I am currently attempting to configure our OpenLDAP 2.4.26 (on SUSE Enterprise 10) server to act as an proxy to Active Directory as well as using a local database. The local database works fine but I cannot for the life of me get the ldap backend to authenticate/bind correctly to the AD ldap server. I can use ldapsearch to search AD just fine with the credentials passed as follows:

 

ldapsearch -x -h ldap.mydomain.com -D 'myldapuser' -w 'myldappw' -b 'dc=mydomain,dc=com' '(sAMAccountName=myusername)'

 

Returns all the associated data of “myusername” from AD.

 

Here is the section of my slapd.conf for my databases and backends. I have read several different sites on how to configure this and they all use different methods and claim it works for them. None has worked for me. I continue to get bind errors. Any guidance would be much appreciated.

 

database    bdb

suffix      dc=zlinux,dc=mydomain,dc=com

rootdn      cn=admin,dc=zlinux,dc=mydomain,dc=com

rootpw      myrootdnpw

directory   /usr/local/openldap/var/openldap-data

index       objectClass,uidNumber,gidNumber               eq

index       cn,sn,uid,displayName                         pres,sub,eq

index       memberUid,mail,givenname                      eq,subinitial

#

#

database        ldap

suffix               "dc=Company Users,dc=mydomain,dc=com"

uri                    ldap://ldap.mydomain.com

idassert-bind   bindmethod=simple

                binddn="cn=myldapuser,dc=Company Service Accounts,dc=mydomain,dc=com"

                credentials=myldappw

                mode=none

idassert-authzFrom "dn.exact:cn=cn=myldapuser,dc=Company Service Accounts,dc=mydomain,dc=com"

chase-referrals no

overlay              rwm

rwm-map         objectclass account user

rwm-map         attribute   uidNumber    employeeID

rwm-map         attribute   uid          sAMAccountname

rwm-map         attribute   cn           name

rwm-map         attribute   sn           sn

rwm-map         attribute   mail         mail

rwm-map         attribute   company      company

rwm-map         attribute   entry        entry

rwm-map         attribute   userPassword unicodePassword

rwm-map         attribute   *

 

 

Thanks

 

Dedrick