Ldap Error

Hi all,
I want to configure LDAP to our server i have added the following configurations in user_databases.xml and did an iwreset.
[html]

[/html]

Questions:
1.I did not get he new LDAP domian that i have added. In CC Login page .Is there any thing i have done wrong?

2.I logged in using my AD credentials and In ADMIN TAB ,I tried to add users and i am able to see the new DropDown of our new LDAP DB name and LDAP browse TAB Active .But i try to search USERS i am getting error show in attached file.

ERROR:

There was an error while performing search: com.interwoven.cssdk.common.CSException: ([LDAP: error code 1 - 000004DC: LdapErr: DSID-0C0906DD, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v1772�])

Any suggestions about what went wrong?

Env: TS 6.7.2

Thanks in Advance

FYI.

Find more posts tagged with

Comments

nipper

First check your LDAP settings. I tend to write a short perl script that will use the settings and query LDAP for user Andy. That error implies the connect string, user or password to connect to LDAP are incorrect.

It is maybe 20 lines of perl

joe_pat

First check your LDAP settings. I tend to write a short perl script that will use the settings and query LDAP for user Andy. That error implies the connect string, user or password to connect to LDAP are incorrect.

It is maybe 20 lines of perl

Thanks Nipper,

Do i need to add some thing like to the existing config?
[html]

[/html]
account and encrypted password as mentioned in guide?

nipper

Depends on the settings of LDAP. Some allow anonymous access, others require username/password

Talk to your LDAP geeks. They need to check the DN they provided and if it allows anon, no problem, othewise you need the login and password (which you encode with an IWOV supplied tool to get the data in the password entry).

joe_pat

Depends on the settings of LDAP. Some allow anonymous access, others require username/password

Talk to your LDAP geeks. They need to check the DN they provided and if it allows anon, no problem, othewise you need the login and password (which you encode with an IWOV supplied tool to get the data in the password entry).

Thank you so much i will check with them.

joe_pat

Thank you so much i will check with them.

Nipper,

We are using username/ password and i got the encrypted password using tool and added the complete DN name and encrypted password i got when i used the tool . Now when i try to search a user it is giving following error

ERROR:

There was an error while performing search: com.interwoven.cssdk.common.CSException: (Unprocessed Continuation Reference(s))

Thanks in advance.

nipper

No clue on that one. I suggest search the forums and support for that error (long shot). Also try writing a script to verify you can get to LDAP from the TS server. See if there are any errors on the LDAP server (usually hard to find but I have had some good LDAP guys who were able to help). You may need to work through support. Also check to see if any errors are in any of the logs.

joe_pat

No clue on that one. I suggest search the forums and support for that error (long shot). Also try writing a script to verify you can get to LDAP from the TS server. See if there are any errors on the LDAP server (usually hard to find but I have had some good LDAP guys who were able to help). You may need to work through support. Also check to see if any errors are in any of the logs.

Thank You for your suggestion and quick reply.

joe_pat

Problem resolved ..Thank You all.. especially Nipper

I just gave a wrong search key value in the configuration. I works fine now i am able to add users using LDAP browse. Now i should see to OD UI..

One quick question:

I want to include new LDAP Domian in CC LogIn Screen. Sothat user will select this LDAP domain and give credentials to enter in.

Thanks in advance.

ISCBorisB

Problem resolved ..Thank You all.. especially Nipper

I just gave a wrong search key value in the configuration. I works fine now i am able to add users using LDAP browse. Now i should see to OD UI..

One quick question:

I want to include new LDAP Domian in CC LogIn Screen. Sothat user will select this LDAP domain and give credentials to enter in.

Thanks in advance.

iw.cfg, Section [iwcgi], Attribute "domain_list"
See Administration Guide, "Configuring Domain Lists in the Login Screen" for Details

joe_pat

iw.cfg, Section [iwcgi], Attribute "domain_list"
See Administration Guide, "Configuring Domain Lists in the Login Screen" for Details

I did that Thank You.

nipper

When you are complete, close the thread, that way 2 years down the road someone does not piggy back with a complete new problem. Glad you are running

Andy

joe_pat

When you are complete, close the thread, that way 2 years down the road someone does not piggy back with a complete new problem. Glad you are running

Andy

Will definitely close the thread once i am done with all my doubts regarding this topic.

Quick question:

Right now my LDAP server-name is adbsf and i want to change that to LDAP1 so that it will be easy to the GUI user to select the domain . How do i do that? Is there any thing in teamsite where i can mention fancy name to refer the actual server dirty name?

Thank You.

ISCBorisB

Is there any thing in teamsite where i can mention fancy name to refer the actual server dirty name?

Unlikely. You can certainly hack a Login Page and do your own Domain mapping right before Form Submission. Other than hacking, well...