LDAP Configuration Error

Started by Imad, December 11, 2014, 07:37:26 PM

Previous topic - Next topic

Imad

Hey,

i installed netxms server V 1.2.16 on windows server 2012R2.
i'm trying to make LDAP configuration and when trying to check the debug log on server command it crashed due to connection with netxms server lost as follow

eventually LDAP configuration was not enabled and i couldnt use any LDAP user able to connect netxms server.
i used the following configuration:

LdapConnectionString   ldap://10.37.2.77:389   No
LdapGroupClass   group   No
LdapMappingDescription   description   No
LdapMappingFullName   displayName   No
LdapMappingName   displayName   No
LdapSearchBase   OU=Domainusers,DC=babtest,DC=com   No
LdapSearchFilter   (objectClass=*)   No
LdapSyncInterval   1440   No
LdapSyncUser      No
LdapSyncUserPassword      No
LdapUserClass   displayName   No
LdapUserDeleteAction   0   No




is there any missing configuration that need to fill and preventing the netxms server to crash ?

Regards,
Imad.

Tatjana Dubrovica

In your configuration you miss:
LdapSyncUser     
LdapSyncUserPassword     

I recommend you to update NetXMS till latest version. Because there are known issues in ldap:
1.2.16 has bug with assigning rights to ldap users
1.2.17 does not implement paging(affects if you try to get more than 1000 users)

If it is possible please enable crash dump and send it to me. I'll try to analyze it.
Instruction about enabling crash dump:
http://msdn.microsoft.com/en-us/library/windows/desktop/bb787181%28v=vs.85%29.aspx

Imad

#2
thank you for the reply,
after updating the missing parameters as below, netxms didn't crash however it keeps showing the following:

[DEBUG] LDAPConnection::initLDAP(): Connecting to LDAP server
[DEBUG] LDAPConnection::loginLDAP(): LDAP could not login. Error Code: Server Down


i made sure there is no firewall blocking connection between LDAP server and Netxms Server

the following is my server configuration parameters:

LdapConnectionString,   ldap://10.37.2.77:389
LdapGroupClass,   BABTest\<group>
LdapMappingDescription,   description
LdapMappingFullName,   displayName
LdapMappingName,   displayName
LdapSearchBase,   CN=BABTest\Monitor,OU=Service Accounts,OU=BAB,OU=Domainusers,DC=BABTest,DC=com
LdapSearchFilter,   (objectClass=*)
LdapSyncInterval,   1440
LdapSyncUser,   BABTest\<username>
LdapSyncUserPassword,   ****
LdapUserClass,   c901076
LdapUserDeleteAction,   0



could you please notify if there is still anything missing?
i tried several changes in the parameters without any luck

Regards,
Imad.

Tatjana Dubrovica

Bug found. Will be fixed in next release 2.0-M2