Problem with LDAP

Post here for help with installing or upgrading mojoPortal pre-compiled release packages. When posting in this forum, please provide all relevant details. You may also want to review the installation or upgrading documentation.

If you have questions about using the source code or working with mojoPortal in Visual Studio, please post in the Developer forum.

Post here for help with installation of mojoPortal pre-compiled release packages

When posting in this forum, please try to provide as many relevant details as possible. Particularly the following:

  • What operating system were you running when the bug appeared?
  • What database platform is your site using?
  • What version of mojoPortal are you running?
  • What version of .NET do you use?
  • What steps are necessary to reproduce the issue? Compare expected results vs actual results.

You may also want to review the installation or upgrading documentation.

If you have questions about using the source code or working with mojoPortal in Visual Studio, please post in the Developer forum.

This thread is closed to new posts. You must sign in to post in the forums.
11/13/2008 7:37:44 AM
Gravatar
Total Posts 8

Problem with LDAP

I install mojoportal and it works properly.

Now I'm trying to use LDAP authentication, but I don't succeed to connect mojoportal to openldap: I obtain only a generic "Could not bind to the LDAP settings as entered or could not bind your credentials in the LDAP directory. If the site allowed you to make this change you would be locked out after the next time you log out of the site. Please make sure the LDAP server is accessible and edit your user profile so that your UserID matches a record in LDAP and enter your LDAP user password."

I'm using mojoportal 2.2.7.3 with pgsql database on windows 2003 Server, IIS 6 and OpenLDAP for Windows.

This is the configuration I used:
Use LDAP for Authentication?: Yes
Your LDAP user password.(Not stored just used to test connection on save): MY_LDAP_PASSWORD (rootpw)
Automatically Add LDAP users on first login?: Yes
Enter the Hostname of the LDAP Server: localhost (but I try also the alias annd the ip)
Enter the Port Number of the LDAP Server: 389
LDAP Domain: dc=domain_name,dc=it
Enter the Root DN for User Authentication:cn=Manager,dc=domain_name,dc=it
LDAP User DN Key: UID (OpenLDAP)

What can I do?

Thanks

 

11/13/2008 7:43:16 AM
Gravatar
Total Posts 18439

Re: Problem with LDAP

Sorry, but I don't have any easy answer for you.

I would look in the mojoportal log and see if any helpful info there. If you have a dev machine that can access the ldap machine I would try stepping through the code and see whats happening.

Best,

Joe

11/13/2008 7:45:42 AM
Gravatar
Total Posts 8

Re: Problem with LDAP

I forgot to say that I create in mojoportal one admin named Manager and with the same password of openldap Manager...

11/13/2008 8:16:50 AM
Gravatar
Total Posts 8

Re: Problem with LDAP

In the log I see nothing... The only error is that I wrote up.

If You want I can grant You access to our openldap server so You can see the problem: in this case send me Your IP adress so I can open the port for you..

11/14/2008 2:43:46 AM
Gravatar
Total Posts 8

Re: Problem with LDAP

any help?

11/14/2008 3:44:03 AM
Gravatar
Total Posts 18439

Re: Problem with LDAP

Sorry, all I can tell you is it worked for me testing with OpenLDAP running on SLES9. Its not easy figuring out the correct settings depending on how your ldap directory is structured. If you get it right it should work. I am no LDAP expert by any means and I am too busy with my own work to try and solve this problem for you.

Best,

Joe

11/14/2008 4:23:16 AM
Gravatar
Total Posts 8

Re: Problem with LDAP

Ok... I will try to make it works... Or if it's possible to use another sistem...

I must create a multilingual site: italian and english: the two sites have the same content (in different language), and they must have the same users: one user can log in each site without problems. I think to use ldap to have the user synchronized between the two sites... There is another solution?

Thank You.

11/14/2008 5:03:36 AM
Gravatar
Total Posts 18439

Re: Problem with LDAP

Yes, I suppose currently that is the only way to have a common set of users across the sites.

I've been thinking about implementing a solution to make it possible to configure it such that multi sites can share the same users for this kind of scenario. I will give this some further analysis, it might not be too difficult to implement.

Best,

Joe

11/17/2008 10:20:32 AM
Gravatar
Total Posts 18439

Re: Problem with LDAP

I just looked into the idea of making it possible to use one set of users for all sites in a multi site installation. I have a plan in mind that seems rather easy to implement so I'm going to try and work on this today. I think it will be a valuable feature to be able to do this.

Best,

Joe

11/20/2008 2:44:57 AM
Gravatar
Total Posts 8

Re: Problem with LDAP

Any news?

11/20/2008 6:12:28 AM
Gravatar
Total Posts 18439

Re: Problem with LDAP

Yes, this is now implemented in svn trunk so it will be in the next release. There is a new Web.config setting:

<add key="UseRelatedSiteMode" value="false" />

set it to true and all sites use the same users and roles as site with SiteID 1, if for some reason your root site has a different siteid, its also configurable.

<add key="RelatedSiteID" value="1" />

I think it needs one more thing that I will try to work on in the next few days, that is, in this mode we can set which roles can edit pages, but there is no setting for who can create root level pages in the site. If I add a site setting for this, then any pages created below root level will by default inherit the same permissions. So it will be possible for example to give a department its own site, create a role corresponding to the department admins and then assign that role as the site edit roles. Its still possible for system admins or content admins to create pages with different permissions. Admins and Content Admins role really becomes that for the whole system of all sites. We may not want department admins to have that power, so this new site edit roles will give us ability to delegate at the site level without sharing the super user roles.

For the moment I've shifted gears and working on a 301 redirect system for pages whose urls change when the page is renamed. After I complete this and the new site edit roles setting, I will make another release.

Best,

Joe

You must sign in to post in the forums. This thread is closed to new posts.