ejabberd - Comments for "LDAP auth failed"

Finally.... what?

mamarin — Tue, 24 May 2005 07:18:25 +0000

Did you do it?
Does it run ok?

I can't....

That's sound interesting. I'l

antoniofcano — Fri, 22 Apr 2005 11:08:37 +0000

That's sound interesting. I'll try it.

thanks,

not in config, but maybe in the source code

mfoss — Thu, 21 Apr 2005 21:46:34 +0000

I don't know if it is possible to set the Timeout in config file, then ever try to get the LDAP an ejabberd in the same machine (or network).

Not in configuration file, but on ejabberd/src/eldap/eldap.erl there are three values that sound interesting:

-define(RETRY_TIMEOUT, 5000).
-define(BIND_TIMEOUT, 10000).
-define(CMD_TIMEOUT, 5000).

You can modify them, recompile and check if they help or not.

Finally

antoniofcano — Thu, 21 Apr 2005 19:47:15 +0000

Hello all,

I've got good news :D finally I sit, calm down and start for the first.

My errors were:
1) Timeout with the LDAP server.
2) Fixed first, i see that secret were not correct, ups!!
3) And finally, the client doesn't send the password in Plain Text.

Now it works great. For getting ejabberd working with LDAP authentication we only have to install ejabberd (last version works fine) and set the config in that way:
{auth_method, ldap}.
{ldap_servers, ["server-ip"]}. % List of LDAP servers
{ldap_uidattr, "uid"}. % LDAP attribute that holds user ID
{ldap_base, "ou=people,dc=ikusnet,dc=net"}. % Base of LDAP directory
{ldap_rootdn, "cn=admin,dc=ikusnet,dc=net"}.
{ldap_password, "admin-ldap-password"}.

I don't know if it is possible to set the Timeout in config file, then ever try to get the LDAP an ejabberd in the same machine (or network).

Regards

Ldap progress slowly but still no runs

antoniofcano — Thu, 21 Apr 2005 08:57:57 +0000

Hi all,

I've got one answer for the question of debug messages. It doesn't appear because are into the wrong place, if I couldn't find the user in the ldap the case goes to false and doesn't show the Debug information.

Then I make the next change:
find_user_dn(User) ->
Attr = ejabberd_config:get_local_option(ldap_uidattr),
Filter = eldap:equalityMatch(Attr, User),
Base = ejabberd_config:get_local_option(ldap_base),
case eldap:search("ejabberd", [{base, Base},
{filter, Filter},
{attributes, []}]) of
#eldap_search_result{entries = [E | _]} ->
E#eldap_entry.object_name;
_ ->
Atrib = E#eldap_entry.attributes,
io:format("LDAP query ~s~n", [Atrib]),
false
end.

But when go to make it told me that variable 'E' is unbound. How can I debug it for finding the error.

I also show in one post of mailing-list that in V0.9 are two new params the ldap_rootdn y ldap_password. Now my ejabberd config for ldap is:

{auth_method, ldap}.
{ldap_servers, ["server-ip"]}. % List of LDAP servers
{ldap_uidattr, "uid"}. % LDAP attribute that holds user ID
{ldap_base, "ou=people,dc=ikusnet,dc=net"}. % Base of LDAP directory
{ldap_rootdn, "cn=admin,dc=ikusnet,dc=net"}.
{ldap_password, "admin-ldap-password"}.

But it still failed authenticate, What is the base password field for jabber users into ldap?

Kind regards,