omldapsync

[chris]

Hi Chris,

what are you using as an argument to sxpamauth? This test command has a bug in v10 - it only accepts the user's last name as as argument - not the auth id. (This problem is fixed in v11)

What you can also try is omlogon (also with last name) or just try SWA as normal.

Let me know what you get out of it,

Chris

[cswihart]

Hey Chris

When I use the users last name I'm able to execute the sxpamauth argument and change passwords in eDirectory. However I'm still unable to login via SWA. If I execute omshowu -n username. password is listed as unset. If i change the password via ommodu to the password of the user I'm able to login without problem.


Chris

[chris]

Can you post the contents of your /var/opt/scalix/sys/pam.d/ual.remote?

Thanks,

Chris

[cswihart]

Hey Chris,

Your post encouraged me to examine my ual.remote file a little closer. Although I had all the correct lines added to the end of the file I had failed to comment out the

Code: Select all

auth required om_auth nullok

at the beginning of the file. I'm now able to authenticate directly against eDirectory. Thanks for pointing me in the right direction.


-Chris

[chris]

Excellent!

I'll update the wiki to reflect the fact that the files should contain nothing other than the lines I quoted.

Let me know if anything else comes up.

Chris

[cswihart]

One thing I've noticed that I haven't had much time to look into yet is that all the users I import from eDirectory are imported as Premium Users. I see in the Active Directory sync instruction there is a scalixMailboxClass attribute to desiginate a user as having either FULL or LIMITED access. However I do not see this in my current sync agreement. I'm assuming that I'll have to extend my eDirectory schema to include this attribute and then make the proper attribute mappings in Scalix. Is this correct?

-Chris

[chris]

Hi Chris,

you are correct - you would need to update your scheme in order to set this attribute in eDirectory.

The relevant lines in the sync.cfg then need to be updated to reflect the value you used.

Chris