Page 1 of 1

Help please: SugarCRM using Scalix LDAP directory

Posted: Thu Nov 20, 2008 6:42 am
by lelandv
Hi All,

I'm looking at SugarCRM's LDAP integration and want to use Scalix LDAP directory as the source to authenticate (and create) SugarCRM users. Unfortunately, the structure of the SugarCRM directory is somewhat different from the examples provided for using OpenLDAP. Would any one happen to know what bindings and attributes should be used by SugarCRM to access account information from the Scalix directory?

For LDAP authentication support, SugarCRM requires:
Base DN: dc=domain,dc=net
BindAttribute:
Login Attribute:

BindAttribute, in the examples provided, have such things as userPrincipalName for Active Directory and OpenLDAP, and uid for MacOS-X.. but userPrincipalName doesn't seem to exist in the Scalix directory structure.

Login Attribute has examples of userPrincipalName for AD, dn for OpenLDAP, and dn for MAC OS-X but these don't seem to be useful either.

If anyone has any ideas, I would be most grateful. Ultimately we hope to use the scalix LDAP for further integration with other systems (such as our HR Employee Self Service system).

Many thanks in advance

Leland

Posted: Thu Nov 20, 2008 8:13 am
by lelandv
Just a little bit of precision, SugarCRM is actually talking to the LDAP server, but I'm getting a Naming Violation when trying to authenticate against it.

I'm using the following settings:

Code: Select all

BaseDN:  dc=subdomain,dc=domain,dc=tld
Bind Attribute: userPrincipalName
Login Attribute: userPrincipalName
Authenticated User: sxadmin
Authentication Password: *********


I'm pretty sure that the bind attribute and login attributes are incorrect, but not sure what they should be with the scalix implementation of OpenLDAP...

Solved!

Posted: Thu Nov 27, 2008 1:56 pm
by lelandv
Took a bit of digging around to try to find what was actually going on and what attributes to use.. but we finally managed to get it working.

In the SugarCRM LDAP configuration:

Base DN: o=Scalix
Bind Attribute: dn
Login Attribute: omUlAuthid
Authenticated User: cn=<adminuser>,o=Scalix
Authenticated Password: *******

For the Authenticated User, probably best to create an admin user for the SugarCRM system in Scalix and use that rather than trying to use sxadmin.

Leland