No of visitors who read this post: 1017
Type: Question
Author: Winnie zac
No votes yet

Hello Techyv buddies!

I've been receiving issues with the authentication of my LDAP. I am finding a resolution on the web but I didn't find anything that will help. The error I am receiving is stated below:

Binding with DN for non-anonymous search (cn=public-ldap,ou=Garda1UserTS,ou=service accounts,dc=garda1,dc=tlc). Using password entered in the form. Binding with DN for non-anonymous search (cn=public-ldap,ou=Garda1UserTS,ou=service accounts,dc=garda1,dc=tlc). Using password entered in the form. Failed to bind to server. ldap error #49 Invalid credentials

Following is the configuration of my LDAP:

sid = garda1pdc
name = garda1pdc
status = 1
ldap_type = ad
address = 192.168.21.1
port = 389
tls = 0
bind_method = 1
basedn = Array ( )
binddn = cn=public-ldap,ou=Garda1UserTS,ou=service accounts,dc=garda1,dc=tlc user_dn_expression =
user_attr = sAMAccountName
mail_attr = mail
mail_template =
unique_persistent_attr = objectsid
allow_conflicting_drupal_accts = 0
ldap_to_drupal_user =
testing_drupal_username = public-ldap
group_object_category =
search_pagination = 0
search_page_size = 1000
 

Can someone please provide a solution for this?

I would appreciate it.

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

# Comment Id: 80070

Hello Winnie,

The problem is occurring because the service account that is running LDAPUpdateService service has got no permissions that are required to access one of the LDAP domains that IM Manager has been configured to synchronize with.

To resolve it, you will need to use the following workarounds:

You can use two methods to configure LDAPUpdateService service so that it cab be able to connect to LDAP domains IM Manager that it has been setup to synchronize with.

  1. can use make use of a service account which has got access to all LDAP Domains IM Manager connects to or
  2. You can use a User Distinguished Name for every LDAP Server configuration.

Service account

  1. You will need to open Computer Services by going to Start and thenRun, and then typeservices.mscand click OK.
  2. Go to Services panel and then find the LDAPUpdateService. You will need to right click it and then go to Properties.
  3. At  Log On tab, you will need to configure This account to become a  service account that can be able to access all of the Domains IM Manager is set up to connect to.
  4. After that click OK, and then restart the LDAPUpdateService service.

User Distinguished Name

  1. First you will open the IM Manager Administrator Web UI.
  2. And then go to Settings and thenLDAP Directory Integration followed byConfiguration.
  3. Use the dropdown box to choose Select Server for LDAP Configuration.
  4. And then at Connection Parameters, you will need to enter User Distinguished Name, User Password and Port Number of the account that has got access to this LDAP server.
  5. After that click Submit, and then restart LDAPUpdateService service.

Regards,

Carl