Hi Jeffrey,

I'll come back on the suggestions you made in a bit, but I can already give 
some feedback :


è Nothing is blocking access between Baruwa and the AD server. I can telnet 
from Baruwa to the AD server just fine.

è The AD domain and the mail domain is the same


I'll try the mentioned suggestions and come back with more.

Fred.

Van: [email protected] [mailto:[email protected]] 
Namens Morgan, Jeffrey R.
Verzonden: maandag 8 april 2013 15:06
Aan: 'Baruwa users list'
Onderwerp: Re: [Baruwa] question concerning AD authentication

Couple of things to try, and couple more questions:


·         Can you confirm there's nothing preventing access between the Baruwa 
relay and your AD domain controller?

o   See 'TestQuery Linux' section for details: 
https://help.ubuntu.com/community/ActiveDirectoryHowto (will likely need to 
apt-get install ldap-utils)

o   If we can't confirm a test query from the relay, it's an issue with 
communication between the domain controller & Baruwa

·         If your AD domain and email domain are different, can you confirm 
whether 'split address' is enabled in Baruwa domain settings?

·         Can you attempt to update to the latest ad.py from Git?

o   https://github.com/akissa/baruwa/blob/master/src/baruwa/auth/ad.py

o   I originally had some issues with address splitting when using the 
packages. I also had some issues when attempting to authenticate when the 
user's primaryGroup was assigned a Baruwa role...

§  If one of your Baruwa roles is ever mapped to a users primaryGroup, make 
sure to add 'primaryGroupID' to the list of AD_SEARCH_FIELDS in your 
settings.py (after upgrading ad.py to the latest version)... this doesn't sound 
like your issue, but it might help if you ever map to a primaryGroup.

>JR


--
This message was scanned by ESVA and is believed to be clean.
Click here to report this message as 
spam.<%0d%0ahttp:/mailscan.crea.be/cgi-bin/learn-msg.cgi?id=C081728202.F3B4C%0d%0a>
_______________________________________________
Keep Baruwa FREE - http://pledgie.com/campaigns/12056

Reply via email to