A possible solution to Astaro's SSO AD shortcomings - Page 2

BAlfson · #11 (**permalink**) 10-30-2008, 04:36 AM

Send me an email, BAlfson at MediaSoftUSA dot com, and I'll send you the document I recently wrote to help clients set up the User Portal with AD. It describes what you need. I'm just asking that you critique the document to help me improve it.

Thanks - Bob

William · #12 (**permalink**) 10-30-2008, 09:26 PM

Bind User DN:

Bind User Password:

Repeat:

Test Server

Base DN:

This form configures Active Directory authentication. You need to specify at least Server and Port.

so what goes in the base dn section? I'm pretty sure i ahve the user dn setup right..

BAlfson · #13 (**permalink**) 10-30-2008, 10:04 PM

I didn't receive an email. Here's an extract from my document:

Quote:

I. Determine from Windows Server the DN for the binding user and for the Base DN

If you pick a user with administrative rights, you will be able to configure either or both LDAP and AD. You will need the full, exact Distinguished Name (DN) for the Astaro to be able to work with AD or LDAP services.

Open a Command Prompt on the server running the AD services. In my case, I have a separate login for me when I want to be an administrator, bob2, so I ran the following command:

dsquery user –name b*

Among the responses was the one I was looking for:

“CN=bob2,OU=SBSUsers,OU=Users,OU=MyBusiness,DC=Our domain,DC=local”

Because I want to be able to use pre-existing AD groups to fine-tune the HTTP Proxy and to limit use of the Portal to select users, I’ll set the Base DN for my AD as:

“OU=MyBusiness,DC=Ourdomain,DC=local”

Cheers - Bob

cbarr221 · #14 (**permalink**) 06-25-2009, 09:11 PM

I'm having the same issue. My user is in the Default Users Group but when I click "Test Sever" I get the error message.

Server exists and accepts connections, but bin to ldaps://[serverip] failed with Bind DN and password.

I know the password is correct.

Bind User DN: CN=A****,OU=Users,DC=[domain],DC=local

Base DN: DC=[domain],DC=local

BAlfson · #15 (**permalink**) 06-26-2009, 02:52 AM

Before you hit [Test Server], you must press [Apply].

I made that mistake several times before I figured out they thought nobody could be so foolish...

Cheers - Bob

groveraus · #16 (**permalink**) 11-28-2009, 10:58 AM

BAlfson,
I used your method as outlined in #13 and it worked a real treat for me. It was almost identical as your example was for a SBS AD which is what I run.
Thanks, that took the headache out of configuring AD for Astaro.