Hi technical,

I hit a problem during configure proxy to AD.
I can run command:
$ldapsearch -x -h localhost -LLL -b dc=mydomain,dc=local -D cn=open,cn=users,dc=mydomain,dc=local -W "(cn=open1)" cn sAMAccountName
which return the SAMACCOUNTNAME:open successfully. --- This may mean the proxy works well.

But if I run command with out –D -D cn=open,cn=users,dc=mydomain,dc=local. The search will failed.
when I try to login my client machine with AD user. It always failed. --- I can login with openldapuser successfully.

I think I need some configuration to force the –D in slapd.con. Is there any problems with my slapd.conf? Or any trouble shooting comments? Appreciate it very much.

Below is my slapd.conf:
#######################################################################
# database definitions
#######################################################################
database       ldap
suffix         "DC=mydomain,DC=local"
uri            ldap://dc-ad.mydomain.local/
chase-referrals no
rebind-as-user  yes
idassert-bind   bindmethod=simple
                binddn="CN=open,OU=users,DC=mydomain,DC=local"
                credentials=open
                mode=none
                flags=non-prescriptive
idassert-authzFrom "*"


Thanks,
Leo