Hi All,

I recently installed liferay 6.0.6. I had the requirement for using LDAP authentication which I did in Portal Settings.
All went off well and users/groups were imported from LDAP server successfully.
However, they cannot login using their passwords with LDAP server. I tried using the LDAP password policy in liferay but that did not work out.

Any idea of how to make liferay talk to ldap server for password verification ?

Do I need the patch mentioned here:
http://www.liferay.com/community/forums/-/message_boards/message/10090229

Regards,
Naveen Sharma.

I did use LDAP with LR 6.0.6 some time back and it works fine. Can you please share the logs to analyze any error thats coming.

Thanks and Regards
Ravi

Dear Ravi,

> I did use LDAP with LR 6.0.6 some time back and it works fine

I can see all users imported from LDAP.
However, ldap passwords don't work. I have no clues.

Which log file to look for authentication failures. server/log doesn't show any errors.

Regards,
Naveen Sharma.

okay.. and what LDAP access logs. Which LDAP you are using.. there should be some logs folder or so..

My approach to this problem is to check whether at login time LR is using LDAP or not.. if not then there is some problem in LR settings. If yes then check proper ldap credentials.

I think the problem is in your Authentication Search Filter filed. I've integrated Active Directory with LR 6.0.5, 6.0.6 and LR 6 EE SP2.
i gave (&(objectCategory=Person)(sAMAccountName=@screen_name@)) in my Authentication Search Filter filed. and configured authentication using screen name

Attachments:

Screenshot_1.png (4.1k), Screenshot_2.png (19.2k)

Hello,

Thanks for posting those screen shots. I had an issue where users could use ANY password to authenticate into the portal. That issue has been fixed.

However, I have run into a new problem... If a user has the role of the portal Administrator (omniadmin) any password can be entered with the username and they are allowed to enter the portal.

Any suggestions? are you experiencing something similar?

Thanks in advance.

Brian

Out of curiosity, you're not using Chrome browser are you? I haven't ever seen this in Liferay 6.0.6 except with Chrome. The browser holds into the Session objects and makes Liferay, and other apps, appear to accept invalid passwords. It's worth a shot anyway.

By the way, I can't help but notice the giant red N you have as your pic. Do you work in NE? I know this is outside the scope of this forum. I work in K12 education in NE and we're doing a huge deployment of LR. If you're interested in collaborating or just chatting about LR, send me a dm on Twitter @drewblessing.

Oops, I should have updated this post...

The issue has been corrected. I received a patch to get the LDAP import feature working the way I needed and somewhere in that patch it allowed users to authenticate with any password. I removed the patch and everything is working correctly now.

Yes, I do work in Nebraska! I'll send you a dm on twitter. It would be nice to see if we can collaborate on something.

Brian

Ravi -- cheers, you helped me greatly with these screenshots. The General tab was the key, for me.