Hi Dean,

That's OK.  Our user objects do indeed match that filter.

Ceri

On Fri, Dec 12, 2008 at 12:41:38PM +0000, Deany Dean wrote:
> Hi Ceri,
> 
> Sorry about the delayed response.
> 
> I think the problem could be related to the user objects in the LDAP 
> directory. SGD has a strict rule to identify which LDAP objects are 
> genuinely LDAP users. Can you confirm whether (or not) your user objects 
> match the following ldap filter:
> 
> "(|(objectclass=user)(objectclass=person)(uid=*))"
> 
> Thanks,
> 
> -- DD
> 
> Ceri Davies wrote:
> > No ideas?
> >
> > I wonder if, as a workaround, I can configure Solaris to use LDAP for
> > authentication and have SGD treat the accounts as UNIX accounts?
> >
> > Still can't see why this (and apparently only this) is failing.
> >
> > Ceri
> >
> > On Wed, Dec 03, 2008 at 11:25:54AM +0000, Ceri Davies wrote:
> >   
> >> OK, thanks very much.  I've attached the ldap.log, plus the
> >> jserver24194_error.log log file.
> >>
> >> There are a couple of errors related to, I think, password expiry but
> >> they don't look relevant.  The server finished starting up at 10:40:53,
> >> and I logged in as an LDAP user at 10:41:22.
> >>
> >> The login is successful, the user just doesn't get any Applications
> >> assigned.
> >>
> >> Ceri
> >>
> >> On Wed, Dec 03, 2008 at 07:57:49AM +0000, Deany Dean wrote:
> >>     
> >>> Hi Ceri,
> >>>
> >>> I think we need a bit more information from your SGD server. Could you 
> >>> enable LDAP logging and provide us with any errors or odd log entries 
> >>> that you see or if you're unsure about what's there, attach the entire 
> >>> log file to the post (I recommend compressing the content for the sake 
> >>> of the users of this mailing list :)).
> >>>
> >>> To enable ldap logging use the following log filter (in the Admin 
> >>> Console->Global Settings->Monitoring):
> >>>
> >>> server/login/*:ldap.log
> >>> server/ldap/*:ldap.log
> >>>
> >>> The logging will be placed in a file called ldap.log in 
> >>> /opt/tarantella/var/log. To give us the best idea about what is 
> >>> happening, restart the server and then try to login as an LDAP user.
> >>>       
> >
> >   
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > SGD-Users mailing list
> > SGD-Users@filibeto.org
> > http://www.filibeto.org/mailman/listinfo/sgd-users
> >   
> 
> _______________________________________________
> SGD-Users mailing list
> SGD-Users@filibeto.org
> http://www.filibeto.org/mailman/listinfo/sgd-users

-- 
That must be wonderful!  I don't understand it at all.
                                                  -- Moliere

Attachment: pgpNS2daLjGc7.pgp
Description: PGP signature

_______________________________________________
SGD-Users mailing list
SGD-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sgd-users

Reply via email to