[ZendTo] FW: Re: AD Authentication Won't Work

[Joshua F. Withrow]

Alittle more here...  it allows us to authenticate, but it does not retain that.  Is this using sessions, and if so is there something I need to manually set or configure to get sessions to retain?  What method does zendto use to retain logins after the initial authentication?

From: zendto-bounces at zend.to [mailto:zendto-bounces at zend.to] On Behalf Of Joshua F. Withrow
Sent: Wednesday, February 02, 2011 9:59 AM
To: 'ZendTo Users'
Subject: [ZendTo] Re: AD Authentication Won't Work

Sweet :)  I am now connecting, and it lets me know at the bottom of the screen that I have authenticated (it's pulling info from AD, like my full username).  But it leaves me at the login screen and displays:

[cid:image001.png at 01CBC2BF.C486C5E0]

Authentication Error

The username or password was incorrect.


Even though it tells me: Version 3.63 | Copyright (c) 2010 | you are currently logged in as Joshua F. Withrow

Any ideas appreciated :)




From: zendto-bounces at zend.to [mailto:zendto-bounces at zend.to] On Behalf Of JC Putter
Sent: Tuesday, February 01, 2011 4:13 PM
To: 'ZendTo Users'
Subject: [ZendTo] Re: AD Authentication Won't Work

'authenticator'             => 'AD',
  'authLDAPAdmins'            => array('test'),
  'authLDAPBaseDN1'           => 'DC=ad,DC=contoso,DC=com',
  'authLDAPServers1'          => array('ad1.contoso.com'),
  'authLDAPAccountSuffix1'    => '@contoso.com',
  'authLDAPUseSSL1'           => false,
  'authLDAPBindUser1'         => 'CN=Administrator,CN=Users,DC=contoso,DC=com',
  'authLDAPBindPass1'         => 'password,
  'authLDAPOrganization1'     => 'Moore Stephens',
  //'authLDAPBaseDN2'           => 'DC=soton,DC=ac,DC=uk',
  //'authLDAPServers2'          => array(),
  //'authLDAPAccountSuffix2'    => '@soton.ac.uk',
  //'authLDAPUseSSL2'           => false,
  //'authLDAPBindUser2'         => '',
  //'authLDAPBindPass2'         => '',
  //'authLDAPOrganization2'     => 'University of Southampton',

This is a sample of my working config.....

As Jules pointed out use ldapsearch to workout and troubleshoot using connection to AD

If you only have one domain, uncomment the rest and remove everything in the array in authLDAPServer2


________________________________
This message is the property of Machining Technologies, Inc (MaTech) and the Information contained herein may be/is subject to the Code of Federal Regulations Chapter 22 International Traffic in Arms Regulations (ITAR). This data may not be resold, diverted, transferred, transshipped, made available to a foreign national within the United States, or otherwise disposed of in any other country outside of its intended destination, either in original form or after being incorporated through an intermediate process into other data without the prior written approval of the US Department of State. The information in this e-mail and subsequent attachments may contain legally privileged, proprietary and/or confidential information that is intended only for the use of the addressee(s).
No addressee should forward, print, copy or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as the recipient. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this e-mail information is prohibited. If you have received this communication in error, please immediately notify the sender by telephone or return e-mail and delete this e-mail. Thank You.

________________________________
This message is the property of Machining Technologies, Inc (MaTech) and the Information contained herein may be/is subject to the Code of Federal Regulations Chapter 22 International Traffic in Arms Regulations (ITAR). This data may not be resold, diverted, transferred, transshipped, made available to a foreign national within the United States, or otherwise disposed of in any other country outside of its intended destination, either in original form or after being incorporated through an intermediate process into other data without the prior written approval of the US Department of State. The information in this e-mail and subsequent attachments may contain legally privileged, proprietary and/or confidential information that is intended only for the use of the addressee(s).
No addressee should forward, print, copy or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as the recipient. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, retention or use of the contents of this e-mail information is prohibited. If you have received this communication in error, please immediately notify the sender by telephone or return e-mail and delete this e-mail. Thank You.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20110202/801a8001/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 3981 bytes
Desc: image001.png
Url : http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20110202/801a8001/attachment.png 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ATT00001.txt
Url: http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20110202/801a8001/attachment.txt