CacheGuard Help

Hello Miguel You can leave the "Password attribute" and "Filter" fields empty. You can also have white spaces in the bind DN with this new version. Please read the following for further information: http://www.cacheguard.net/doc/command/authenticate.html . I hope that this versio...

Dear Miguel We just released v1.1.2 that among other things fixes issues you've encountered to integrate CG with AD. Feel free to apply the patch to upgrade to this version that you can find at: http://www.cacheguard.net/cacheguard-patch.html . Please read the change logs before applying the patch a...

Dear Miguel I'm happy to hear that you finally found a solution to make it work even if the workaround is a bit far-fetched :-) I'm curious to know that how you find that we should use the 'sAMAccountType=805306368' filter. Regarding unencrypted exchanged passwords with an LDAP (or AD) server you ha...

Dear Miguel Thank you for all those information; now it's clearer to me. FYI my testing environment is based on an OpenLDAP server and my testing user inherit from standard classes inetOrgPerson and simpleSecurityObject . Also the value of the userPassword attribute for my testing user is visible wh...

Hello Miguel Sorry I'm a little confused. Is your testing user the same as your binding user? (ie. the "proxy" user). Which tool do you use to perform that LDAP request and from where? I have noted that you found your testing user under the dc=mydomain,dc=me base DN in LDAP Admin. Could yo...

Dear Miguel I think that we are making progress even if doesn't work yet. Could you send me the result of the command: authenticate ldap As now you can browse your AD could you find a user under the dc=mydomain,dc=me sub-tree and check its attributes? Could you see attributes sAMAccountName and user...

Dear Miguel I suggest you to use an LDAP browser to see what's going on with your AD server. I found the following LDAP browser utility: http://www.ldapadmin.org. I took the LdapAdminExe-1.6.zip file. In your case use the following connection properties: - IP address of your AD - Default LDAP port: ...

Hello Miguel By "/gui/authenticate-ldap-binddn.apl" I meant "https//:<cg-admin-ip>:<admin-port>/gui/authenticate-ldap-binddn.apl". For instance if the internal IP address and admin port of your CG are respectively 10.0.10.254 and 8090, the URL would be: "https://10.0.10.254:...

Hi Please double check that you correctly entered the LDAP binding password (/gui/authenticate-ldap-binddn.apl). Nothing is certain... Also to better identify the problem you're encountering I need to know the version of the AD/Windows Server you use. Actually I'm not sure that the userPassword attr...

Hello Miguel Actually the groupBaseDN and groupName parts are optional. Please use the CLI (Command Line Interface) and execute the following commands: authenticate ldap request 'dc=mydomain,dc=me' sAMAccountName userPassword 'objectClass=user' apply Please note that you can't use the Web GUI to app...