This Question is Possibly Answered

1 "correct" answer available (10 pts) 2 "helpful" answers available (5 pts)
8 Replies Last post: Aug 11, 2008 11:39 AM by Todd Getz  
William Bronze 5 posts since
Jul 10, 2008
Currently Being Moderated

Aug 7, 2008 2:33 PM

LDAP HELP!!!!

So I got it working but what i need to do is have many baseDN's

 

So my question is how to do get more than two baseDN's

 

I know there is a <baseDN> and a  <alternateBaseDn>

 

how can i have more than 2

 

I have 3 OU's each with users and groups, for this to work I can put one in the baseDN and one in the alternateBaseDN but i need a third one.  I would just use the root of the domain but then things dont work at all...

Chris Bronze 23 posts since
Oct 19, 2006
Currently Being Moderated
Aug 8, 2008 10:48 AM in response to: William
Re: LDAP HELP!!!!

william,

     If you're using base dn's that are ou's in ldap can you use a higer level base dn that would include the 3 or 4 that you need and filter the users and groups by objectClass or some other attribute?

example:

base: dc=example,dc=com

filter: (objectClass=user)

Chris Bronze 23 posts since
Oct 19, 2006
Currently Being Moderated
Aug 8, 2008 11:04 AM in response to: William
Re: LDAP HELP!!!!

hrrm,

     Sounds like 2 different problems. Is the AD that you're trying to get users from or another LDAP?

I'm still using a much older version of openfire but I've not had a problem with AD and I'm uing the directory root.

So, when you're using the directory root users can login put don't appear online to other users?

Have you tried duplicating the ldapsearch from a command line to see if you get the results you expect?

Chris Bronze 23 posts since
Oct 19, 2006
Currently Being Moderated
Aug 8, 2008 11:20 AM in response to: William
Re: LDAP HELP!!!!

I'm using AD for auth but the embedded db for groups, again on a much older version of wild/openfire. So, I'm not sure how much more help I can be.

Do you see anything in the error log when using the root as the base?

 

This might be completely off track, but... I personally wonder what happens if you have a user that's a member of multiple groups in AD. How does openfire handle that?

 

Have you tried using AD to auth and creating a test group in the embedded system for testing? Since you can't have the muliple bases that you want have your groups ever worked correctly?

rculpepper Bronze 42 posts since
Jun 24, 2008
Currently Being Moderated
Aug 11, 2008 11:36 AM in response to: William
Re: LDAP HELP!!!!

Have you successfully used this method?

Todd Getz KeyContributor 2,178 posts since
Apr 2, 2007
Currently Being Moderated
Aug 11, 2008 11:39 AM in response to: William
Re: LDAP HELP!!!!

Are you using the correct ports?  There is a different port you should use if you set the baseDN to the top of the tree.  See this doc:  http://www.igniterealtime.org/community/docs/DOC-1554.

More Like This

  • Retrieving data ...