[SOLVED] Proxmox 4 Beta and AD authentication

[Rudi Swennen]

Hello,

is it possible that the AD authentication feature in proxmox 4 isn't enabled/working?
I created the same config as my proxmox 3.3 cluster and on Promox 4 Beta I coudn't login on via our AD (identical config and no changes on AD)

When I configured AD on proxmox 4 and tried to log in, I also tcpdump'ed the network and no packets were send on port 389 nor 636 to the AD server.
Is this normal?

Thanks in advance,

Rudi

 

[tom]

does it work in non-ssl mode?

I just tested this in our lab (using ADS 2008 domain), seems to work as expected.

 

[Rudi Swennen]

Thanks for the response!

Indeed. I made an error.
I first had to create the user before he could "log in".
Now I see packages send but no "log in" can occur.

root@cipher:~# tcpdump -i bond0 -vv port 389 or port 636
tcpdump: listening on bond0, link-type EN10MB (Ethernet), capture size 262144 bytes
14:25:20.925331 IP (tos 0x0, ttl 64, id 53123, offset 0, flags [DF], proto TCP (6), length 60)
cipher.vlan77.be.34364 > 10.21.8.226.ldaps: Flags , cksum 0x1d4c (incorrect -> 0x89e1), seq 1964179375, win 29200, options [mss 1460,sackOK,TS val 21639212 ecr 0,nop,wscale 7], length 0

Our AD can only do SSL.

 

[Rudi Swennen]

with the following command
ssh root@10.30.0.9 tcpdump -nli bond0 not port ssh and not port 8006 and not arp and not stp -s0 -w -| wireshark -nki -
I found out that the firewall was active :-s

So everything works AD authentication WITH SSL!

Thanks for the help!