Hi, I am using ClearOS since a few weeks.
My current goal is it to get control about the LDAP Server on my ClearOS Server to manage Authentifikations for other services and servers in my internal network.
I am not able to login with an LDAP account on any other platform, like PHPLDAPAdmin, NextCloud, or Rancher.
How could I do that?
I was able to connect PHPLDAPAdmin with the Dictionary Server but only as anonymous, but not with an priviligied account.
I hope someon could help me.
Thanks.
My current goal is it to get control about the LDAP Server on my ClearOS Server to manage Authentifikations for other services and servers in my internal network.
I am not able to login with an LDAP account on any other platform, like PHPLDAPAdmin, NextCloud, or Rancher.
How could I do that?
I was able to connect PHPLDAPAdmin with the Dictionary Server but only as anonymous, but not with an priviligied account.
I hope someon could help me.
Thanks.
Share this post:
Accepted Answer
It looks like you need to make a number of edits to /etc/phpldapadmin/config.php. The ones I've done are:
Also, and you've probably already done it, I had to edit /etc/httpd/conf.d/phpldapadmin.conf to allow LAN access and restart httpd.
to// $servers->setValue('server','host','127.0.0.1');
$servers->setValue('server','host','ldap://127.0.0.1')
to// $servers->setValue('server','port',389);
This may not be necessary as it could be default.$servers->setValue('server','port',389);
to// $servers->setValue('server','base',array(''));
This is your Base DN from the webconfig.$servers->setValue('server','base',array('dc=howitts,dc=co,dc=uk'));
to$servers->setValue('login','attr','uid');
// $servers->setValue('login','attr','uid');
Also, and you've probably already done it, I had to edit /etc/httpd/conf.d/phpldapadmin.conf to allow LAN access and restart httpd.
Responses (6)
-
Accepted Answer
How did you install phpLDAPAdmin Did you do it from the ClearOS repos? Also make sure you have the Directory Server app installed from the marketplace. Then, from the Directory Server use the Bind DN and Bind Password as your credentials in phpLDAPadmin.
ClearOS has Nextcloud available and already integrated with LDAP, if you want.
If you are connecting external machines to the ClearOS LDAP, from the Directory Server app, in the Policies panel, set the Publish Policy. Normally you'd choose LAN only. Connections are only allowed by LDAPS, so on port 636. There is an enhancement request to allow LDAP connections on 389, but it is not in the pipeline, yet. -
Accepted Answer
Thanks for this helpfull answer. Yes I've installed phpLDAPAdmin via "sudo yum -y install phpldapadmin" and the dictionary server is installed.
Configurations:
Publish Policy: Local Network
Accounts Access: Password Access (already tried Anonymous too)
I would like to use the LDAP server with other servers in my private network. I am running an Kubernetes Cluster orchistrated by Rancher behind ClearOS and I whant to make use of LDAP on some services.
I've configured phpLDAPAdmin and it is able to connect, but jus as anonymous user. I tried the bind DN and the bind password but I get the following errors:
Unable to connect to LDAP server Local LDAP Server
Error: Server is unwilling to perform (53) for login
error Authentication failed with server
Invalid username or invalid password.
I am very frustrated because I have been trying for days but without success. -
Accepted Answer
-
Accepted Answer
-
Accepted Answer
-
Accepted Answer
Because it is a long-standing feature request to also allow access (Publish Policies) on port 389 (ldap:// as opposed to ldaps:// on 636), I had a look at it and had the basic mods worked out and tested in an hour and a quarter. It means updating 3 packages. I've done 2 and the third is ready to build. I'll have a go at that tomorrow as the build system was misbehaving today.
Please login to post a reply
You will need to be logged in to be able to post a reply. Login using the form on the right or register an account if you are new here.
Register Here »