mySQL + LDAP resolver

Hi Cornelius,
I use the mysql-resolver for a few months and it works fine! Now I want to
add a LDAP-resolver so that the users has to use his password of the active
directory AND the OTP.

But it doesn’t work :frowning: or is it not possible to auth. against the
AD-Password?

DC=Domain,DC=local’: Exception(‘Wrong credentials’,)

I know what this mean - but when I try the PIN+OTP there is no field for
the password of the userAm Mittwoch, 29. April 2015 21:54:21 UTC+2 schrieb Cornelius Kölbel:

Am 29.04.2015 um 21:38 schrieb Stefan Steuer:

I takes some seconds :smiley: now I’ve got a log.

[2015-04-29
21:36:45,252][2693][140378552792832][WARNING][privacyidea.lib.resolvers.LDAPIdResolver:106]
failed to check password for ‘CN=Mustermann\,
Max,OU=Musterabteilung,OU=Musterfirma,DC=Musterdomain,DC=local’/'CN=Mustermann\,
Max,OU=Musterabteilung,OU=Musterfirma,$

Could you please also give the rest of this line ^

[2015-04-29
21:36:45,409][2693][140378452080384][WARNING][privacyidea.lib.config:493]
unable to load resolver module : ‘resolvers.SCIMIdResolver’
(ImportError(‘cannot import name getResolverClass’,))

Am Mittwoch, 29. April 2015 21:36:21 UTC+2 schrieb Cornelius Kölbel:

Which version are you running?

Am 29.04.2015 um 21:31 schrieb Stefan Steuer:

wrong OTP-Pin :frowning:

Log is empty.

Am Mittwoch, 29. April 2015 21:24:13 UTC+2 schrieb Cornelius Kölbel:

OK,
try first to check with the OTP PIN.
If this is OK, create the policy for this LDAP-Realm(!) use
otppin=userstore.
Please check the log file. (You may increase the debug level) and you
should see the bind to the LDAP.

2. Installation — privacyIDEA 3.8 documentation
set PI_LOGLEVEL=10

Kind regards
Cornelius

Am 29.04.2015 um 21:15 schrieb Stefan Steuer:

Sorry for the confusion.

The AD and the SQL-DB contains both the user m.mustermann. For the
LDAP and mySQL I’ve a different realm.

Resolver + Realm + User
OTRS-DB + mysql + m.mustermann
AD + LDAP + m.mustermann

-- 

You received this message because you are subscribed to the Google
Groups “privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to privacyidea...@googlegroups.com.
To post to this group, send email to priva...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.


Cornelius Kölbelcorneliu…@netknights.it
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel


You received this message because you are subscribed to the Google Groups
“privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com.
To post to this group, send email to priva...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/ad56585f-957c-4c79-b424-80aa33ed3fb9%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/ad56585f-957c-4c79-b424-80aa33ed3fb9%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.


Cornelius Kölbelcorneliu…@netknights.it
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel


You received this message because you are subscribed to the Google Groups
“privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com <javascript:>.
To post to this group, send email to priva...@googlegroups.com
<javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/e20e93e0-5861-48d3-89b5-c81ce3542192%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/e20e93e0-5861-48d3-89b5-c81ce3542192%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.


Cornelius Kölbelcorneliu…@netknights.it <javascript:>
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel

I tried it with differents formats…

ad-password+OTP
PIN+OTP

every time I’ll get the same issue.

https://lh3.googleusercontent.com/-h20EAtL5XCA/VUE79ibDGcI/AAAAAAAAAFc/GczdGep0prc/s1600/2015-04-29_22h14_55.pngAm Mittwoch, 29. April 2015 22:04:39 UTC+2 schrieb Cornelius Kölbel:

When you try to authenticate you need to enter

<AD-Password><OTP>

Then the system will try to authenticate (bind) to the AD with the

Am 29.04.2015 um 22:03 schrieb Stefan Steuer:

This error code means that the login-credentials are wrong.

But I didn’t enter the credentials - only the PIN+OTP in the backend

Am Mittwoch, 29. April 2015 21:56:37 UTC+2 schrieb Stefan Steuer:

DC=Domain,DC=local’: Exception(‘Wrong credentials’,)

I know what this mean - but when I try the PIN+OTP there is no field
for the password of the user

-- 

You received this message because you are subscribed to the Google Groups
“privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com <javascript:>.
To post to this group, send email to priva...@googlegroups.com
<javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/2ee80b04-39f8-4f59-ba87-2e3427040a36%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/2ee80b04-39f8-4f59-ba87-2e3427040a36%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.


Cornelius Kölbelcorneliu…@netknights.it <javascript:>
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel
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Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu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Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu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Sorry for the confusion.

The AD and the SQL-DB contains both the user m.mustermann. For the LDAP and
mySQL I’ve a different realm.

Resolver + Realm + User
OTRS-DB + mysql + m.mustermann
AD + LDAP + m.mustermann
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Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu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Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu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This error code means that the login-credentials are wrong.

But I didn’t enter the credentials - only the PIN+OTP in the backendAm Mittwoch, 29. April 2015 21:56:37 UTC+2 schrieb Stefan Steuer:

DC=Domain,DC=local’: Exception(‘Wrong credentials’,)

I know what this mean - but when I try the PIN+OTP there is no field for
the password of the user

Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu
YXNjIg0KQ29udGVudC1EZXNjcmlwdGlvbjogT3BlblBHUCBkaWdpdGFsIHNpZ25hdHVyZQ0KQ29u
dGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9InNpZ25hdHVyZS5hc2MiDQoN
Ci0tLS0tQkVHSU4gUEdQIFNJR05BVFVSRS0tLS0tDQpWZXJzaW9uOiBHbnVQRyB2MQ0KDQppUUlj
QkFFQkFnQUdCUUpWUVRYbkFBb0pFQkJoWkZVdWpZRkpTQWtQL1JXNHhwR1RJY3gzWVkvWjBmZkJl
eVQ4DQplcys5aU5CcUkzUzdJQWVUZnlWeVdibndxQ0dSbWlsVFk3UjJ6NjNpVngrWWpmWGxHZXVP
S1gxa09hMjVycEJYDQovV2gxS0h4V2h3Y1BSLzAvQXdMaURaandoaXlsb1ZPV1dlRzJLV043UitM
b1U0VWZnY2NMZmhVR0tzQUtrV3o5DQpYRUJWTDhpNmNkZW1pYWhEcjBsQk5IQmRwcDEyWUZNWVMw
M3JFTXQrdG5IYksyblRJNWZwVDZjSkwyZjFHWGpSDQptK1BKc0VDeXRnWmJaSUVWSlJzQ1hLcXhp
aHZyL2Yrb3ZrOEhZZXhobFFZQXUwcGxBemJBSkR6eTFUR0FjQmx5DQpxRllOd2hlbW00OWZaYW0r
bHRkQlZ6Y0Nnb2F2M1I1UGkvaUZ6V2xKTnNKM3ZHSSthbVpHSzVHTkZubFE3djFTDQpabGlxTkdH
UXYxeDVGNHlKZktkRXR6Ny8vci9YLzZIeWNFV0UyUnJkYldlR1JIQ25iYXVuRHp5KzFUODRvVlBx
DQorTE4yVXg3WFB2QkQ3VU84TWxWcFcydnhDazhtUVpkSU0xVVFDUEk4WmtiZnRIN0V4bFFxOUor
S0xKZjR5QlBEDQpHNEJ5MEwrWmo0ZDlRaE9EcVpSUTFIdDBQdGZxRXEwdEVyZDgyUGN6R0w0eVh6
NWxnTC9IUFVmWEFzU3RNcDFNDQpHV294NDFFczljK05iZndwNEdEdFdLU2FXRktmNVdDOEVERUdG
dkQ2SzVBby90ZWI2bGh2SzQvUVpzMlUvRWc5DQpUNm9yZ09ZRGQrK1BKbG51dTRGTW1pakJoeGxQ
WGwzQjFtMlFlejhNZ3hpSDFEU2x4b2VockVwRGRiblEyT2JhDQptazdFWjBSYTJOSytGaVQyNnZW
Zw0KPXNUdjUNCi0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQ0K

Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu
YXNjIg0KQ29udGVudC1EZXNjcmlwdGlvbjogT3BlblBHUCBkaWdpdGFsIHNpZ25hdHVyZQ0KQ29u
dGVudC1EaXNwb3NpdGlvbjogYXR0YWNobWVudDsgZmlsZW5hbWU9InNpZ25hdHVyZS5hc2MiDQoN
Ci0tLS0tQkVHSU4gUEdQIFNJR05BVFVSRS0tLS0tDQpWZXJzaW9uOiBHbnVQRyB2MQ0KDQppUUlj
QkFFQkFnQUdCUUpWUVRsV0FBb0pFQkJoWkZVdWpZRkptUFFQLzMwYXpXbXNOcnhnNzMwUUdRaGVt
VmpKDQpmV3ZSTlQrcU9MaU9pR0ZnVWpwNGx5amw4bStLM2dsTG02R0s5ZzA4QzhOWm1UYmxPdkVa
WHlWaERaM1RUU2E3DQpGWVYrbVBYQ1JIdnI4b3FibmhhS2dYYThaVXVyUzJrY0tOQUZDL1R0d3BH
QVhMU0R3SGhHbVJNRW1TUzFmb1lCDQpMMGlBUExqQUpmREdZZFpIbzExQjFraG9ZUTg1K1RUUU5w
aml4aUM1b2FERzlFczZFRHU5N1NYRkJKQWZxZW9qDQpiZGl1b1JkNmpTd2hzMEpUQXhjSndPZ0Fk
Znk2UkgrN2R2VFR4U2xMZnppQkY5bUpVWStNZ1dTYkxQbDN1cndqDQpxUitOMG1tU0xFU1BpKzcv
WWhEWXVWcXpFdUFnM01rWlllWUZZcWRqd1UwTmxKVGQ3OVVoQ3lyK0pNUzRvV0tNDQpxQlhKMHFX
enVWcFJIMkpmYytVdkYyTnR6bmdKaTZXV25sSnQvQmV2Q2krUUxLWU5Wb0o1aXdmMXhhYVZpKzdK
DQp0Rk1hU3VSamRROTJyTStUZTJLeVlkK0pWb1JROXdqTkxMTWNnb0pMSUYzdG5uT1oyaDdGY2Ew
Qnc0QXFINEJDDQorWFpsSnp4aXVVbWZzRElwVFdvZlJCb3BYUElheWdsUWg3YVA5UmV6VnpIaFh5
ekZsNjd5aFlhK3JVcllwbk9vDQpoQUY0RTJpK0Q5ZlhIWTArRHBJRDN0ZE1IOExWd0ZxcHFUVkpY
NGxxL0VSNlhNWllvTXAzaHdDN004NG5VVzJ6DQpDWExQbjJSVlJIUk5UeWxZSThXcmlNM0V5QmI0
SjlXRlJ6UHJOTkVITCsybFNuOC9PSFZ1SDZqeWM1bDBwUENSDQpUUlduRzROWE42ZE10UXRRSVoz
QQ0KPUFLKzQNCi0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQ0K

wrong OTP-Pin :frowning:

Log is empty.Am Mittwoch, 29. April 2015 21:24:13 UTC+2 schrieb Cornelius Kölbel:

OK,
try first to check with the OTP PIN.
If this is OK, create the policy for this LDAP-Realm(!) use
otppin=userstore.
Please check the log file. (You may increase the debug level) and you
should see the bind to the LDAP.

2. Installation — privacyIDEA 3.8 documentation
set PI_LOGLEVEL=10

Kind regards
Cornelius

Am 29.04.2015 um 21:15 schrieb Stefan Steuer:

Sorry for the confusion.

The AD and the SQL-DB contains both the user m.mustermann. For the LDAP
and mySQL I’ve a different realm.

Resolver + Realm + User
OTRS-DB + mysql + m.mustermann
AD + LDAP + m.mustermann

-- 

You received this message because you are subscribed to the Google Groups
“privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com <javascript:>.
To post to this group, send email to priva...@googlegroups.com
<javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.


Cornelius Kölbelcorneliu…@netknights.it <javascript:>
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel

I takes some seconds :smiley: now I’ve got a log.

[2015-04-29
21:36:45,252][2693][140378552792832][WARNING][privacyidea.lib.resolvers.LDAPIdResolver:106]
failed to check password for ‘CN=Mustermann\,
Max,OU=Musterabteilung,OU=Musterfirma,DC=Musterdomain,DC=local’/'CN=Mustermann\,
Max,OU=Musterabteilung,OU=Musterfirma,$
[2015-04-29
21:36:45,409][2693][140378452080384][WARNING][privacyidea.lib.config:493]
unable to load resolver module : ‘resolvers.SCIMIdResolver’
(ImportError(‘cannot import name getResolverClass’,))Am Mittwoch, 29. April 2015 21:36:21 UTC+2 schrieb Cornelius Kölbel:

Which version are you running?

Am 29.04.2015 um 21:31 schrieb Stefan Steuer:

wrong OTP-Pin :frowning:

Log is empty.

Am Mittwoch, 29. April 2015 21:24:13 UTC+2 schrieb Cornelius Kölbel:

OK,
try first to check with the OTP PIN.
If this is OK, create the policy for this LDAP-Realm(!) use
otppin=userstore.
Please check the log file. (You may increase the debug level) and you
should see the bind to the LDAP.

2. Installation — privacyIDEA 3.8 documentation
set PI_LOGLEVEL=10

Kind regards
Cornelius

Am 29.04.2015 um 21:15 schrieb Stefan Steuer:

Sorry for the confusion.

The AD and the SQL-DB contains both the user m.mustermann. For the LDAP
and mySQL I’ve a different realm.

Resolver + Realm + User
OTRS-DB + mysql + m.mustermann
AD + LDAP + m.mustermann

-- 

You received this message because you are subscribed to the Google Groups
“privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com.
To post to this group, send email to priva...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.


Cornelius Kölbelcorneliu…@netknights.it
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel


You received this message because you are subscribed to the Google Groups
“privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com <javascript:>.
To post to this group, send email to priva...@googlegroups.com
<javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/ad56585f-957c-4c79-b424-80aa33ed3fb9%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/ad56585f-957c-4c79-b424-80aa33ed3fb9%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.


Cornelius Kölbelcorneliu…@netknights.it <javascript:>
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel

I hope so :wink:

I set the policy as follow: otppin=userstore

I tried to login with the following format:

username (e.g. m.mustermann)
passwordOTP

but also
domain\m.mustermann
passwordOTP

both of them failed.

Is it a problem when the mysql and the LDAP-request the user m.mustermann ?Am Mittwoch, 29. April 2015 20:56:22 UTC+2 schrieb Cornelius Kölbel:

It is possible.
Did you configure the correct policy?

7.3. Authentication policies — privacyIDEA 3.8 documentation

Kind regards
Cornelius

Am 29.04.2015 um 20:48 schrieb Stefan Steuer:

Hi Cornelius,
I use the mysql-resolver for a few months and it works fine! Now I want to
add a LDAP-resolver so that the users has to use his password of the active
directory AND the OTP.

But it doesn’t work :frowning: or is it not possible to auth. against the
AD-Password?

You received this message because you are subscribed to the Google Groups
“privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com <javascript:>.
To post to this group, send email to priva...@googlegroups.com
<javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/9be2c7f6-0a3c-4923-96ae-aeb10139c860%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/9be2c7f6-0a3c-4923-96ae-aeb10139c860%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.


Cornelius Kölbelcorneliu…@netknights.it <javascript:>
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel

I tried it with an other user - same issue.

[2015-04-29
21:52:25,039][2693][140378460473088][WARNING][privacyidea.lib.resolvers.LDAPIdResolver:106]
failed to check password for ‘CN=Smith\,
John,OU=Blubb,OU=Domain,DC=Firma,DC=local’/'CN=John\, Smith,OU=Blubb,O$
[2015-04-29
21:52:25,165][2693][140378435294976][WARNING][privacyidea.lib.config:493]
unable to load resolver module : ‘resolvers.SCIMIdResolver’
(ImportError(‘cannot import name getResolverClass’,))Am Mittwoch, 29. April 2015 21:50:07 UTC+2 schrieb Cornelius Kölbel:

Does it only happen to users, with a CN=surname, givenname?

Am 29.04.2015 um 21:38 schrieb Stefan Steuer:

I takes some seconds :smiley: now I’ve got a log.

[2015-04-29
21:36:45,252][2693][140378552792832][WARNING][privacyidea.lib.resolvers.LDAPIdResolver:106]
failed to check password for ‘CN=Mustermann\,
Max,OU=Musterabteilung,OU=Musterfirma,DC=Musterdomain,DC=local’/'CN=Mustermann\,
Max,OU=Musterabteilung,OU=Musterfirma,$
[2015-04-29
21:36:45,409][2693][140378452080384][WARNING][privacyidea.lib.config:493]
unable to load resolver module : ‘resolvers.SCIMIdResolver’
(ImportError(‘cannot import name getResolverClass’,))

Am Mittwoch, 29. April 2015 21:36:21 UTC+2 schrieb Cornelius Kölbel:

Which version are you running?

Am 29.04.2015 um 21:31 schrieb Stefan Steuer:

wrong OTP-Pin :frowning:

Log is empty.

Am Mittwoch, 29. April 2015 21:24:13 UTC+2 schrieb Cornelius Kölbel:

OK,
try first to check with the OTP PIN.
If this is OK, create the policy for this LDAP-Realm(!) use
otppin=userstore.
Please check the log file. (You may increase the debug level) and you
should see the bind to the LDAP.

2. Installation — privacyIDEA 3.8 documentation
set PI_LOGLEVEL=10

Kind regards
Cornelius

Am 29.04.2015 um 21:15 schrieb Stefan Steuer:

Sorry for the confusion.

The AD and the SQL-DB contains both the user m.mustermann. For the
LDAP and mySQL I’ve a different realm.

Resolver + Realm + User
OTRS-DB + mysql + m.mustermann
AD + LDAP + m.mustermann

-- 

You received this message because you are subscribed to the Google
Groups “privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send
an email to privacyidea...@googlegroups.com.
To post to this group, send email to priva...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/840e5d75-b4d1-44e5-8e30-da73d1bee55f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.


Cornelius Kölbelcorneliu…@netknights.it
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel


You received this message because you are subscribed to the Google Groups
“privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com.
To post to this group, send email to priva...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/ad56585f-957c-4c79-b424-80aa33ed3fb9%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/ad56585f-957c-4c79-b424-80aa33ed3fb9%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.


Cornelius Kölbelcorneliu…@netknights.it
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel


You received this message because you are subscribed to the Google Groups
“privacyidea” group.
To unsubscribe from this group and stop receiving emails from it, send an
email to privacyidea...@googlegroups.com <javascript:>.
To post to this group, send email to priva...@googlegroups.com
<javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/privacyidea/e20e93e0-5861-48d3-89b5-c81ce3542192%40googlegroups.com
https://groups.google.com/d/msgid/privacyidea/e20e93e0-5861-48d3-89b5-c81ce3542192%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.


Cornelius Kölbelcorneliu…@netknights.it <javascript:>
+49 151 2960 1417

NetKnights GmbHhttp://www.netknights.it
Landgraf-Karl-Str. 19, 34131 Kassel, Germany
Tel: +49 561 3166797, Fax: +49 561 3166798

Amtsgericht Kassel, HRB 16405
Geschäftsführer: Cornelius Kölbel
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Q29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9wZ3Atc2lnbmF0dXJlOyBuYW1lPSJzaWduYXR1cmUu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Hi Cornelius,
we’re using Win2012 for the DC