Howdy,
It should be after authentication by the master account for it. This is the snippet of our settings.
//$config[‘auth_mechanism’] = ‘ldap’;
$config[‘auth_ldap_version’] = 3; # v2 or v3
$config[‘auth_ldap_server’] = ‘205.234.124.174’;
$config[‘auth_ldap_port’] = 389;
$config[‘auth_ldap_prefix’] = ‘uid=’;
$config[‘auth_ldap_suffix’] = ‘,cn=Staff,dc=micfo,dc=com’;
$config[‘auth_ldap_group’] = ‘cn=groupname,ou=Groups,dc=micfo,dc=com’;
$config[‘auth_ldap_groupbase’] = ‘ou=Groups,dc=micfo,dc=com’;
$config[‘auth_ldap_groups’][‘configadmins’][‘level’] = 10;
$config[‘auth_ldap_groups’][‘netadmins’][‘level’] = 7;
$config[‘auth_ldap_groups’][‘employee’][‘level’] = 5;
$config[‘auth_ldap_groupmemberattr’] = ‘memberUid’;
$config[‘auth_ldap_uid_attribute’] = ‘uidNumber’;
$config[‘auth_ldap_binddn’] = ‘cn=Manager,dc=micfo,dc=com’;
$config[‘auth_ldap_bindpassword’] = ‘xxxxxxxxxxxxxxx’;
And here is the access ACL for the LDAP:
dn: olcDatabase={2}hdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {2}hdb
olcDbDirectory: /var/lib/ldap
olcSuffix: dc=micfo,dc=com
olcAccess: {0}to attrs=userPassword,shadowLastChange by self write by dn=“cn
=admin,dc=micfo,dc=com” write by anonymous auth by * none
olcAccess: {1}to * by self write by dn=“cn=admin,dc=micfo,dc=com” write by *
none
olcRootDN: cn=Manager,dc=micfo,dc=com
olcRootPW:: Commented Out
olcDbCheckpoint: 512 30
olcDbConfig: {0}set_cachesize 0 2097152 0
olcDbConfig: {1}set_lk_max_objects 1500
olcDbConfig: {2}set_lk_max_locks 1500
olcDbConfig: {3}set_lk_max_lockers 1500
olcDbIndex: objectClass eq,pres
olcDbIndex: ou,cn,mail,surname,givenname eq,pres,sub
olcDbIndex: uid eq
olcDbIndex: memberOf eq
olcDbIndex: entryCSN eq
olcDbIndex: entryUUID eq
structuralObjectClass: olcHdbConfig
So as you can see, it have read access rights to go though the subtree for it with authentication. However, I have noted that when I tested it using the auth_test.php -l it lists all the users in the Staff Subtree properly but everytime i try to test the user authentication, it fails saying invalid pass for any of the acconuts.