| View previous topic :: View next topic |
| Author |
Message |
DeIM
Tux's lil' helper
Joined: 11 Apr 2006
Posts: 91
|
 Posted: Tue May 01, 2012 5:57 pm Post subject: OpenLDAP bind through python-ldap fails |
 |
|
Hi,
have this config:
| Code: | olcAccess: {0}to * by anonymous auth
olcAccess: {1}to * by dn.base="loginName=admin,dc=server,dc=com" manage
olcAccess: {2}to dn.subtree="ou=people,dc=server,dc=com" by dn.children="ou=g0,ou=section,dc=server,dc=com" manage
olcAccess: {3}to dn.subtree="ou=section,dc=server,dc=com" by dn.children="ou=g0,ou=section,dc=server,dc=com" manage |
but I can't bind:
| Code: | 4fa0201f conn=1005 fd=16 ACCEPT from IP=127.0.0.1:34714 (IP=127.0.0.1:389)
4fa0201f conn=1005 op=0 BIND dn="uid=0,ou=g0,ou=section,dc=server,dc=com" method=128
4fa0201f conn=1005 op=0 RESULT tag=97 err=49 text=
4fa0201f conn=1005 op=1 UNBIND
4fa0201f conn=1005 fd=16 closed |
I'm trying to bind by:
| Code: | l = ldap.initialize("ldap://localhost/")
l.protocol_version = ldap.VERSION3
l.simple_bind_s('uid=0,ou=g0,ou=section,dc=server,dc=com','pass') |
On pass tried {MD5} and {SSHA} equivalents also.
uid=0,ou=g0,ou=section,dc=server,dc=com is alias of uid=0,ou=people,dc=server,dc=com
python-ldap 2.3.13
openldap 2.4.30
Thank you for any help  |
|
| Back to top |
|
 |
RazielFMX
l33t
Joined: 23 Apr 2005
Posts: 673
Location: NY, USA
|
| Posted: Tue May 01, 2012 8:25 pm Post subject: |
|
|
| LDAP Error code 49 is invalid credentials. If you have anonymous bind, why are you passing creds? Also, is "0" a valid user id? Normally, uid fields in ldap are string user names, such as deim. |
|
| Back to top |
|
|
DeIM
Tux's lil' helper
Joined: 11 Apr 2006
Posts: 91
|
| Posted: Wed May 02, 2012 2:31 pm Post subject: |
|
|
I just wanna bind to user of uid "0" or with my loginName, no anonymous login.
I'd like to bind to one account in admin group of aliases in g0. Have g1...n for common privileges, but search there is performed only by the bound account mentioned before.
Maybe usage of loginName instead of uid will make the magic.
You say uid is usually login name string - it equals loginName and uid is a number in "my world".
It may be wrong but i understand ldap this way
Thank you. |
|
| Back to top |
|
|
DeIM
Tux's lil' helper
Joined: 11 Apr 2006
Posts: 91
|
| Posted: Thu May 10, 2012 7:13 am Post subject: |
|
|
| Strange - it seems I can't bind to alias. Am I correct? |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
