Hi technical,
I hit a problem during configure proxy to AD.
I can run command:
$ldapsearch -x -h localhost -LLL -b dc=mydomain,dc=local -D cn=open,cn=users,dc=mydomain,dc=local -W "(cn=open1)" cn sAMAccountName
which return the SAMACCOUNTNAME:open successfully. --- This may mean the proxy works well.
But if I run command with out –D -D cn=open,cn=users,dc=mydomain,dc=local. The search will failed.
when I try to login my client machine with AD user. It always failed. --- I can login with openldapuser successfully.
I think I need some configuration to force the –D in slapd.con.
Is there any problems with my slapd.conf? Or any trouble shooting comments? Appreciate it very much.
Below is my slapd.conf:
#######################################################################
# database definitions
#######################################################################
database ldap
suffix "DC=mydomain,DC=local"
uri ldap://dc-ad.mydomain.local/
chase-referrals no
rebind-as-user yes
idassert-bind bindmethod=simple
binddn="CN=open,OU=users,DC=mydomain,DC=local"
credentials=open
mode=none
flags=non-prescriptive
idassert-authzFrom "*"
Thanks,
Leo