ldap authentication - no entries returned

[svacaroaia]

Hi,

I am trying to add an LDAP authentication to my Proxmox cluster

Ive added the realm and the user but I cannot login because "no entries returned"

I've read some other posts and it seems that this will work ONLY if anonymous search are allowed on the LDAP server

Could someone please clarify this
troubleshooting tips / commands and logs to be checked will also be appreciated

cat domains.cfg
ldap: ldap
comment LDAP from auth.tor.oss.novarex.net over SSL
base_dn ou=Users,dc=tor,dc=xxxxxxx,dc=net
server1 auth.tor.oss.xxxxxx.net
user_attr uid
secure



Here is my account on openLDAP server

User's LDAP DN	uid=svacaroaia,ou=Users,dc=tor,dc=xxxxxx,dc=net
LDAP object classes	posixAccount , shadowAccount , person , inetOrgPerson
Username

 

[udo]

Hi,

I am trying to add an LDAP authentication to my Proxmox cluster

Ive added the realm and the user but I cannot login because "no entries returned"

I've read some other posts and it seems that this will work ONLY if anonymous search are allowed on the LDAP server

Could someone please clarify this
troubleshooting tips / commands and logs to be checked will also be appreciated

cat domains.cfg
ldap: ldap
comment LDAP from auth.tor.oss.novarex.net over SSL
base_dn ou=Users,dc=tor,dc=xxxxxxx,dc=net
server1 auth.tor.oss.xxxxxx.net
user_attr uid
secure



Here is my account on openLDAP server

User's LDAP DN	uid=svacaroaia,ou=Users,dc=tor,dc=xxxxxx,dc=net
LDAP object classes	posixAccount , shadowAccount , person , inetOrgPerson
Username

Hi,
this is my running config for an gosa2 ldap:

ldap: ldap
        base_dn dc=domain,dc=com
        comment gosa
        default
        secure
        server1 172.10.1.12
        server2 172.10.1.13
        user_attr uid

Udo

 

[svacaroaia]

Thanks Udo,
I think the only difference between my settings and yours is the fact that I do not allow anonymous search

Is there any way that we can "tell" proxmox to bind to the LDAP server using a username/password ?

Steven

 

[dietmar]

Is there any way that we can "tell" proxmox to bind to the LDAP server using a username/password ?

no, currently not.

 

[dietmar]

Is there any way that we can "tell" proxmox to bind to the LDAP server using a username/password ?

The current implementation detect the DN of users using an anonymous search. The question is if we can skip this step and gererate the DN directly using base_dn/user_attr - or try both approaches. I can assemble some test packages if you are willing to test?

 

[mir]

I do not think this will solve all cases because most Windows AD does not use a DN for login - well, actually they do but nobody uses it. The preferred way to login to a Windows AD is domain\useridassword or useridassword. It is also worth noticing that the only LDAP server allowing anonymous search by default seems to be OpenLDAP.

 

[dietmar]

I do not think this will solve all cases because most Windows AD does not use a DN for login

We talk about the LDAP plugin here. The AD plugin is something different!

 

[DaryL]

The current implementation detect the DN of users using an anonymous search. The question is if we can skip this step and gererate the DN directly using base_dn/user_attr - or try both approaches. I can assemble some test packages if you are willing to test?

I'm interested in such package !