Re: auth works with cn=My Name but not with uid=myname

[Michael Ströder <michael@stroeder.com>]

Arne Schirmacher wrote:
> This is probably trivial but I can't figure it out:
> 
> my OpenLDAP entry has an attribute of cn=My Name, an attribute of uid=myname and a password.
> 
> I can successfully log in using JXplorer using
> 
> cn=My Name,ou=people,o=my company
> 
> but not using
> 
> uid=myname,ou=people,o=my company (error code 49 - Invalid Credentials)
> 
> However searching with that dn is successful and returns 1 entry, so the uid attribute is in fact there.

You have to simply use the DN of an existing entry within a simple bind
request. So if your entry looks like

dn: cn=My Name,ou=people,o=my company
objectClass: inetOrgPerson
cn: My Name
uid: myname

you have to use cn=My Name,ou=people,o=my company as bind-DN. Most
LDAP-enabled software which checks username/password with a simple bind
request first searches for the entry with filter (uid=username) and then
uses the DN of the entry found as bind-DN.

Ciao, Michael.

-- 
Michael Ströder
E-Mail: michael@stroeder.com
http://www.stroeder.com