Thanks Martin. I am indeed using that syntax. The interesting thing is that I'm getting a user and group list from my AD, but it won't authenticate. I'm not sure if it's not binding with the read only principal, and the server log file is not helpful.
Jeff -----Original Message----- From: Martin Kreiner [mailto:[email protected]] Sent: Tuesday, July 20, 2010 11:32 AM To: [email protected] Subject: Re: [openthinclient-user] More on LDAP > Active Directory integration hi jeff, Please make sure you are using the following syntax for the "Read only principal": usern...@domainname FullUserDN or DomainName\UserName as "Read only principal" could cause trouble on client side. cheers, martin Am 15.07.2010 19:04, schrieb Jeff Sears: > Ok, so here's the deal. If I use an LDAP browser (in this case Softerra > LDAP Browser 2.6), I can connect just fine to my Active Directory and > browse all users and groups just fine. If I put the same information in > the LDAP secondary directory settings for OTC, the user and group list > populates just fine. If I try to log in from a thin client, it fails, > and the server log displays: > > pam_ldap: ldap_search_s Operations error > > ERROR [syslog.daemon] gdm[8008]: Couldn't authenticate user > > I am using the server's IP address as recommended in the OTC > documentation. Any ideas? > > *Jeff Sears* > Information Technology > San Joaquin Delta College > > 209-954-5300 Main > 209-954-5795 Direct > 209-954-3730 Fax > > > > -------------------------------------------------------------------------- ---- > This SF.net email is sponsored by Sprint > What will you do first with EVO, the first 4G phone? > Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first > > > > _______________________________________________ > The Open Source Thin Client Solution http://openthinclient.org > [email protected] > https://lists.sourceforge.net/lists/listinfo/openthinclient-user -------------------------------------------------------------------------- ---- This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first _______________________________________________ The Open Source Thin Client Solution http://openthinclient.org [email protected] https://lists.sourceforge.net/lists/listinfo/openthinclient-user ------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first _______________________________________________ The Open Source Thin Client Solution http://openthinclient.org [email protected] https://lists.sourceforge.net/lists/listinfo/openthinclient-user
