Hi Ceri,

Sorry about the delayed response.

I think the problem could be related to the user objects in the LDAP directory. SGD has a strict rule to identify which LDAP objects are genuinely LDAP users. Can you confirm whether (or not) your user objects match the following ldap filter:

"(|(objectclass=user)(objectclass=person)(uid=*))"

Thanks,

-- DD

Ceri Davies wrote:
No ideas?

I wonder if, as a workaround, I can configure Solaris to use LDAP for
authentication and have SGD treat the accounts as UNIX accounts?

Still can't see why this (and apparently only this) is failing.

Ceri

On Wed, Dec 03, 2008 at 11:25:54AM +0000, Ceri Davies wrote:
OK, thanks very much.  I've attached the ldap.log, plus the
jserver24194_error.log log file.

There are a couple of errors related to, I think, password expiry but
they don't look relevant.  The server finished starting up at 10:40:53,
and I logged in as an LDAP user at 10:41:22.

The login is successful, the user just doesn't get any Applications
assigned.

Ceri

On Wed, Dec 03, 2008 at 07:57:49AM +0000, Deany Dean wrote:
Hi Ceri,

I think we need a bit more information from your SGD server. Could you enable LDAP logging and provide us with any errors or odd log entries that you see or if you're unsure about what's there, attach the entire log file to the post (I recommend compressing the content for the sake of the users of this mailing list :)).

To enable ldap logging use the following log filter (in the Admin Console->Global Settings->Monitoring):

server/login/*:ldap.log
server/ldap/*:ldap.log

The logging will be placed in a file called ldap.log in /opt/tarantella/var/log. To give us the best idea about what is happening, restart the server and then try to login as an LDAP user.

------------------------------------------------------------------------

_______________________________________________
SGD-Users mailing list
SGD-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sgd-users

_______________________________________________
SGD-Users mailing list
SGD-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sgd-users

Reply via email to