Lion LDAP Authentication Problem

Hi

I've the same problem.

su:sorry...

@JKasten83 : You resolved your pb ?

Thanks 🙂

Hi

I found a post here with the solution :

https://discussions.apple.com/thread/3200699

Just : after delete AuthenticationAuthority, think to Save at bottom 😉

It's OK !

Bye 🙂

I'm having a problem with openLDAP authentication. In SL everything works, but in Lion users can log in without password after initial login.

I have now reported the problem to Apple via http://www.apple.com/feedback/macosx.html

I'm going to double check if this is related to mobile accounts which we use with the LDAP configuration to allow offline logins. I doubt that's the reason, but I'll try one more time from scratch, just to be sure.

No change. I did as plain and simple configuration as possible.

1. Edited /etc/openldap/ldap.conf with the path to certificate

2. created simple ldap configuration with directory utility (RFC2307 with SSL): dc=domain,dc=tld

3. booted and noticed there's a minor bug which changes the configuration NOT to use SSL, fixed the configuration and booted again.

4. Logged in with real username and wrong password. Uids and gids of users are correct and dscacheutil -configuration shows the correct servers, but the password is not verified.

noticed a little difference using ldap accounts at the login screen and shell. The shell denies ldap accounts authentication (su - ldap_user) if no password is given. The login screen allows ldap accounts with a blank password.

I just spoke to an Apple representative... whose advice is to NOT upgrade to Lion until a fix is found. They have committed to emailing info through once it is available. Let's hope

Curios...

Are you working with ROOT enabled or selected in Directory Utility?

Your LDAP server, what is it? OS etc. Lion?

What happens when you use ldapsearch? From Lion terminal? From other Client Terminal? Using Directory Utility?

Does the Lion Client find the users DN but does not drop and then reconnect using the DN?

Can the loged in user access any other services on the network?

Do they access

Are you using mixed authentication methods?

What is the relationship LDAP has with these if any? (Kerberos authentication of LDAP clients, LDAP Auth supporting kerberos, etc.?)

I think we have a very simple fix but need to know more...

Thanks

Following https://help.apple.com/advancedserveradmin/mac/10.7/#apdAE970666-0053

OpenLDAP website (www.openldap.org)—learn about the open source software that

Open Directory uses to provide LDAP directory service.

RFC3377, “Lightweight Directory Access Protocol (v3): Technical Specification”

(www.rfc-editor.org/rfc/rfc3377.txt)—lists a set of eight other Request for Comment

(RFC) documents with overview information and detailed specifications for the

LDAPv3 protocol.