Forum

Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.

[SOLVED] LDAP Authe...
 
Notifications
Clear all

[SOLVED] LDAP Authentication without service account ?

5 Posts
2 Users
0 Reactions
2,548 Views
(@nicolasd)
Posts: 3
Active Member
Topic starter
 
[#6466]

Hi,

I contact you to know if it is possible to use the user's login and his password to valid this account on LDAP server ?

I'd like to know if we must inevitably use a service account to connect to the LDAP in order to check if the user and the password is matching ?

Thanks !

Kind Regards

Nicolas


 
Posted : 30 Jan 2020 13H25
babynus
(@babynus)
Posts: 14954
Main Contributor Admin
 

Sorry, I don't really understand the question.

You can connect projeqtor to a LDAP service, that will be use to authenticate user (valid user/password)
Some users may still have internal account authentication (for instance admin, that must b able to connect even if LDAP is off to change configuration)


 
Posted : 31 Jan 2020 12H40
(@nicolasd)
Posts: 3
Active Member
Topic starter
 

Hi babynus,
Thanks for your answer.

Currently, we are using a service account with projeqtor to connect to ldap in order to verify that the user's login and his password are correct.

I'd like to know if we can contact the ldap server directly with the user's login and his password without use this service account ?

For example, with the ldapsearch command, an user can have only his informations :

ldapsearch -H ldaps:// -D uid=,ou=Users,dc=Comptes,dc=com -b dc=Comptes,dc=com -W uid=

The user type the 's password and if the password is correct, the LDAP displays 's informations.

I'd like to know if it is possible with Projeqtor to use directly the user account to check his informations ?

Thanks


 
Posted : 31 Jan 2020 14H53
babynus
(@babynus)
Posts: 14954
Main Contributor Admin
 

Hi,

No, LDAP feature in Prjeqtor is designed to require a service accvount to search for the user.
This is done to enable connection with "simple" user account, with just the username.
Otherwise, the user would have to enter a full dn syntax to identify, such as "cn=myusername,ou=mygroup,dc=myenterprise,dc=com" wich is not very fluent.


 
Posted : 31 Jan 2020 16H52
(@nicolasd)
Posts: 3
Active Member
Topic starter
 

Hi babynus,

OK Thank you very much for your answer 🙂 We will continue to use a service account !

Kind Regards


 
Posted : 11 Feb 2020 13H25
Share:

Scroll to Top