[racktables-users] Re: how to enable ad ldap

  • From: Aaron Dummer <aaron@xxxxxxxxxxx>
  • To: racktables-users@xxxxxxxxxxxxx
  • Date: Sun, 29 Sep 2013 12:01:42 -0500

Have you created the corresponding users within racktables?

When using LDAP, you don't need to create users in RackTables, you only need to grant them permissions.

For example, to allow all members of the 'rt-users' group, add this line to Configuration -> Permissions:

allow {$lgcn_rt-users}

Also, I see your search_bind parameters are commented out. If your AD server denies anonymous binding, those parameters are required.

This config works with a Windows 2008 R2 Active Directory server:

$LDAP_options = array
(
  'server' => 'ad1.mydomain.local',
  'search_attr' => 'sAMAccountName',
  'search_dn' => 'DC=mydomain,DC=local',
  'search_bind_rdn' => 'racktables',
  'search_bind_password' => 'secret',
  'displayname_attrs' => 'givenname sn',
'options' => array (LDAP_OPT_PROTOCOL_VERSION => 3, LDAP_OPT_REFERRALS => 0),
);

--
Aaron Dummer


Other related posts: