LDAP integration.

[kanderson]

I have a potential client who is looking to integrate their OpenLDAP solution with Scalix. I've set it up for other clients, and it works fine, but strangely, not for this instance.

The Scalix AuthID does match the OpenLDAP UID, and the config files are set up correctly. They've been checked on several occasions, by different people.

ldapsearch does work correctly, and returns what I'd expect (here is an edited result).

# testu, People, rapid.ca
dn: uid=testu,ou=People,dc=rapid,dc=ca
objectClass: top
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: shadowAccount
objectClass: sambaSamAccount
uid: testu
cn: testu
gecos: Test User
displayName: Test User
uidNumber: 1006
gidNumber: 1015
homeDirectory: /data/home/testu
sambaHomePath: \\CGYSMB01\testu
sambaLogonScript: logon.cmd
loginShell: /sbin/nologin
sambaHomeDrive: P:
o: Rapid
postalAddress: 324 1450 8th Ave SW
l: Calgary
st: AB
postalCode: T2P 2Z2
sn: test
sambaKickoffTime: 2147410800
sambaLogonHours: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
sambaAcctFlags: [U ]
shadowMin: 0
shadowMax: 99999
shadowWarning: 7
shadowInactive: 0
shadowExpire: 24853
destinationIndicator: D
sambaSID: S-1-5-21-293411017-1727685522-1637365974-3012
sambaPrimaryGroupSID: S-1-5-21-293411017-1727685522-1637365974-513
sambaPwdMustChange: 2147483647
sambaPwdCanChange: 1149280839
sambaPasswordHistory: 8F6EADA73EBF816004E7A2DB04BA5EB0D7FB802AEB220D4CBCE89462
8DB3A55D0C113CC08A4A0C644D75E24388E99A5EEC04916B0F27E40BC82145EE35509E97FABBA
DDB162D2A004BCA0EF5DB27711C07F80B2EDD5A5C3CE8C1FBAA6D9DF08F000000000000000000
0000000000000000000000000000000000000000000000
sambaPwdLastSet: 1149280839
shadowLastChange: 13301


Scalix shows the AuthID as:

Authentication ID: testu
User Name : test user /CN=test user
MailNode : Calgary
Internet Address : "test user" <test.user@rapid.com>
System Login : 60538
Password : set
Admin Capabilities : NO
Mailbox Admin Capabilities : NO
Language : C
Virtual Vault : Enabled (default)
Mail Account: Unlocked
Last Signon : 06.02.06 14:37:42
Receipt of mail : ENABLED
Service level : 0
Excluded from Tidying : NO
User Class : Full


Is there a log file or something that would show errors for LDAP authentication?

Thanks
Kev.

[AussieOwner]

Kevin..

Check the Admin guide in the Kerberos Authentication section. There is a troubleshooting section called Troubleshooting Kerberos and SSO. Basically it involves touching a file in /var/opt/scalix/tmp/omschkd.log I believe that this troubleshooting info is generic and can be used to shoot your prob with OpenLDAP.

Let us know if this helps.

Darrell
The AussieOwner