<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Tahoma",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#1F497D;mso-fareast-language:EN-US">At a quick glance, the only difference in principle I can see from ours is we don’t have “array(…)” for the authLDAPBaseDN1.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#1F497D;mso-fareast-language:EN-US">In other words, the form is like:
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New";mso-fareast-language:EN-US">'authLDAPBaseDN1' => 'OU=staff,DC=dixon,DC=local',<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#1F497D;mso-fareast-language:EN-US">I haven’t tried changing this to see if it breaks ;-)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Otherwise, are there any clues to be had from the AD server? (the login failure code may shed some light). I’m assuming there are no firewall issues
here…<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Regards<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#1F497D;mso-fareast-language:EN-US">Richard<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Tahoma",sans-serif;color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> zendto-bounces@zend.to [mailto:zendto-bounces@zend.to]
<b>On Behalf Of </b>Chris Dixon<br>
<b>Sent:</b> 11 November 2015 02:47<br>
<b>To:</b> zendto@zend.to<br>
<b>Subject:</b> [ZendTo] AD authentication<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US">Hello, <o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> I cannot seem to get AD authentication to work properly. I am able to use the ldapserch tool to connect and pull information from my lab setup; however, when I attempt to login I keep getting “Authentication
Error, The Username and Password was incorrect”. I’ve included the ldapsearch text and my AD portion preferences.php file that I’m using for my AD bind. Can anyone offer a suggestion as to where to look for my mistake?
<span style="color:#1F497D"><o:p></o:p></span></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">ldapsearch -x -LLL -E pr=200/noprompt -h 192.168.1.142 -D 'ad@dixon.local' -w 'Password' -b 'OU=staff,DC=dixon,DC=local' -s sub '(sAMAccountName=*)'<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authenticator' => 'AD',<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPBaseDN1' => array('OU=staff,DC=dixon,DC=local'),<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPServers1' => array('192.168.1.142'),<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPAccountSuffix1' => '@dixon.local',<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPUseSSL1' => false,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPBindUser1' => 'ad@dixon.local',<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPBindPass1' => 'Password',<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPOrganization1' => 'Dixon',<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> // If you are not using this 2nd set of settings for a 2nd AD forest,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> // do not comment them out, but instead set them to be empty.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPBaseDN2' => '',<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> // Set<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> // 'authLDAPServers2' => array(),<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> // if you only have to search 1 AD forest/domain.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPServers2' => array(),<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPAccountSuffix2' => '',<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPUseSSL2' => false,
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPBindUser2' => '',<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPBindPass2' => '',<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"> 'authLDAPOrganization2' => '',<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US">Chris Dixon<o:p></o:p></span></p>
</div>
</body>
</html>