nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

TeamSite 7.2.1 Enabling Ldap browse

Hokumet

Hi Guys,

I am trying to add user using ldap. When I click on "Add user" in "User Management" in the administration console, the "Ldap Browse" option is grayed out.

Does anybody know how to enable the "Ldap Browse" button on the administration tab.

I have the following conf in iw.cfg

[authentication]
authenticate_by=ldap
ldap_server=****.xxy.local
ldap_port=389
ldap_dnbase=(ou=nl,dc=xxy,dc=local)
ldap_key=uid
ldapcache_thread_delay=1440
log_ldap_sync=yes
ldap_sync_retry=12

I have also configured the user_databases.xml

server value="****.xxe.local" server
port value="389" port
search_key value="uid" search_key
dnBase value="(ou=nl,dc=xxe,dc=local)" dnBase
account value="uid=ldapuser,ou=Admin Accounts,ou=admins,dc=xxe,dc=local" account
password value="52616e646f6d4956c82bafa0f00705855fdfgdfsgdf38a3a6" password
attr_email value="mail" attr_email
attr_display_name value="cn" attr_display_name
attr_sync name="description" value="admin,master,author,editor,tsusers,ccpro,ccstd,ccpro_only,ccstd_only" attr_sync

Find more posts tagged with

Comments

nipper

I have never had to "enable" it. It worked when LDAP worked.

If you search for an LDAP name, does one show ?

Hokumet

How can I check if LDAP is working?

When I search I can't find any user with the xxy domain.

Migrateduser

It was enabled for me too after installation.

Do you see this issue in all the browsers? I had some issues with Admin console on IE8.

Can you try to search using the CLT iw-home/bin/iwldapsearch, and see if the users are listed?

Hokumet

Yes, I see this issue on all the browsers.
I don't understand why mine is not enabled.

Check screen shot Smiley Sad

nipper

The first thing I always do is write a perl script to verify the connection strings are working.

Have you done that ?

Google will help, if not I can look for something.

Wolfwood

What should this perl script do?

If we run the clt "iwldapsearch -v -t ldap_1 (objectCategory=user)" the console is filled with a huge listing of al the users. So the LDAP connection should be good.

nipper

The script was to verify the connect string but you did that.

combining crosstabs thread.zip

Rick Poulin

I have found that these types of problems tend to happen if the OS configuration doesn't match TeamSite's. I'd check that, and make sure your (same) LDAP users also show up with
$ getent passwd

Second note, I'm assuming that your parameters (xxe vs. xxy) are different in iw.cfg and user_databases just from obfuscating the real values? They certainly shouldn't be different.

Besides that, I'll ask the obvious question since I can't think of anything else and it wasn't explicitly stated anywhere in the thread: have you run an iwreset -a after you made your config changes?

Wolfwood

I don't know what's the windows equivalent for "$ getent passwd", but if we search in teamsite we get back the same users as when we search in the OS. So that would mean the configuration is the same right?

The parameters are the same in both files and a reset has been given after changing something.

//edit: It's working now. You can't set the "attr_sync"-tag if you want to search/browse ldap with the gui.

So now we can browse/search/add from ldap, logging in however is a different matter. It keep saying the username/password is wrong. Smiley Sad

Hokumet

Thanks for all your help guys Smiley Wink

.

I can log in to TeamSite now using LDAP.
The computer was not yet over to the right domain. That's the reason why we could not log in using LDAP