Forum Discussion
ldap / AD authentication
Hello All,
I am looking for some help getting AD authentication to work. I have been working on this for a few weeks off and on and I just can't seem to make it work as expected.
...
This is actually a pretty old thread. I did get this working an I think the main issue was base vs sub, but I don't remember what did it exactly.
ParlorTricks_14Nimbostratus
While an old thread, i am currently implementing LDAP/AD and reading through your explanation, the fix from switch from the specific to less specific search will be fixed changing base to sub. When you had specified your subdomain you were only searching that for your user and of course it works because you exist in there. Changing to dc=domain,dc=com, you would need to use Sub as your scope, so that it searches through all the sub directories to find your user, otherwise if you use base, it only looks at what is available at the root of your search. Its like using Windows Explorer looking at files, if you use Base then you will see only the files right there unless you use Sub which opens up the directories and looks through those too.
