Glad it worked :) On Thu, May 27, 2021 at 10:23 PM Michael BC <[email protected]> wrote:
> Thank you, another user reached out. > > It turned out that my userid attribute needed to be "userPrincipalName" to > work within the environment. > > > > On Thu, May 27, 2021, 7:16 AM Karam Qubsi <[email protected]> > wrote: > >> Hello Michael, >> >> if your users will insert usernames as *firstname.lastname* in koha, and >> you need to match it as [email protected] in your ldap server >> then you need to update your config like this : >> <principal_name>%[email protected]</principal_name> >> >> Hope this can help >> Best wishes >> >> On Wed, May 26, 2021 at 10:44 PM Michael BC <[email protected]> wrote: >> >>> I've tried searching the archives and can't seem to find the answer. When >>> we use a correct username/password, the login page generates a Software >>> Error: >>> >>> LDAP search failed to return object : 0000208F: LdapErr: DSID-0C090AC0, >>> comment: Error processing name, data 0, v3839 at >>> /usr/share/koha/lib/C4/Auth_with_ldap.pm line 97. >>> >>> Our conf file is set up like this: >>> >>> <useldapserver>1</useldapserver> >>> <ldapserver id="ldapserver" listenref="ldapserver"> >>> <hostname>ldaps://ldap.azag.gov</hostname> >>> <base>"OU=XX,DC=XXXX,DC=XXX"</base> >>> <user>ldapauth</user><!-- DN, if not anonymous --> >>> <pass>XXXXXX</pass> <!-- password, if not anonymous --> >>> <replicate>1</replicate> <!-- add new users from LDAP to Koha >>> database --> >>> <update>1</update> <!-- update existing users in Koha >>> database >>> --> >>> <auth_by_bind>1</auth_by_bind> <!-- set to 1 to authenticate by binding >>> instead of password comparison, e.g., to use A$ --> >>> <anonymous_bind>0</anonymous_bind> >>> <principal_name>%s</principal_name> >>> <mapping> <!-- match koha SQL field names to your LDAP >>> record >>> field names --> >>> <userid is="sAMAccountName"></userid> >>> <password is="userpassword"></password> >>> <firstname is="givenname"></firstname> >>> <surname is="sn"></surname> >>> <branchcode is="">XXXX</branchcode> >>> <categorycode is="">PT</categorycode> >>> <email is="mail"></email> >>> </mapping> >>> </ldapserver> >>> >>> When logging in, we have to use "[email protected]" instead of just >>> "username". However, our emails are formatted >>> "[email protected]". >>> I thought this might be the reason it's generating the error, but I'm not >>> sure how to change the config file to reflect that. Or if I need to >>> change >>> the auth_with_ldap file. >>> >>> Thanks, >>> Michael >>> _______________________________________________ >>> >>> Koha mailing list http://koha-community.org >>> [email protected] >>> Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha >>> >> >> >> -- >> *Karam Qubsi* >> > -- *Karam Qubsi* _______________________________________________ Koha mailing list http://koha-community.org [email protected] Unsubscribe: https://lists.katipo.co.nz/mailman/listinfo/koha

