[horde] Horde 4 problem with AD LDAP groups

Mickael Boulet mickael.boulet at icfo.es
Fri Jun 29 08:46:28 UTC 2012


Hi everyone,

I have a problem with fresh install of Horde 4, on Centos6 and Groups 
LDAP configuration.

In Horde3 the same configuration works fine, but in Horde4, is 
impossible for me to making it working.

Everything is working fine without LDAP groups activation. After the 
configuration update (I active LDAP groups), when I try to loggin, 
authentication is successful (I see it into the log) but I have a fatal 
error that it says me:

A fatal error has occurred
Bad search filter Parameters: Base: 
OU=groups,OU=myenterprise,DC=my,DC=domain,DC=net Filter: 
(&(objectclass=)(=username)) Scope: sub

I don't understand why the search filter is wrote as it, and on google 
or forum I don't find anything, then I have to ask for help.

The authentication is working fine with IMP as provider. LDAP groups are 
stored on Active directory, but I don't know if Horde 4 is fully 
compatible with AD.

I let you a part of my horde config file:

$conf['ldap']['hostspec'] = 'ldaps://ewv03.myenterprise.my.domain.net 
ldaps://ewv02.myenterprise.my.domain.net';
$conf['ldap']['tls'] = false;
$conf['ldap']['version'] = 3;
$conf['ldap']['binddn'] = 'mybinddn';
$conf['ldap']['bindpw'] = 'mypassword';
$conf['ldap']['bindas'] = 'admin';
$conf['ldap']['useldap'] = true;
$conf['group']['params']['basedn'] = 
'OU=groups,OU=myenterprise,DC=my,DC=domain,DC=net';
$conf['group']['params']['scope'] = 'sub';
$conf['group']['params']['gid'] = 'cn';
$conf['group']['params']['memberuid'] = 'member';
$conf['group']['params']['attrisdn'] = true;
$conf['group']['params']['newgroup_objectclass'] = array('top', 'group');
$conf['group']['params']['search']['objectclass'] = array('group');
$conf['group']['params']['search']['filter_type'] = 'objectclass';
$conf['group']['params']['driverconfig'] = 'horde';
$conf['group']['driver'] = 'Ldap';

Many thanks to help me to solve this problem or tell why it doesn't work!

Regards.

Mickael.



More information about the horde mailing list