Re: ldap query filter

2013-08-20 Thread Kirk Jantzer
Not that I doubted you, but I had to check for myself- I removed the network domain from the accounts and they were able to login fine. Regards, Kirk Jantzer http://about.met/kirkjantzer On Tue, Aug 20, 2013 at 3:41 PM, Ian Duffy wrote: > From what I recall of code that I browsed through the

Re: ldap query filter

2013-08-20 Thread Ian Duffy
>From what I recall of code that I browsed through the "network domain" field is not read during the LDAP authentication phase. On 20 August 2013 20:27, Kirk Jantzer wrote: > To add, if root/user1 and root/mydomain/user1 have the network domain > credentials set, they should look in ldap, right

Re: ldap query filter

2013-08-20 Thread Kirk Jantzer
To add, if root/user1 and root/mydomain/user1 have the network domain credentials set, they should look in ldap, right?? Regards, Kirk Jantzer http://about.met/kirkjantzer On Tue, Aug 20, 2013 at 3:21 PM, Ian Duffy wrote: > > > > ROOT/user1 is able to authenticate as ROOT/MYDOMAIN/user1 usin

Re: ldap query filter

2013-08-20 Thread Ian Duffy
> > ROOT/user1 is able to authenticate as ROOT/MYDOMAIN/user1 using ldap > password. Interesting never thought of that possibility. This is partially due to the nature of how Cloudstack's authentication engine works. So what happens is when you attempt to login your username/password is passed d