Home → Problems →

LDAP does not work, help

• Edit

Oleg

28 Oct, 2015 10:38 AM

Hi,
I'm trying to setup LDAP Catalog to work with my Active Directory.
I made all settings but authentication trough Active Directory does not work.

Please help to solve this problem

• Capture.JPG 60.8 KB

1. 1 Posted by Oleg on 28 Oct, 2015 10:44 AM

   

   How to add users ang groups from Active Directory?

   • Edit

2. 2 Posted by pdavidson on 05 Nov, 2015 01:13 AM

   

   We're having the same issue.
   Entered our AD settings but not clear how to proceed from there.
   Should our AD Groups show up in Groups ?

   Documentation says:
   Remember that according to the Security Model, a User must be granted a "Collaboration" System-level permission. This means that initially none of your LDAP users will be able to sign in to HgLab. To grant them access, go to Groups and assign the "Collaboration" permission to the LDAP Groups you want to give access to HgLab.

   This implies that our AD groups should have shown up in Groups and we activate them by allowing Collaboration? But we're seeing no AD groups in HgLab Groups

   • Edit

3. 3 Posted by pdavidson on 05 Nov, 2015 02:32 AM

   

   Got this working by finding this code sample in here and then modifying settings until the code ran correctly. Port 636 has been suggested to work better:

   using System;
   // Requires a reference to System.DirectoryServices.AccountManagement
   using System.DirectoryServices.AccountManagement;

   namespace LdapTroubleshooter
   {
       class Program
       {
           static void Main(string[] args)
           {
               var serverAddress = "yourldapserver.domain.com";
               var serverPort = "636";
               var baseContainer = "OU=Listname,dc=example,dc=com";
               var bindLogin = "BindableLogin";
               var bindPassword = "binderpassword";

               var serverQualifiedAddress = serverAddress;
               if (!string.IsNullOrWhiteSpace(serverPort))
                   serverQualifiedAddress = serverQualifiedAddress + ":" + serverPort;

               using (var domainContext = new PrincipalContext(ContextType.Domain, serverQualifiedAddress, baseContainer, ContextOptions.Negotiate, bindLogin, bindPassword))
               {
                   var principal = UserPrincipal.FindByIdentity(domainContext, "yourLoginname");
                   Console.WriteLine(principal.DistinguishedName);
               } // using
           }
       }
   }

   • Edit