Problems with search for users / add users with LDAP

Hi everybody,

I am actually testing the new Teamsite 6.7.1 on Linux. We have an Active Directory which is connected to our test server via Vintella Authentication (VAS).

I tried both, LDAP (configured in iw.cfg) and PAM (configured iw.cfg, pam service with pam_vas3.so) authentication modes. Both modes are working fine for authentication.

When I try to add users / search for users, I cannot get all our users who are in the LDAP-tree. It just shows the local users and all the users imported by Vintella.

Is there any configuration setting, where I can set the mode for the user search? The user search should show every user in the LDAP-tree, not just the local users and those who were imported by Vintella.

Many thanks in advance!

Greetings, Dirk

Find more posts tagged with

Comments

Bill Klish

We are running into issues with this trying to integrate this with LDAP and Sun One Access Manager (SSO product).

We are only able to browse the local users.

This is on Linux as well.

abhijeet1

I am interested in this one too

Abhijeet

dholzenburg

There is an easy solution for that. Not perfect, but fine. Create the AD user on your local machine with "useradd username". Now you can add them in Teamsite. Authentication works with LDAP or pam_krb5-module. So I don't have to worry about account management. It's just that I have to add the user manually for the first time. That's it.

Another thing: Do not use Vintela Authentication Services together with teamsite. They do not like each other Smiley Happy

But with the above solution there might be no reason to use VAS anymore...

Bill Klish

Doesn't adding all of your users as local accounts defeat the purpose of centralizing the management within LDAP? If there are a bunch of users, this could become a pain and an ongoing maintenance headache.

Adam Stoller

Doesn't adding all of your users as local accounts defeat the purpose of centralizing the management within LDAP? If there are a bunch of users, this could become a pain and an ongoing maintenance headache.

My understanding from a recent query of this on my current project (where they are using TS671 on Solaris10 with PAM authentication) is that they create something called 'netgroup's which are entered into the passwd file (I believe they begin with a '+' character) and in that way you don't have to list each and every user in the local server's /etc/passwd file.

Presumably the netgroup's are managed within their NIS system.

Not sure if/how this relates to LDAP - but hopefully it provides some help.