Having trouble with LDAP

[rkmincey]

Hey there, everyone,
I ran into an issue with LDAP for authenticating users. I have the LDAP server configured and tested in iPSK Manager. I changed the group, portal, etc to look to authenticate to the ldap source. But, it is not successfully logging in the user. I also tried changing the admin portal access to allow these users, still no go. I checked with wireshark and saw the successful binds with the configured user from the ldap section, the successful bind with the user logging in, but iPSK-Manager is still denying authenticaton.

Any help or ideas?
Thanks!

[ciesinsn]

What is your LDAP directory? Active Directory?

[rkmincey]

yes, sorry. I forgot to put that.

[ciesinsn]

There was a recent issue (#74) posted about passwords with a apostrophe in them being encoded, do the passwords you are using for the users by chance have a apostrophe?

If not in a packet capture do you see the attribute memberof being sent back and the list of groups is the one your specifically using is the DN listed exactly the same in iPSK Manager as you see in the packet capture?

[rkmincey]

Yes. Right before the bind request to validate the username/pw combination, I see the search request asking for name, mail, samaccountname, objectSid, memberof, and userPrincipalName. The response includes memberof, name, etc.

Clarifying question, so, are you saying that in the list of attribute values returned in memberof, one of those needs to match the entry in the group configured? Hmm. Let me try that. One sec.
R

[rkmincey]

Thank you for the assist! Yes, I misunderstood the configuration explanation. When I made that correction, it allowed me to log in to the admin portal with the AD admin user.
Thank you again for the help!
R

[ciesinsn]

Yes, access to any of the portals within iPSK Manager is based on group membership, either local group, or external group so one of the returned memberof groups if you are using external groups needs to be configured in iPSK Manager with the DN's matching and then assigned as a group to access a portal.