So, It looks like tokens are working on LDAP too.
Is there any way to disable 2FA on LDAP?
Thanks
On Thu, Feb 22, 2018 at 3:52 PM, Maciej Drobniuch <md(a)collective-sense.com>
wrote:
Hey All,
I want to authenticate with an external app to ldap ipa.
So I've created a user for the bind:
dn: uid=sysaccount,cn=sysaccounts,cn=etc,dc=example,dc=com
changetype: add
objectclass: account
objectclass: simplesecurityobject
uid: system
userPassword: somepass123
passwordExpirationTime: 20380119031407Z
nsIdleTimeout: 0
The external app runs the LDAP check successfully and can see the users
that belong to the group that's allowed to login.
Problem:
I can not login with the default "admin" account but I can not login with
any other account that's in the dn into the app.
Response is: "Invalid credentials"
base: 'cn=users,cn=accounts,dc=example,dc=com'
user_filter: '(memberOf=cn=gitlab-users,cn=groups,cn=accounts,dc=example,
dc=com)'
Any ideas?
Thank You!
--
Best regards
Maciej Drobniuch
Network Security Engineer
Collective-Sense,LLC
--
Best regards
Maciej Drobniuch
Network Security Engineer
Collective-Sense,LLC