2012/6/19 wrynux <[email protected]>:
> Hi,
>
> I'm configuring SSP with an Active Directory 2008 R2 but during the
> registration step, the "Your answer has not been registered" warning message
> was displayed.
>
> ---------------
> config.inc.php
> ---------------
> $ldap_url = "ldaps://xxxxxxxxxxxxxx";
> $ldap_binddn = "[email protected]";
> $ldap_bindpw = "xxxxxxxxx";
> $ldap_base = "cn=Users,dc=xxxxx$ad_mode = true;xx,dc=xxxxxxxxl";
> $ldap_filter =
> "(&(objectClass=user)(sAMAccountName={login})(!(userAccountControl:1.2.840.113556.1.4.803:=2)))";
> $ad_mode = true;
> $ad_options['force_unlock'] = true;
> $ad_options['force_pwd_change'] = true;
> $samba_mode = false;
> $shadow_options['update_shadowLastChange'] = false;
> $hash = "clear";
> $pwd_min_length = 0;
> $pwd_max_length = 0;
> $pwd_min_lower = 0;
> $pwd_min_upper = 0;
> $pwd_min_digit = 0;
> $pwd_min_special = 0;
> $pwd_special_chars = "^a-zA-Z0-9";
> $pwd_no_reuse = true;
> $pwd_complexity = 0;
> $pwd_show_policy = "never";
> $who_change_password = "manager";
> $use_questions = true;
> $answer_objectClass = "extensibleObject";
> $answer_attribute = "info";
> $use_tokens = true;
> $crypt_tokens = true;
> $token_lifetime = "3600";
> $mail_attribute = "mail";
> $mail_from = "[email protected]";
> $notify_on_change = true;
> $show_help = true;
> $lang ="en";
> $logo = "style/ltb-logo.png";
> $debug = true;
> $keyphrase = "secret";
> $reset_request_log = "/var/log/self-service-password";
> $use_recaptcha = false;
> $recaptcha_publickey = "";
> $recaptcha_privatekey = "";
> $recaptcha_theme = "white";
>
> --------------
> ldap.conf
> --------------
>
> The Administrator account was succesfully logged and the 636 port is open on
> the AD server.
>
> Do you have ideas about this?

These settings are for OpenLDAP :

> $answer_objectClass = "extensibleObject";
> $answer_attribute = "info";

Try to find suitable objectClass and attribute for AD. For example
"person" and "description" ?

Clément.
_______________________________________________
ltb-users mailing list
[email protected]
http://lists.ltb-project.org/listinfo/ltb-users

Reply via email to