1

I have an OpsCenter that I need to connect to AD. The relevant configuration below:

[authentication]
enabled = True
authentication_method = LDAP
audit_pattern = ldaplog

[ldap] 
server_host = ldap.very.chill.domain
server_port = 389 
uri_scheme = ldap
search_dn = CN=DSE OpsCenter LDAP,OU=Service Accounts,DC=very,DC=chill,DC=domain
search_password = duhsecure
user_search_base = OU=employees,DC=very,DC=chill,DC=domain
user_search_filter = (sAMAccountName={0})
group_search_base = OU=employees,DC=very,DC=chill,DC=domain
group_search_filter_with_dn = (member=cn={0},OU=employees,DC=very,DC=chill,DC=domain)
group_name_attribute = cn
group_search_type = directory_search 
admin_group_name = superemployees, superemployees2
protocol_version = 3

However, it gives me this error:

Failed to log in: User test has no defined roles in LDAP

I found this in the relation and made sure that sAMAccountName = test and the CN=test on AD side as instructed. Same error.

My knowledge of ldap is not very deep and does not allow me to see what else I might have wrong.

Also, when tried debugging ldap cummunications on opscenter side by running in foreground:

/usr/share/opscenter/bin/opscenter -f

Same error without any additional details follows.

Any ideas are highly appreciated.

user3081519
  • 253
  • 2
  • 13

0 Answers0