Le 13/12/2016 à 08:07, Hasina Stella RASOMANANDRANTO a écrit :
Hi, I am new in synchronizing active directory to ldap in debian. I have set up a synchronization from Active Directory to ldap. I set up Sasl to get the password from Active Directory and testsaslauthd works well. Then I got the synchronized users successfully. But when I do a test with their passwords, the problem comes. I am pleased to be helped.
Here is my lsc.xml file.

        <dataset>
            <name>userPassword</name>
            <forceValues>
<string>"{SASL}" + srcBean.getDatasetFirstValueById("userPrincipalName")</string>
            </forceValues>
        </dataset>


Hi,

SASL passwords should be like: {SASL}user@realm

Update your dataset, for example:

<string>"{SASL}" + srcBean.getDatasetFirstValueById("userPrincipalName") + "@teknetgroup.mg"</string>

And follow this documentation to have OpenLDAP + SASL passwords working: http://ltb-project.org/wiki/documentation/general/sasl_delegation

--
Clément OUDOT
Consultant en logiciels libres, Expert infrastructure et sécurité
Savoir-faire Linux
137 boulevard de Magenta - 75010 PARIS
Blog: http://sflx.ca/coudot

_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
lsc-users@lists.lsc-project.org
http://lists.lsc-project.org/listinfo/lsc-users

Reply via email to