Error: User does not have an attribute called: sAMAccountName. Please check LDAP_ATTR_USERNAME
Success: LDAP server configuration found.
Success: AUTHENTICATION_METHODS configured correctly.
Testing my.dom:
- Success: Required parameter LDAP_DOMAIN present
- Success: Required parameter LDAP_URL present
- Success: Parameter LDAP_CA_CERT_FILE exists and is readable.
- Success: LDAP_URL format seems to be correct
- Success: Your LDAP port is an integer.
- Success: Your LDAP port is in the correct range.
- Success: Host resolved
- Success: Host and port exist and firewall seems to allow connections.
- Success: Binding to LDAP with the provided LDAP_BIND_DN and LDAP_BIND_PASS successful.
- Error: User does not have an attribute called: sAMAccountName. Please check LDAP_ATTR_USERNAME
2021-04-01T12:10:24.026275 logger=restapi.management.commands.testldap, user_ip=, req_method=, req_url=, success=False, hostname=d88cf3ed19f4, status=HTTP_400_BAD_REQUEST, event=COMMAND_TESTLDAP_ERROR, errors=" - Error: User does not have an attribute called: sAMAccountName. Please check LDAP_ATTR_USERNAME", kwarg_os_user=unknown
LDAP : [
{
'LDAP_URL': 'ldaps://ads01.my.dom:636',
'LDAP_CA_CERT_FILE': '/root/.psono_server/ca.crt',
'LDAP_DOMAIN': 'my.dom',
'LDAP_BIND_DN': 'CN=psono.access,OU=Psono,OU=Domain_Services,DC=my,DC=dom',
'LDAP_BIND_PASS': 'pa$$w0rd',
'LDAP_SEARCH_USER_DN': 'OU=Domain_Users,DC=my,DC=dom',
'LDAP_SEARCH_GROUP_DN': 'OU=Psono,OU=Domain_Services,DC=my,DC=dom',
'LDAP_REQUIRED_GROUP' : 'CN=Psono.Users,OU=Psono,OU=Domain_Services,DC=my,DC=dom',
'LDAP_OBJECT_CLASS_USER': 'person',
'LDAP_OBJECT_CLASS_GROUP': 'group',
'LDAP_ATTR_USERNAME': 'sAMAccountName',
'LDAP_ATTR_GROUPS': 'memberOf',
'LDAP_ATTR_GROUP_MEMBER_ATTRIBUTE': 'memberOf'
},
]
Edited by Victor Zhuravlyov