LDAP / Active directory

Posted by Underwhere 07 Aug 2008 16:41 GMT-0000

I'm a complete novice at this...at everything so please bear with me. It's taken me 3 days to do this. I figured it may help others.

Windows Server 2003 RC2
Tiki 2.0

Here are my PEAR settings.
I got everything to successfully connect but could not figure out why I could not get any account to authenticate. If you are in this situation skip to SECTION 2. It was so simple but at least it is working now.

SECTION 1

I used a program called LDAP Explorer to confirm some of the settings.
I used a black line to remove some of my company's sensitive information. Please replace with your own.

When you look at the event viewer on your LDAP server this is what you should see when you have a successful bind.
I am looking at the "Security" node of the event viewer.

• You will see the bind user (I used an account i created called "wiki")
• Then you will see the account logon (the person who you are trying to authenticate as)
• Then you will see the bind user logging off.
• Then you will see the account logon also log off.

This shows what I had problems with for a long time.
This is a bad log. Here it shows binding problems. The ANONYMOUS LOGIN is how it is displayed. If you see this it may be a binding issue.

SECTION 2

Now if you can successfully bind and still can't login it may be because you haven't set up any users in Tiki.
It didn't occur to me that you needed to do this. (I'm new at this)
Just because Tiki goes out and authenticates with Active Directory doesn't mean that it will automatically add users to Tiki.
So you need to do that yourself because you can set individual user permissions etc etc. None of that will come through from Active Directory.
Here is how I set my Login settings.

Here is the add-users page. NOTE: If you have any values in the minimum password length field you will not be able to add users so set this field to blank.

If you have any questions I'm really not the person to ask. really.

I will try and update this if I come up with anything that I think I have forgotten.