I am unable to authenticate with AD. The username and password work outside of this. Can I get some pointers?
Error:
SQL[SET NAMES ‘utf8’]
SQL[SET CHARACTER SET ‘utf8’]
SQL[SET COLLATION_CONNECTION = ‘utf8_unicode_ci’]
SQL[SELECT config_name,config_value FROM config]
SQL[SELECT * FROM graph_types]
SQL[SELECT DISTINCT(os) FROM devices]
SQL[DELETE FROM session WHERE session_expiry < ‘1521750568’]
Authentication Method: active_directory
ldap_url_parse_ext(ldap://localhost/)
ldap_init: trying /etc/ldap/ldap.conf
ldap_init: using /etc/ldap/ldap.conf
ldap_init: HOME env is /root
ldap_init: trying /root/ldaprc
ldap_init: trying /root/.ldaprc
ldap_init: trying ldaprc
ldap_init: LDAPCONF env is NULL
ldap_init: LDAPRC env is NULL
ldap_create
ldap_url_parse_ext(ldaps://ldap.server.com:3269)
ldap_sasl_bind_s
ldap_sasl_bind
ldap_send_initial_request
ldap_new_connection 1 1 0
ldap_int_open_connection
ldap_connect_to_host: TCP ldap.server.com:3269
ldap_new_socket: 4
ldap_prepare_socket: 4
ldap_connect_to_host: Trying 8.8.8.8:3269
ldap_pvt_connect: fd: 4 tm: 1 async: 0
ldap_ndelay_on: 4
attempting to connect:
connect errno: 115
ldap_int_poll: fd: 4 tm: 1
ldap_is_sock_ready: 4
ldap_ndelay_off: 4
ldap_pvt_connect: 0
ldap_open_defconn: successful
ldap_send_server_request
ldap_result ld 0x558390e00db0 msgid 1
wait4msg ld 0x558390e00db0 msgid 1 (infinite timeout)
wait4msg continue ld 0x558390e00db0 msgid 1 all 1
** ld 0x558390e00db0 Connections:
- host: ldap.server.com port: 3269 (default)
refcnt: 2 status: Connected
last used: Thu Mar 22 13:29:28 2018
** ld 0x558390e00db0 Outstanding Requests:
- msgid 1, origid 1, status InProgress
outstanding referrals 0, parent count 0
ld 0x558390e00db0 request count 1 (abandoned 0)
** ld 0x558390e00db0 Response Queue:
Empty
ld 0x558390e00db0 response count 0
ldap_chkResponseList ld 0x558390e00db0 msgid 1 all 1
ldap_chkResponseList returns ld 0x558390e00db0 NULL
ldap_int_select
read1msg: ld 0x558390e00db0 msgid 1 all 1
read1msg: ld 0x558390e00db0 msgid 1 message type bind
read1msg: ld 0x558390e00db0 0 new referrals
read1msg: mark request completed, ld 0x558390e00db0 msgid 1
request done: ld 0x558390e00db0 msgid 1
res_errno: 49, res_error: <80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 52e, v2580>, res_matched: <>
ldap_free_request (origid 1, msgid 1)
ldap_parse_result
ldap_msgfree
ldap_err2string
ldap_err2string
Invalid credentials
AD bind failed for user user@DOMAIN. Check $config[‘auth_ad_binduser’] and $config[‘auth_ad_bindpassword’] in your config.php
Could not bind to AD, you will not be able to use the API or alert AD users
CONFIG:
$config[‘auth_mechanism’] = “active_directory”;
$config[‘auth_ad_url’] = “ldaps://ldap.server.com:3269”; // you can add multiple servers, separated by a space
$config[‘auth_ad_domain’] = “DOAMIN”;
$config[‘auth_ad_base_dn’] = “dc=ad,dc=server,dc=com”; // groups and users must be under this dn
$config[‘auth_ad_check_certificates’] = false; // require a valid ssl certificate
$config[‘auth_ad_binduser’] = ‘user’;
$config[‘auth_ad_bindpassword’] = ‘pass’;
$config[‘auth_ad_timeout’] = 5; // time to wait before giving up (or trying the next server)
$config[‘auth_ad_debug’] = true; // enable for verbose debug messages
$config[‘active_directory’][‘users_purge’] = 30; // purge users who haven’t logged in for 30 days.
$config[‘auth_ad_require_groupmembership’] = 0; // require users to be members of a group listed below
$config[‘auth_ad_groups’][‘Team,OU=Engineering,OU=Distribution Groups’][‘level’] = 10;
$config[‘auth_ad_groups’][‘All_Team,OU=Groups’][‘level’] = 7;
$config[‘auth_ad_user_filter’] = “(&(objectClass=person)(objectclass=user))”;
$config[‘auth_ad_group_filter’] = “(&(groupType=-2147483640 )(objectclass=group))”;
$config[‘auth_ad_check_certificates’] = 0;