Nuxeo with Active Directory server not authenticating.

Nuxeo with open ldap worked fine having accounts at say for example ou=people,dc=united,dc=com and users under that. We tried to switch to Active Directory now where the accounts are at u=users,ou=united,ou=Customers,dc=cust,dc=jeppsvc,dc=com by modifying the ldap-users xml configuration as follows. Authentication is not working any more.

Putting only relevant content from the ldap-users xml file.


  <fieldMapping name="username">uid</fieldMapping>
  <fieldMapping name="password">userPassword</fieldMapping>
  <fieldMapping name="firstName">givenName</fieldMapping>
  <fieldMapping name="lastName">sn</fieldMapping>
  <fieldMapping name="company">o</fieldMapping>
  <fieldMapping name="email">mail</fieldMapping>

Is there anything missing that is needed for nuxeo to work with Active Directory Server ?

0 votes

2 answers



The ldif snippet is here

dn: CN=John Doe,OU=users,OU=united,OU=Customers,DC=cust,DC=jeppsvc,DC=com
changetype: add
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
objectClass: inetOrgPerson
cn: John Doe
sn: Doe
o: United Airlines
givenName: John
 CN=John Doe,OU=users,OU=united,OU=Customers,DC=cust,DC=jeppsvc,DC=com
instanceType: 4
whenCreated: 20120330173209.0Z
whenChanged: 20120330174747.0Z
displayName: John Doe
uSNCreated: 2082020
uSNChanged: 2082127
name: John Doe
objectGUID:: uMlpRneR/USvZn5TcgH1Ag==
userAccountControl: 512
codePage: 0
countryCode: 0
pwdLastSet: 129776025696024307
primaryGroupID: 513
accountExpires: 9223372036854775807
sAMAccountName: jdoe
sAMAccountType: 805306368
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=jeppsvc,DC=com
dSCorePropagationData: 16010101000000.0Z
lastLogonTimestamp: 129776032053529947

Added bindDn and bindPassword and it all works now. Thanks

0 votes

Have you turned on debug and looked in the server log?

Not included in above but are you sure that your bindDn and bindPassword are working for the specified ldapUrl? Should see this in the log.

0 votes

No problem - changed the comment to an answer since it was bindDn and and bindPassword.