This Question is Answered

19 Replies Last post: May 30, 2008 8:56 AM by mtstravel  
Click to view mdailey's profile Bronze 7 posts since
May 22, 2008

May 22, 2008 12:56 PM

No users were found using the specified configuration.


I have attempted to setup openfire with ldap, however I cannot seem to figure the issue out at this time.


For some reason I cannot get ldap to work, My Domain controller is "dc1" on the "SMI" domain.

My baseDN is "CN=ChatUsers,OU=corporateusers,dc=dc1,DC=SMI,DC=com"


Attached is a screen shot of my domain architecture. All help is appreciated.

Thanks.


Attachments:
Click to view bf2007's profile Silver 53 posts since
Sep 27, 2007

Try removing the dc=dc1 parameter from your BaseDN string.


CN=ChatUsers,OU=corporateusers,DC=SMI,DC=com

Click to view mtstravel's profile KeyContributor 1,625 posts since
Apr 2, 2007

The group ChatUsers should not be in your baseDN. It should simply be OU=corporateusers,DC=SMI,DC=com. You add the group to the User search filter in the openfire.xml like this:


 <searchFilter> <![CDATA[[(&(objectClass=organizationalPerson)(memberOf=cn=ChatISteam,ou=ChatGroups,ou=accounts,dc=domain,dc=com))]]]></searchFilter> 
Click to view bf2007's profile Silver 53 posts since
Sep 27, 2007

Is this a typo in your config "DC=co" or should it be"DC=com".

<baseDN>CN=ChatUsers,OU=corporateusers,DC=SMI,DC=co</baseDN>

Also your adminDN should be in a similar format as the baseDN

<adminDN>smi\mathew</adminDN> will not work

Might look something like

<adminDN>CN=mathew,OU=corporateusers,DC=SMI,DC=com</adminDN>


If you have an ldap tool like adsiedit you can lookup the actual Distinguished Names that both fileds require.

Click to view mtstravel's profile KeyContributor 1,625 posts since
Apr 2, 2007
I have attached an edited openfire.xml. You may need to edit it futher with a decent text editor such as notepad++ for authorizedUsernames and adminPasswords.
Attachments:
Click to view mtstravel's profile KeyContributor 1,625 posts since
Apr 2, 2007

Your statement on the adminDN is completely incorrect. domain\username is a completely valid structure for Active Directory. As a matter of fact that is how mine is configured.


When I open the openfire.xml it has al lot of invalid characters in it. What was it edited with? I will try to clean it up for you.

Click to view mtstravel's profile KeyContributor 1,625 posts since
Apr 2, 2007

What is the status of this issue? Was my editted openfire config of any help.
Click to view mtstravel's profile KeyContributor 1,625 posts since
Apr 2, 2007
I may be able to help you better if I had a diagram of your AD OU structure. this should be very easy to get working with LDAP. If you tak a screenshot or multiple of your AD users and computers expanded I may be able to help you better. Of cours edit an sensitive data. I do not want you to compromise your network to get help. You may send me a Private Message for my email address instead of posting the images here (security first).
Click to view bf2007's profile Silver 53 posts since
Sep 27, 2007
Cool didn't know that, thought it had to be a normal LDAP structured string.
Click to view mtstravel's profile KeyContributor 1,625 posts since
Apr 2, 2007
nope you can use LDAP structure, domain\user structure, or email authentication (johndoe@domain.com).
Click to view winter's profile Bronze 66 posts since
Oct 19, 2006
wrong thread.
Click to view mtstravel's profile KeyContributor 1,625 posts since
Apr 2, 2007
Based on you graphics you have emailed me we were adding incorrect information to the baseDN. There is no .com in your AD so it should not be in your baseDN. It should simply be OU=corporateusers,DC=SMI. The domain controller you are binding to should be dc1.SMI, again no .com. You add the group to the User search filter in the openfire.xml like this:


 <searchFilter> <![CDATA[[(&(objectClass=organizationalPerson)(memberOf=cn=ChatISteam,ou=corporateusers,dc=SMI))]]]></searchFilter> 

I attached an adjusted openfire.xml for you. You will again need to edit it for real usernames and passwords with a program like notepad++.

Attachments:
Click to view mtstravel's profile KeyContributor 1,625 posts since
Apr 2, 2007
Did the posted files help you at all?
Click to view mtstravel's profile KeyContributor 1,625 posts since
Apr 2, 2007
glad to hear we got it working for you. don't forget to mark this thread as answered (and award points for helpfull or correct answers ;) ).