mySQL + LDAP resolver

Hi Cornelius,
I use the mysql-resolver for a few months and it works fine! Now I want to
add a LDAP-resolver so that the users has to use his password of the active
directory AND the OTP.

But it doesn’t work :frowning: or is it not possible to auth. against the
AD-Password?

DC=Domain,DC=local’: Exception(‘Wrong credentials’,)

I know what this mean - but when I try the PIN+OTP there is no field for
the password of the userAm Mittwoch, 29. April 2015 21:54:21 UTC+2 schrieb Cornelius Kölbel:

Am 29.04.2015 um 21:38 schrieb Stefan Steuer:

I takes some seconds :smiley: now I’ve got a log.

[2015-04-29
21:36:45,252][2693][140378552792832][WARNING][privacyidea.lib.resolvers.LDAPIdResolver:106]
failed to check password for ‘CN=Mustermann\,
Max,OU=Musterabteilung,OU=Musterfirma,DC=Musterdomain,DC=local’/'CN=Mustermann\,
Max,OU=Musterabteilung,OU=Musterfirma,$

Could you please also give the rest of this line ^

[2015-04-29
21:36:45,409][2693][140378452080384][WARNING][privacyidea.lib.config:493]
unable to load resolver module : ‘resolvers.SCIMIdResolver’
(ImportError(‘cannot import name getResolverClass’,))

Am Mittwoch, 29. April 2015 21:36:21 UTC+2 schrieb Cornelius Kölbel:

Which version are you running?

Am 29.04.2015 um 21:31 schrieb Stefan Steuer:

wrong OTP-Pin :frowning:

Log is empty.

Am Mittwoch, 29. April 2015 21:24:13 UTC+2 schrieb Cornelius Kölbel:

OK,
try first to check with the OTP PIN.
If this is OK, create the policy for this LDAP-Realm(!) use
otppin=userstore.
Please check the log file. (You may increase the debug level) and you
should see the bind to the LDAP.

http://privacyidea.readthedocs.org/en/latest/installation/index.html?highlight=debug#running-privacyidea-with-apache2-and-mysql
set PI_LOGLEVEL=10

Kind regards
Cornelius

Am 29.04.2015 um 21:15 schrieb Stefan Steuer:

Sorry for the confusion.

The AD and the SQL-DB contains both the user m.mustermann. For the
LDAP and mySQL I’ve a different realm.

Resolver + Realm + User
OTRS-DB + mysql + m.mustermann
AD + LDAP + m.mustermann

-- 

You received this message because you are subscribed to the Google
Groups “privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to privacyidea...@googlegroups.com.
To post to this group, send email to priva...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbelcorneliu
@netknights.it
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
GeschĂ€ftsfĂŒhrer: Cornelius Kölbel

–
You received this message because you are subscribed to the Google Groups
"privacyidea" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com.
To post to this group, send email to priva...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/ad56585f-957c-4c79-b424-80aa33ed3fb9%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/ad56585f-957c-4c79-b424-80aa33ed3fb9%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbelcorneliu
@netknights.it
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
GeschĂ€ftsfĂŒhrer: Cornelius Kölbel

–
You received this message because you are subscribed to the Google Groups
"privacyidea" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com <javascript:>.
To post to this group, send email to priva...@googlegroups.com
<javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/e20e93e0-5861-48d3-89b5-c81ce3542192%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/e20e93e0-5861-48d3-89b5-c81ce3542192%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbelcorneliu
@netknights.it <javascript:>
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
GeschĂ€ftsfĂŒhrer: Cornelius Kölbel

I tried it with differents formats


ad-password+OTP
PIN+OTP

every time I’ll get the same issue.

https://lh3.googleusercontent.com/-h20EAtL5XCA/VUE79ibDGcI/AAAAAAAAAFc/GczdGep0prc/s1600/2015-04-29_22h14_55.pngAm Mittwoch, 29. April 2015 22:04:39 UTC+2 schrieb Cornelius Kölbel:

When you try to authenticate you need to enter

<AD-Password><OTP>

Then the system will try to authenticate (bind) to the AD with the

Am 29.04.2015 um 22:03 schrieb Stefan Steuer:

This error code means that the login-credentials are wrong.

But I didn’t enter the credentials - only the PIN+OTP in the backend

Am Mittwoch, 29. April 2015 21:56:37 UTC+2 schrieb Stefan Steuer:

DC=Domain,DC=local’: Exception(‘Wrong credentials’,)

I know what this mean - but when I try the PIN+OTP there is no field
for the password of the user

-- 

You received this message because you are subscribed to the Google Groups
"privacyidea" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com <javascript:>.
To post to this group, send email to priva...@googlegroups.com
<javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/2ee80b04-39f8-4f59-ba87-2e3427040a36%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/2ee80b04-39f8-4f59-ba87-2e3427040a36%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbelcorneliu
@netknights.it <javascript:>
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
GeschĂ€ftsfĂŒhrer: Cornelius Kölbel
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Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu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Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu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Sorry for the confusion.

The AD and the SQL-DB contains both the user m.mustermann. For the LDAP and
mySQL I’ve a different realm.

Resolver + Realm + User
OTRS-DB + mysql + m.mustermann
AD + LDAP + m.mustermann
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Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu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Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu
YXNjIg0KQ29udGVudC1EZXNjcmlwdGlvbjogT3BlblBHUCBkaWdpdGFsIHNpZ25hdHVyZQ0KQ29u
dGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9InNpZ25hdHVyZS5hc2MiDQoN
Ci0tLS0tQkVHSU4gUEdQIFNJR05BVFVSRS0tLS0tDQpWZXJzaW9uOiBHbnVQRyB2MQ0KDQppUUlj
QkFFQkFnQUdCUUpWUVMvWEFBb0pFQkJoWkZVdWpZRkpybEFRQUxiWE91RTkrM1oraGlKTWNoQUNE
RUswDQpsK0F4U05zL0lJQUdQbTlWSFVkNHA4a0JzTnB6OVorSjd4KzBKNmFlRXRaZzVEay80QlY1
WUQzajVGVzJ4ZnRaDQpsek5sWHZqRW9nZEM4eGM2YWhGT28xaUdWMktiYXBIQ1FpTkRDU1hLZUNR
akh0bWJWd2hhOVJHSENucWRBdDBLDQpoL1NHbTBISnFoam1MWnpFVzREODVhOC80MDZsaTdQV0ha
TTRsdDFuYTBTdnNJNnRwWDFRM2NOTHhNZVluREI1DQpGU3BqeU43d2p5TWhUVm9ZWiswZTRGd3Mw
VHA3MHB3MUxwUGNRUU91MWVJYjJNdWJyNGFqUEFTZjV5SlE0eE1XDQphU3lQNEZud0VXbk02ck9M
N2hudkI2bUVmV2l1MHVvMkZjRkNTdm5rRlo4a0c0RjF0ajVJMnJDTHZwUzM2bGt5DQprNCs5NjV1
MWs0QnJFbUg2N1E3Y2xWeUt6SEF0QjA3SGtDTDI4QnEvWk9aRFVma3BSdnZnMFRWNzc5VDNZWkNE
DQpVUFBOL0JaUWlPenVGcnBDeVN5bXk1V0xYSXFwODFCM05mS21zWnllbSs4RlRScXhjaG4wV1pE
Y1pOenp6ZlZmDQozOWQ2ZWtMUHE3cEQ1SGVhV3RyaGZERElPTU5qOXlUMUtsWnh3cDhxV20vYVk5
RU5wVWI4NTJNQWtpWGE0eFRSDQpnUHprTEZiN3oyN2N4ekE1QkxXa3h4eE13VHRobHU5SEpvOFNx
TVZXYjNCOWUrSVErNGRDR2pzMEg0SFUvcHU2DQpOTHN1TDlMQ1dPREpKYm1Bb2I1VDl1dWVxeWsx
QU5lU0VDOTdMRyt1ajdGMmVZOUgzaGpzNDkzdUloUVVuSWRQDQp0ZDNQSi85ck9RQzRJZ21CTFl0
bQ0KPXFXZzENCi0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQ0K

This error code means that the login-credentials are wrong.

But I didn’t enter the credentials - only the PIN+OTP in the backendAm Mittwoch, 29. April 2015 21:56:37 UTC+2 schrieb Stefan Steuer:

DC=Domain,DC=local’: Exception(‘Wrong credentials’,)

I know what this mean - but when I try the PIN+OTP there is no field for
the password of the user
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Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu
YXNjIg0KQ29udGVudC1EZXNjcmlwdGlvbjogT3BlblBHUCBkaWdpdGFsIHNpZ25hdHVyZQ0KQ29u
dGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9InNpZ25hdHVyZS5hc2MiDQoN
Ci0tLS0tQkVHSU4gUEdQIFNJR05BVFVSRS0tLS0tDQpWZXJzaW9uOiBHbnVQRyB2MQ0KDQppUUlj
QkFFQkFnQUdCUUpWUVRsV0FBb0pFQkJoWkZVdWpZRkptUFFQLzMwYXpXbXNOcnhnNzMwUUdRaGVt
VmpKDQpmV3ZSTlQrcU9MaU9pR0ZnVWpwNGx5amw4bStLM2dsTG02R0s5ZzA4QzhOWm1UYmxPdkVa
WHlWaERaM1RUU2E3DQpGWVYrbVBYQ1JIdnI4b3FibmhhS2dYYThaVXVyUzJrY0tOQUZDL1R0d3BH
QVhMU0R3SGhHbVJNRW1TUzFmb1lCDQpMMGlBUExqQUpmREdZZFpIbzExQjFraG9ZUTg1K1RUUU5w
aml4aUM1b2FERzlFczZFRHU5N1NYRkJKQWZxZW9qDQpiZGl1b1JkNmpTd2hzMEpUQXhjSndPZ0Fk
Znk2UkgrN2R2VFR4U2xMZnppQkY5bUpVWStNZ1dTYkxQbDN1cndqDQpxUitOMG1tU0xFU1BpKzcv
WWhEWXVWcXpFdUFnM01rWlllWUZZcWRqd1UwTmxKVGQ3OVVoQ3lyK0pNUzRvV0tNDQpxQlhKMHFX
enVWcFJIMkpmYytVdkYyTnR6bmdKaTZXV25sSnQvQmV2Q2krUUxLWU5Wb0o1aXdmMXhhYVZpKzdK
DQp0Rk1hU3VSamRROTJyTStUZTJLeVlkK0pWb1JROXdqTkxMTWNnb0pMSUYzdG5uT1oyaDdGY2Ew
Qnc0QXFINEJDDQorWFpsSnp4aXVVbWZzRElwVFdvZlJCb3BYUElheWdsUWg3YVA5UmV6VnpIaFh5
ekZsNjd5aFlhK3JVcllwbk9vDQpoQUY0RTJpK0Q5ZlhIWTArRHBJRDN0ZE1IOExWd0ZxcHFUVkpY
NGxxL0VSNlhNWllvTXAzaHdDN004NG5VVzJ6DQpDWExQbjJSVlJIUk5UeWxZSThXcmlNM0V5QmI0
SjlXRlJ6UHJOTkVITCsybFNuOC9PSFZ1SDZqeWM1bDBwUENSDQpUUlduRzROWE42ZE10UXRRSVoz
QQ0KPUFLKzQNCi0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQ0K

wrong OTP-Pin :frowning:

Log is empty.Am Mittwoch, 29. April 2015 21:24:13 UTC+2 schrieb Cornelius Kölbel:

OK,
try first to check with the OTP PIN.
If this is OK, create the policy for this LDAP-Realm(!) use
otppin=userstore.
Please check the log file. (You may increase the debug level) and you
should see the bind to the LDAP.

http://privacyidea.readthedocs.org/en/latest/installation/index.html?highlight=debug#running-privacyidea-with-apache2-and-mysql
set PI_LOGLEVEL=10

Kind regards
Cornelius

Am 29.04.2015 um 21:15 schrieb Stefan Steuer:

Sorry for the confusion.

The AD and the SQL-DB contains both the user m.mustermann. For the LDAP
and mySQL I’ve a different realm.

Resolver + Realm + User
OTRS-DB + mysql + m.mustermann
AD + LDAP + m.mustermann

-- 

You received this message because you are subscribed to the Google Groups
"privacyidea" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com <javascript:>.
To post to this group, send email to priva...@googlegroups.com
<javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbelcorneliu
@netknights.it <javascript:>
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
GeschĂ€ftsfĂŒhrer: Cornelius Kölbel

I takes some seconds :smiley: now I’ve got a log.

[2015-04-29
21:36:45,252][2693][140378552792832][WARNING][privacyidea.lib.resolvers.LDAPIdResolver:106]
failed to check password for ‘CN=Mustermann\,
Max,OU=Musterabteilung,OU=Musterfirma,DC=Musterdomain,DC=local’/'CN=Mustermann\,
Max,OU=Musterabteilung,OU=Musterfirma,$
[2015-04-29
21:36:45,409][2693][140378452080384][WARNING][privacyidea.lib.config:493]
unable to load resolver module : ‘resolvers.SCIMIdResolver’
(ImportError(‘cannot import name getResolverClass’,))Am Mittwoch, 29. April 2015 21:36:21 UTC+2 schrieb Cornelius Kölbel:

Which version are you running?

Am 29.04.2015 um 21:31 schrieb Stefan Steuer:

wrong OTP-Pin :frowning:

Log is empty.

Am Mittwoch, 29. April 2015 21:24:13 UTC+2 schrieb Cornelius Kölbel:

OK,
try first to check with the OTP PIN.
If this is OK, create the policy for this LDAP-Realm(!) use
otppin=userstore.
Please check the log file. (You may increase the debug level) and you
should see the bind to the LDAP.

http://privacyidea.readthedocs.org/en/latest/installation/index.html?highlight=debug#running-privacyidea-with-apache2-and-mysql
set PI_LOGLEVEL=10

Kind regards
Cornelius

Am 29.04.2015 um 21:15 schrieb Stefan Steuer:

Sorry for the confusion.

The AD and the SQL-DB contains both the user m.mustermann. For the LDAP
and mySQL I’ve a different realm.

Resolver + Realm + User
OTRS-DB + mysql + m.mustermann
AD + LDAP + m.mustermann

-- 

You received this message because you are subscribed to the Google Groups
"privacyidea" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com.
To post to this group, send email to priva...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbelcorneliu
@netknights.it
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
GeschĂ€ftsfĂŒhrer: Cornelius Kölbel

–
You received this message because you are subscribed to the Google Groups
"privacyidea" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com <javascript:>.
To post to this group, send email to priva...@googlegroups.com
<javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/ad56585f-957c-4c79-b424-80aa33ed3fb9%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/ad56585f-957c-4c79-b424-80aa33ed3fb9%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbelcorneliu
@netknights.it <javascript:>
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
GeschĂ€ftsfĂŒhrer: Cornelius Kölbel

I hope so :wink:

I set the policy as follow: otppin=userstore

I tried to login with the following format:

username (e.g. m.mustermann)
passwordOTP

but also
domain\m.mustermann
passwordOTP

both of them failed.

Is it a problem when the mysql and the LDAP-request the user m.mustermann ?Am Mittwoch, 29. April 2015 20:56:22 UTC+2 schrieb Cornelius Kölbel:

It is possible.
Did you configure the correct policy?

https://privacyidea.readthedocs.org/en/latest/policies/authentication.html?highlight=otppin#otppin

Kind regards
Cornelius

Am 29.04.2015 um 20:48 schrieb Stefan Steuer:

Hi Cornelius,
I use the mysql-resolver for a few months and it works fine! Now I want to
add a LDAP-resolver so that the users has to use his password of the active
directory AND the OTP.

But it doesn’t work :frowning: or is it not possible to auth. against the
AD-Password?

You received this message because you are subscribed to the Google Groups
"privacyidea" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com <javascript:>.
To post to this group, send email to priva...@googlegroups.com
<javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/9be2c7f6-0a3c-4923-96ae-aeb10139c860%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/9be2c7f6-0a3c-4923-96ae-aeb10139c860%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbelcorneliu
@netknights.it <javascript:>
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
GeschĂ€ftsfĂŒhrer: Cornelius Kölbel

I tried it with an other user - same issue.

[2015-04-29
21:52:25,039][2693][140378460473088][WARNING][privacyidea.lib.resolvers.LDAPIdResolver:106]
failed to check password for ‘CN=Smith\,
John,OU=Blubb,OU=Domain,DC=Firma,DC=local’/'CN=John\, Smith,OU=Blubb,O$
[2015-04-29
21:52:25,165][2693][140378435294976][WARNING][privacyidea.lib.config:493]
unable to load resolver module : ‘resolvers.SCIMIdResolver’
(ImportError(‘cannot import name getResolverClass’,))Am Mittwoch, 29. April 2015 21:50:07 UTC+2 schrieb Cornelius Kölbel:

Does it only happen to users, with a CN=surname, givenname?

Am 29.04.2015 um 21:38 schrieb Stefan Steuer:

I takes some seconds :smiley: now I’ve got a log.

[2015-04-29
21:36:45,252][2693][140378552792832][WARNING][privacyidea.lib.resolvers.LDAPIdResolver:106]
failed to check password for ‘CN=Mustermann\,
Max,OU=Musterabteilung,OU=Musterfirma,DC=Musterdomain,DC=local’/'CN=Mustermann\,
Max,OU=Musterabteilung,OU=Musterfirma,$
[2015-04-29
21:36:45,409][2693][140378452080384][WARNING][privacyidea.lib.config:493]
unable to load resolver module : ‘resolvers.SCIMIdResolver’
(ImportError(‘cannot import name getResolverClass’,))

Am Mittwoch, 29. April 2015 21:36:21 UTC+2 schrieb Cornelius Kölbel:

Which version are you running?

Am 29.04.2015 um 21:31 schrieb Stefan Steuer:

wrong OTP-Pin :frowning:

Log is empty.

Am Mittwoch, 29. April 2015 21:24:13 UTC+2 schrieb Cornelius Kölbel:

OK,
try first to check with the OTP PIN.
If this is OK, create the policy for this LDAP-Realm(!) use
otppin=userstore.
Please check the log file. (You may increase the debug level) and you
should see the bind to the LDAP.

http://privacyidea.readthedocs.org/en/latest/installation/index.html?highlight=debug#running-privacyidea-with-apache2-and-mysql
set PI_LOGLEVEL=10

Kind regards
Cornelius

Am 29.04.2015 um 21:15 schrieb Stefan Steuer:

Sorry for the confusion.

The AD and the SQL-DB contains both the user m.mustermann. For the
LDAP and mySQL I’ve a different realm.

Resolver + Realm + User
OTRS-DB + mysql + m.mustermann
AD + LDAP + m.mustermann

-- 

You received this message because you are subscribed to the Google
Groups “privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to privacyidea...@googlegroups.com.
To post to this group, send email to priva...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbelcorneliu
@netknights.it
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
GeschĂ€ftsfĂŒhrer: Cornelius Kölbel

–
You received this message because you are subscribed to the Google Groups
"privacyidea" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com.
To post to this group, send email to priva...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/ad56585f-957c-4c79-b424-80aa33ed3fb9%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/ad56585f-957c-4c79-b424-80aa33ed3fb9%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbelcorneliu
@netknights.it
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
GeschĂ€ftsfĂŒhrer: Cornelius Kölbel

–
You received this message because you are subscribed to the Google Groups
"privacyidea" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com <javascript:>.
To post to this group, send email to priva...@googlegroups.com
<javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/e20e93e0-5861-48d3-89b5-c81ce3542192%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/e20e93e0-5861-48d3-89b5-c81ce3542192%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

–
Cornelius Kölbelcorneliu
@netknights.it <javascript:>
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
GeschĂ€ftsfĂŒhrer: Cornelius Kölbel

Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu
YXNjIg0KQ29udGVudC1EZXNjcmlwdGlvbjogT3BlblBHUCBkaWdpdGFsIHNpZ25hdHVyZQ0KQ29u
dGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9InNpZ25hdHVyZS5hc2MiDQoN
Ci0tLS0tQkVHSU4gUEdQIFNJR05BVFVSRS0tLS0tDQpWZXJzaW9uOiBHbnVQRyB2MQ0KDQppUUlj
QkFFQkFnQUdCUUpWUWkvSEFBb0pFQkJoWkZVdWpZRkp5QzBQLzB5dy9BUFQyeXFyUkFBZUpkWHhG
T2hoDQpwTVRlRU9QOUJkbUVUMWZHWDA3WEROcndsbmFkRGV6WDRYWUpaREpQQjlYNkZKUjRPaHhy
YjlWaStYbVR5OVZUDQorRHV3N3lPU1dXVDI3blVwdmJEQnhMSTN2clh2TDFibzRRSGZJTzM0Ni9j
STVNVmV2cVlzdk9MT2ozdkRRVTIyDQpydEYwVVlqZ3Y5aEVMQkpoTi91ZSszY0hqMFZQdDJaL0lh
cEU0V0ttKzFBeERUeExSdzFHeGthMnRWekxyWnZSDQpTR2V4MHYvUW53L2xLZW40b2FRdlpNNGQ1
RytHYmh4N1pGRFN2SUlmSTVZUmJRdlNPT0ZwZjlvemFEdmtmNDREDQpiNk5JUWVNanVQc0QvOFl6
UUJ0cEJ2MFQvaUI5dmZyNnE2Y2RiRERIYlkybDJyL1ZBRGdUamVjTENFTlo2N1Z3DQpBS1RpUS92
ZmJseGE3UnJRZ3o5V0dMeDdCb0FOVUhpM2lNUWgyREluYk82RkpuaDA2WDRXVkxFQnZvakdQZ1Vn
DQp2Z1Q4K3FHdURwY3ZoVHJhVGdXY0c2S0Z2WjdGL3NoK2J6dzhJaHN4RHR0c0p2aWZZdEZ3di9n
UUtRS0w0S0FWDQpsQ3U4OWdBWUVYa0xKdEgzK1dLdUUrcjJMTjZjUlBycFpKQUJkYWROK1VRN05m
TERkbW04NDQ4YWx3VFJCQVkvDQo2L3lVYUkyODhQRnlzLzE3ZHFScGUyRkVJNFAvd2xvNy9ZdzNq
Rk5rM1MyOWNuWllTUnpNSE9vay9ZSWo3ZEtXDQpBcnAyMlpDakVhZFJrcmJnM0o5d0xVRVRrWDZD
cTIwU200TUpuNlYrYzBiY2RFOWY1RWZaNlZsWGlrZVJTNU1UDQp2MlZyTzdPcjY3TzNsT1VmOGF6
Rw0KPVIwT0UNCi0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQ0K

Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu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Hi Cornelius,
we’re using Win2012 for the DC