Re: LDAP Authentication from Linux

Adrian Marsh (NNTP) wrote:
Hi All,

I'm trying to implement a secure authentication from an apache2 server across to my SBS2003 server.

I've configured LDAP in apache, and if I bind using a Domain Admin account then all is well and I can login.

However, I don't really want to use a domain admin account for this. So I setup a new user account, and have tried using that but the bind fails. I'm guessing its a permissions issue, but am not sure where to start to look.

I assume you're asking LDAP for confirmation of user credentials? Should
an unprivileged user be allowed to do this for credentials other than his own?
Possibly there are security groups lower than domain admin that will allow it.


Second, am I using the right mechanism here? Isn't LDAP for directory lookups and Kerberos for authentication??


Have you tried making the Linux machine a domain member? I'm not quite sure of the state of the art of Samba at the moment, but I believe it's up to domain membership on 2003. I'm not sure if it can do domain controller yet. Again, I'm not sure if this will help as it seems to me you're asking about domain security information as an unprivileged user.
.

Relevant Pages

  • Re: LDAP Authentication from Linux
    ... I'm trying to implement a secure authentication from an apache2 server ... I've configured LDAP in apache, and if I bind using a Domain Admin ...
    (microsoft.public.windows.server.sbs)
  • LDAP Authentication from Linux
    ... I'm trying to implement a secure authentication from an apache2 server across to my SBS2003 server. ... I've configured LDAP in apache, and if I bind using a Domain Admin account then all is well and I can login. ...
    (microsoft.public.windows.server.sbs)
Loading