure, or email authentication (johndoe@domain.com).

winter Bronze 68 posts since
Oct 19, 2006
Currently Being Moderated
May 23, 2008 7:15 PM in response to: Mat Dailey
Re: No users were found using the specified configuration.

wrong thread.

Todd Getz KeyContributor 2,214 posts since
Apr 2, 2007
Currently Being Moderated
May 25, 2008 8:08 AM in response to: Mat Dailey
Re: No users were found using the specified configuration.

Based on you graphics you have emailed me we were adding incorrect information to the baseDN.  There is no .com in your AD so it should not be in your baseDN.  It should simply be OU=corporateusers,DC=SMI.  The domain controller you are binding to should be dc1.SMI, again no .com.  You add the group to the User search filter in the openfire.xml like this:

 

 

 

 

 <searchFilter> <![CDATA[[(&(objectClass=organizationalPerson)(memberOf=cn=ChatISteam,ou=cor porateusers,dc=SMI))]]]></searchFilter> 

 

 

I attached an adjusted openfire.xml for you.  You will again need to edit it for real usernames and passwords with a program like notepad++.

Attachments:
Todd Getz KeyContributor 2,214 posts since
Apr 2, 2007
Currently Being Moderated
May 29, 2008 6:18 PM in response to: Mat Dailey
Re: No users were found using the specified configuration.

Did the posted files help you at all?

Todd Getz KeyContributor 2,214 posts since
Apr 2, 2007
Currently Being Moderated
May 30, 2008 8:56 AM in response to: Mat Dailey
Re: No users were found using the specified configuration.

glad to hear we got it working for you.  don't forget to mark this thread as answered (and award points for helpfull or correct answers ).

More Like This

  • Retrieving data ...