bob at computerisms
Aug 10, 2013, 4:55 PM
Post #1 of 1
(8 views)
Permalink
|
|
active directory subtree search and group sync
|
|
Hello,
I am using Davical with samba Active Directory.
I want to set my baseDNUsers quite high in the DIT so that I can have
OUs on the same level as my Users container, and still find users in
those OUs.
Currently, if I set my baseDNUsers to dc=example,dc=com, login will fail
and the error log will report the inability to find the user with the
filters. I have played with the filters, explicitly set the 'scope'
parameter, played with all sorts of other settings, examined the code to
the limits of my abilities, searched google, re-read every relevant page
on the wiki, and prayed to my brain that the answer should magically
come to me. The only way I can get the authentication to work is by
changing baseDNUsers to cn=Users,dc=example,dc=com.
I see example configs on the internet where people describe their Active
Directory setup and it does not contain the cn=Users part in the dn, so
it seems others have accomplished this before.
So the question is: am I trying to step beyond the limits of davical's
ldap capabilities, or do others have this working and I just need to
keep at it?
In my searches for an answer, I have found one other post describing my
problem, but the solution is not included:
http://www.gossamer-threads.com/lists/davical/general/1089
I am also curious if there is a do_not_sync_from_ldap equivalent for
groups? Active Directory is full of groups I dont' want involved in the
calendaring system. I tried to use it to prevent certain groups from
syncing, but it didn't work...
--
Computerisms
Bob Miller
867-334-7117 / 867-633-3760
http://computerisms.ca
------------------------------------------------------------------------------
Get 100% visibility into Java/.NET code with AppDynamics Lite!
It's a free troubleshooting tool designed for production.
Get down to code-level detail for bottlenecks, with <2% overhead.
Download for free and get started troubleshooting in minutes.
http://pubads.g.doubleclick.net/gampad/clk?id=48897031&iu=/4140/ostg.clktrk
_______________________________________________
Davical-general mailing list
Davical-general [at] lists
https://lists.sourceforge.net/lists/listinfo/davical-general
|
