Page 1 of 1

LDAP configuration problem

Posted: Sun Sep 14, 2008 2:52 pm
by talmoshe
Hi,

I tried to configure LDAP informaiton, but I keep getting this error:
E_WARNING ldap_search() [<a href='function.ldap-search'>function.ldap-search</a>]: Search: Operations error - in C:\Inetpub\wwwroot\testlink\lib\functions\ldap_api.php - Line 94

This is my conf part:
/** LDAP authentication credentials */
$g_ldap_server = <my server ip>;
$g_ldap_port = '389';
$g_ldap_root_dn = 'DC=<domain>,DC=com';
$g_ldap_organization = ''; # e.g. '(organizationname=*Traffic)'
$g_ldap_uid_field = 'sAMAccountName'; # Use 'sAMAccountName' for Active Directory
$g_ldap_bind_dn = ''; // 'my_bind_user' / Left empty if you LDAP server allows anonymous binding
$g_ldap_bind_passwd = ''; // 'my_bind_password' / Left empty if you LDAP server allows anonymous binding

Posted: Thu Jun 18, 2009 6:43 am
by Tom
Guess the obvious question is:
  • Do you have an LDAP server?
    Can you access the LDAP server using something like LDAP browser?
    Can you access the LDAP server anonymous, or do you need to authenticate?
    Do you know your root DN? (LDAP browser will help you with that)
I'm not saying I know how to fix your problem but these are at leas some pointers to help you out.

LDAP works fine

Posted: Thu Jun 18, 2009 6:47 am
by talmoshe
Thanks for your reply :-)

My LDAP (Win2003 server) works and I can authenticate through it.

How is win2003 AD should be configured in testlink?

Posted: Thu Jun 18, 2009 6:59 am
by Tom
ahh the good old w2k3 LDAP :)
You might need to setup Anonymous bind to it (guessing)
If you have adminpak.msi installed that should allow you to view your Tree (can't remember the MMC snapin name... the one that allows you to view attributes and modify them.)
The attribute is called "dsheuristics" and if there is no values on it (which is usually the case) then you need to add 0000002 to it. (from memory)
I advise to look this up on google to verify been a while since I set this up and I lost my notes.
Since you have w2k3 the Samaccount attribute should be used

Hope this helps