I have LDAP authentication working such that Active Directory (AD) users can authenticate with a Domino web application. I’ve configured Directory Assistance and added the AD fully distinguished name to the database ACL, and authentication works, but only if the user logs in with their fully distinguished LDAP name at the login page - Eg:
I want the users to be able to authenticate by simply providing their common name (CN) or account name. What am I missing? Do I need an authentication or authorization filter? If so, what should I specify in those fields? I’ve tried a few things, but nothing worked. Or should I be specifying another base DN for searching?
Am very close to getting this working, and I’ve combed the posts in this forum but can’t seem to find an exact answer.
Subject: LDAP to AD, authentication working with full LDAP name but not CN
I have LDAP authentication working such that Active Directory (AD) users can authenticate with a Domino web application. I’ve configured Directory Assistance and added the AD fully distinguished name to the database ACL, and authentication works, but only if the user logs in with their fully distinguished LDAP name at the login page - Eg:
I want the users to be able to authenticate by simply providing their common name (CN) or account name. What am I missing? Do I need an authentication or authorization filter? If so, what should I specify in those fields? I’ve tried a few things, but nothing worked. Or should I be specifying another base DN for searching?
Am very close to getting this working, and I’ve combed the posts in this forum but can’t seem to find an exact answer.
Please see ID107: Getting Started With Active Directory Integration. Slide 30 shows what you are trying to achieve. For the base DN setting, see slide 29.
After reading the above, if you have further questions, include in you post whatever concise DA settings you can disclose.
This and other Domino directory references appear in the “Domino Directory FAQ” (google it).