OPNsense Forum

Archive => 19.1 Legacy Series => Topic started by: gvecchi on April 24, 2019, 06:39:16 pm

Title: [SOLVED] Unable to import LDAP users
Post by: gvecchi on April 24, 2019, 06:39:16 pm

Hi everybody,

trying to import LDAP users, the following error message displays:

Code: [Select]

Could not connect to the LDAP server. Please check your LDAP configuration
Credentials test through System: Access: Tester is successfull, how to debug the error?

Thanks

Title: Re: Unable to import LDAP users
Post by: ruggerio on April 24, 2019, 08:31:35 pm

Hi,

Firewall-Port  for LDAP/LDAPS open? Otherwise, please post your config. Btw. i went in troubles using ldap when browsing the whole subtree. So, i indicated just 1 level, not the whole subtree in search area.

Title: Re: Unable to import LDAP users
Post by: hbc on April 24, 2019, 09:43:35 pm

Using TLS/SSL for LDAP? I always set it to plain for import and afterwards back to TLS.
With encryption activated, i never could import.

Title: Re: Unable to import LDAP users
Post by: gvecchi on April 26, 2019, 10:11:33 am

Setting Transport to TCP - Standard in System: Access: Servers solved the issue.

Title: Re: Unable to import LDAP users
Post by: hbc on April 26, 2019, 10:21:01 am

Quote from: gvecchi on April 26, 2019, 10:11:33 am

Setting Transport to TCP - Standard in System: Access: Servers solved the issue.

Do not forget to revert back to TLS/SSL after import  ;)

Title: Re: [SOLVED] Unable to import LDAP users
Post by: gvecchi on April 26, 2019, 10:22:54 am

Quote

Do not forget to revert back to TLS/SSL after import  ;)

Do you think this could be a bug?

Title: Re: [SOLVED] Unable to import LDAP users
Post by: hbc on April 26, 2019, 10:50:04 am

Quote from: gvecchi on April 26, 2019, 10:22:54 am

Quote

Do not forget to revert back to TLS/SSL after import  ;)

Do you think this could be a bug?

Maybe. You can open an issue on github.

Title: Re: [SOLVED] Unable to import LDAP users
Post by: gvecchi on April 26, 2019, 10:57:03 am

Quote from: hbc on April 26, 2019, 10:50:04 am

Maybe. You can open an issue on github.

Ok, thanks

Title: Re: [SOLVED] Unable to import LDAP users
Post by: iam on April 27, 2019, 09:21:34 am

I haven't this problem. Do you have imported the certificates of your LDAP server?

Title: Re: [SOLVED] Unable to import LDAP users
Post by: hbc on April 27, 2019, 09:27:48 am

Quote from: iam on April 27, 2019, 09:21:34 am

I haven't this problem. Do you have imported the certificates of your LDAP server?

You lucky one. I imported the root, intermediate and issuing CA. This should be enough to verify certificate, since chain is complete.
Authenticating works with TLS/SSL, just the import and sometimes the list of authentication containers just works with no encryption.

But since I import once per installation, this is an issue with workaround that I can live with. There are other things that are more important to be fixed.