Ldap user otp

Question
7

Ah!!! that worked like a charm once i placed the ldap resolver in the
default realm.

Appreciate your quick reply for resolving this.

Thank you very much Cornelius.On Tuesday, July 14, 2015 at 2:44:40 PM UTC-6, Cornelius Kölbel wrote:

HI bluewaters,

again. Forget about PAM for a while.

Call
https://privacyideaserver/validate/check?user=&pass=

ldap user

{
“id”: 1,
“jsonrpc”: “2.0”,
“result”: {
“error”: {
“code”: -500,
“message”: “ERR905: The user can not be found in any resolver in
this realm!”
},
“status”: false
},
“version”: “privacyIDEA 2.5dev2”
}

This indicates, that you your LDAP user can not authenticate. I.e. the
underlying mechanism will not work, so we do not need to talk about PAM.
We first have to fix this!

How many realms did you define?
Did you put the LDAP resolver in a new realm?

Then the ldap user will not be in the default realm.
Please put the ldap resolver into the same realm like the
passwdresolver.

And check the URL again!

Kind regards
Cornelius