[solved] AD Bind success, search fails [Tiki 5.3, Server 2008]
I was hoping someone could point me in the right direction for help on this one.
Webserver: CentOS 5.5 i386, apache 2.2.3, php 5.1.6, mysql 5.0.77
Directory Server: Windows Server 2008
My settings are very close to the recommended settings:
Host: myAD.server
Port: 389
LDAP Bind Type: Active Directory
Scope: Subtree
Base DN: dc=my,dc=base,dc=domain
User DN: OU=User & Computer Accounts
User attribute: sAMAccountName
User OC: user
Realname attribute: displayName
E-Mail attribute: mail
Group DN
Group attribute cn
Group OC groupOfUniqueNames
Member attribute memberOf
Member is DN yes
The logs report:
1. Connect Host: ldap://myAD.server. Binddn:myname@my.base.domain at line 209 in /var/www/html/lib/auth/ldap.php
2. Bind successful.
However, the message I get on the login screen is:
ERROR:
Invalid username or password
There are no other errors reported in the log. I opened up apache directory studio and connected to the AD server using the same credentials. I was successful and started a search using what I thought were the same settings:
(I have a screen capture, but I can't get it to upload and stick)
The key items are the
search base: userDN,baseDN
filter: (sAMAccountName=myname)
returning attributes:mail,displayName
I'm not sure where to look next. I don't know why it isn't progressing.