Invalid LDAP Authentication Method

[Rajesh Dharmalingam]

Hi,

On Dec 11, 2007 8:03 PM, Edward Rudd <erudd at netfor.com> wrote:

> The client must use plain text authentication, as I have not written
> SASL support in the LDAP plugin.  Also did you update the LDAPFilter to
> have %u in it? Second do you have the inetAuthorizedServices attribute?
> (Actually you should remove it, it was a *BAD* example as
> inetAuthorizedServices requires a full DN value).
>
> Try using just
>  (uid=%u) for (uid=abc)
> or
>  (uid=%u@%d) for (uid=abc at abc.com)
> as the LDAPFilter
>

This is my conf file:

  <Plugin DJabberd::Authen::LDAP>
        LDAPURI             ldap://192.168.1.11/
        LDAPBindDN          dc=abc,dc=com
        LDAPBindPW          test
        LDAPBaseDN          dc=abc,dc=com
        LDAPFilter          (uid=%d)  / LDAPFilter          (uid=%u) [Tried
with both]
  </Plugin>

and these are my ldap entries:

dn: dc=abc,dc=com
dc: dimdim
objectClass: dcObject
objectClass: organization
o: abc

dn: cn=abc, dc=abc,dc=com
userPassword:: abc
objectClass: top
objectClass: person
sn: Dimdim User
cn: abc

Regards,
-Rajesh


>
> Rajesh Dharmalingam wrote:
> > Hi,
> >
> > Thanks for the updates. I removed the LDAPMethod and tried, the user is
> > in "Connecting" status. The debug log is:
> >
> > DJabberd::Connection::ClientIn=ARRAY(0x8ee73ac):  Cipher `(NONE)'
> > 3909 DEBUG DJabberd.Connection.XML.ClientIn         1 > <?xml
> > version="1.0" encoding="UTF-8"?><stream:stream from='abc.com
> > <http://abc.com>' id="efe1bd9d700c68ca04de306be9a5bbd2c051a785"
> > version=' 1.0'  xmlns:stream="http://etherx.jabber.org/streams"
> > xmlns="jabber:client"><stream:features><auth xmlns='
> > http://jabber.org/features/iq-auth'/<http://jabber.org/features/iq-auth%27/>
> > <http://jabber.org/features/iq-auth'/<http://jabber.org/features/iq-auth%27/>
> >></stream:features>
> > 3909 DEBUG DJabberd.Connection.XML.ClientIn         1 < <iq type='get'
> > id='purpled510548c'><query
> > xmlns='jabber:iq:auth'><username>abc</username></query></iq>
> > 3909 INFO  DJabberd.Connection.XML.ClientIn         <iq type='result'
> > id='purpled510548c'><query
> >
> xmlns='jabber:iq:auth'><username></username><password/><resource/></query></iq>
> >
> > 3909 DEBUG DJabberd.Connection.XML.ClientIn         1 < <iq type='set'
> > id='purpled510548d'><query
> >
> xmlns='jabber:iq:auth'><username>abc</username><resource>Home</resource><password>abc</password></query></iq>
> >
> >
> > One clarification, there is no change from client side except that we
> > need to give the user name/password of what is available in the ldap?
> >
> > Regards,
> > -Rajesh
> >
> > On Dec 11, 2007 7:46 PM, Edward Rudd <erudd at netfor.com
> > <mailto:erudd at netfor.com>> wrote:
> >
> >     Rajesh Dharmalingam wrote:
> >     > Hi,
> >     >
> >     > I am trying to add the ldap plugin.
> >     >
> >     > The server configuration is
> >     >   <Plugin DJabberd::Authen::LDAP>
> >     >         LDAPURI             ldap://192.168.1.11/
> >     >         LDAPBindDN          dc=abc, dc=com
> >     >         LDAPBindPW          test
> >     >         LDAPBaseDN          dc=abc,dc=com
> >     >         LDAPFilter
> >      (&(inetAuthorizedServices=jabber)(uid="%d"))
> >     >         #LDAPFilter
> >      (&(inetAuthorizedServices=jabber)(uid="%u"))
> >     >         LDAPMethod          rebind
> >     >   </Plugin>
> >     >
> >     [snip]
> >     >
> >     > The debug log is
> >     > Use of uninitialized value in pattern match (m//) at
> >     > /usr/local/chat/djabberd/DJabberd/../DJabberd-
> >     Authen-LDAP-0.02/lib/DJabberd/Authen/LDAP.pm
> >     > line 101, <DATA> line 228.
> >     > 32599 ERROR DJabberd.Authen.LDAP                     Invalid LDAP
> >     > Authentication Method
> >     > Configuration error on line 44: Invalid LDAP Authentication Method
> at
> >     >
> >     /usr/local/chat/djabberd/DJabberd/../DJabberd-Authen-LDAP-0.02
> /lib/DJabberd/Authen/LDAP.pm
> >     > line 105
> >
> >     My guess is the extra spaces on the LDAPMethod config line are not
> taken
> >     into account by my code.. (oops).  Just removing the LDAPMethod line
> >     will fix it (since there is only one option it just happens to be
> the
> >     default)
> >
> >     And, I never actually tested anonymous binding, so it may be broken.
> >     I'll have to check into that.
> >
> >
> >
> >
> > --
> > Regards,
> > -Rajesh
> >
> > "Stick to our roots and not to forget where we come from"
>



-- 
Regards,
-Rajesh

"Stick to our roots and not to forget where we come from"
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.danga.com/pipermail/djabberd/attachments/20071211/0e461a64/attachment.htm