iFolder on SUSE 11.1 and AD sync working....sort of

Skip Toolbar

Actions
- Access Control...
- Copy...

--Not rated--

1122 Visits 2 Replies

Randy Weeks

Sep 30, 2009 6:08 PM

22. iFolder on SUSE 11.1 and AD sync working....sort of

I am running openSUSE with iFolder and I was able to install iFolder just fine. After going through the simias, web and admin configs I am able to successfully login to the admin webpage, create users etc.

I then rerun the simias wizard and this time tell it to connect to my Active Directory LDAP server. Everything looks fine, it says it extended the AD schema etc but when I go into the admin page, I am unable to login with the iFolder admin user I specified. I specified the full user DN which is the same one I used as the LDAP admin so I know the DN works since the schema was extended successfully. The user in AD is called ifolderadmin. This is both the CN and UID as not to create any confusion. I tried logging in with my domain name prefixed by the username (domain\ifolderadmin) but still no love.

Has anybody else come across this and found a solution?

Thanks!

Replies(2)

Attachments(0)

Entry History

Tags

Ravi Kumar Manjunath

Oct 1, 2009 2:11 AM

22.1. Re: iFolder on SUSE 11.1 and AD sync working....sort of

Did you get a chance to look at this doc http://community.kablink.org:8080/ssf/a/c/p_name/ss_forum/p_action/1/action/view_permalink/entityType/folderEntry/entryId/3578 . It talks about integrating AD with iFolder

Mahabalesh Asundi

Oct 1, 2009 8:08 AM

22.2. Re: iFolder on SUSE 11.1 and AD sync working....sort of

Since i am not 100% sure what is the exact problem based on description mentioned, capturing some exact debug steps that you can use and resolve the problem,

Open simias.config file from your data path, check what attribute is set as login attribute, i.e. <setting name="NamingAttribute" value="cn" /> here CN is set as login attribute.
Run an ldapsearch command to get all user objects with all attribute details from AD server.
Now check, login attribute value associated with ifolderadmin user object. If it is same as the one you are using at the time of login, it should ideally allow you to login.
If the above is not resolving your issue, check if there are multiple users with the same login attribute value. In this case user object found later in LDAP sync will overwrite the initial user objects as both are having same login attribute value. Make sure there are not duplicate users with same login attribute value, clean the datapath and setup iFolder again. (This is a bug in 3.7.2 and already fixed in trunk)
If any of the above is not solving your problem, Replace "INFO" string to "DEBUG" in <DATAPATH>/Simias.log4net file and save the same. Restart apache, try and login to admin console, now open Simias.log from <DATAPATH>/log/Simias.log file and make sure ifolderadmin is getting synced properly.
There could be an issue with proxy user configured, so it is not syncing any user objects to iFolder, with debug log enabled, ifolder will log enough information to log file which you can use to zero in the problem and resolve the same.

I hope the above debug procedure will help you resolve the problem you are currently hitting. In case you have any other specific question in this regard let me know.

Skip Footer Toolbar

Permalink