This is a multi-part message in MIME format.
--------------090006050100020008090701
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Hi,
the system is trying to bind to ldap as:
bind request: uid=cn=ovirt,cn=Users,cn=Accounts,dc=ourdomain,dc=si
I dont know how it knows dc=ourdomain,dc=si
It should be
bind request: cn=ovirt,ou=system,dc=ourdomain,dc=si" -b "dc=arnes,dc=si
The same with the search: we have users in form as:
edupersonprincipalname=username(a)users.ourdomain.si
<mailto:edupersonprincipalname=abagon@guest.arnes.si>,dc=users,dc=ourdomain,dc=si
values in database:
select * from vdc_options where option_name in
('DomainName','LdapServers','LDAPSecurityAuthentication','LDAPProviderTypes','AdUserName','AdUserPassword')
order by option_id;
option_id | option_name | option_value
| version
-----------+----------------------------+--------------------------------+---------
10 | AdUserName |
users.ourdomain.si:ovirt | general
11 | AdUserPassword
|users.ourdomain.si:adminpassword | general
69 | DomainName | users.ourdomain.si
| general
130 | LDAPSecurityAuthentication|
users.ourdomain.si:SIMPLE | general
132 | LdapServers |
users.ourdomain.si:server.ourdomain.si | general
133 | LDAPProviderTypes |
users.ourdomain.si:rhds | general
(6 rows)
Best Regards,
Andrej Bagon
On 03/15/2013 12:09 PM, Itamar Heim wrote:
On 03/14/2013 01:58 PM, Andrej Bagon wrote:
> Hi,
>
> is it possible to change the bind request that is sent to the ldap
> server? The default uid=user,cn=Users,cn=Accounts,cn=our,cn=domain is
> not suitable.
can you please explain why / what you would like to change it to?
(not sure possible now, but there is work to make it more
configurable/pluggable)
--------------090006050100020008090701
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hi,<br>
<br>
the system is trying to bind to ldap as:<br>
bind request: uid=cn=ovirt,cn=Users,cn=Accounts,dc=ourdomain,dc=si<br>
<br>
I dont know how it knows dc=ourdomain,dc=si<br>
It should be<br>
bind request: cn=ovirt,ou=system,dc=ourdomain,dc=si" -b
"dc=arnes,dc=si<br>
<br>
The same with the search: we have users in form as:<br>
<a
href="mailto:edupersonprincipalname=abagon@guest.arnes.si">edupersonprincipalname=username@users.ourdomain.si</a>,dc=users,dc=ourdomain,dc=si<br>
<br>
values in database:<br>
select * from vdc_options where option_name in
('DomainName','LdapServers','LDAPSecurityAuthentication','LDAPProviderTypes','AdUserName','AdUserPassword')
order by option_id;<br>
option_id
|
option_name
|
option_value
| version <br>
-----------+----------------------------+--------------------------------+---------<br>
10 |
AdUserName
|
users.ourdomain.si:ovirt
| general<br>
11 |
AdUserPassword
|users.ourdomain.si:adminpassword |
general<br>
69 |
DomainName
| users.ourdomain.si
| general<br>
130 |
LDAPSecurityAuthentication|
users.ourdomain.si:SIMPLE
| general<br>
132 |
LdapServers
|
users.ourdomain.si:server.ourdomain.si | general<br>
133 |
LDAPProviderTypes
|
users.ourdomain.si:rhds
| general<br>
(6 rows)<br>
<br>
Best Regards,<br>
Andrej Bagon<br>
<br>
<br>
On 03/15/2013 12:09 PM, Itamar Heim wrote:
<blockquote cite="mid:51430171.2010904@redhat.com"
type="cite">On
03/14/2013 01:58 PM, Andrej Bagon wrote:
<br>
<blockquote type="cite">Hi,
<br>
<br>
is it possible to change the bind request that is sent to the
ldap
<br>
server? The default
uid=user,cn=Users,cn=Accounts,cn=our,cn=domain is
<br>
not suitable.
<br>
</blockquote>
<br>
can you please explain why / what you would like to change it to?
<br>
(not sure possible now, but there is work to make it more
configurable/pluggable)
<br>
<br>
</blockquote>
<br>
</body>
</html>
--------------090006050100020008090701--