• adamkolenda

    (@adamkolenda)


    Hi Andreas,

    Thanks for great plugin.

    I however struggle with its configuration for the windows Active Directory authentication. When I try to login with one of pre-created test AD account I receive following error message “Unknown username. Check again or try your email address”

    I guess this means that plugin cannot connect to AD server to verify the existence of the test account. I conclude that the problem lies with the URI string which do be honest is not completely clear to me following the guidance provided on the configuration page.

    According to it string should look as follows:
    ldap://uid=adminuser,dc=example,c=com:secret@ldap.example.com/dc=basePath,dc=example,c=com.

    I’ve entered some test information just to present your with the string format I receive:

    ldap://uid=MyYsername,DC=ABC,DC=ACD,DC=ADE:mypassword@abc.acd.ade/DC=abc,DC=acd,DC=ade

    Would you be able to advise whether there is something explicitly wrong with my URI string and this is why I experience this problem?

    Many thanks in advance!

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author heiglandreas

    (@heiglandreas)

    Hey. Due to health issues I won’t be able to dig into this any deeper before the 6th of April.

    Meanwhile you could ask your AD Administrators whether they can give you more information on whether that URI is plausible from their side

    Cheers

    Thread Starter adamkolenda

    (@adamkolenda)

    Thanks for your prompt response Andreas,

    This is much appreciated and understandable. Hope you get better soon!

    The things is that the AD Administrators have been involved from the beginning and while they able to provide required parameters individually (things work when integrated using another plugin but the plugin is not as versatile as yours and does not support roles mapping), and the problems seems to appear when the URI is being put together as so far we have not managed to get it working even with it simplest functionality and error message suggest we are not even able to connect to the AD server.
    I’m therefore pretty sure that the problem is in the URI sting and we have tried various combinations without a luck.

    Anyway I will work with AD team in the meantime to try to crack it, but if no luck I will await until the 6th for your further guideline.

    Many thanks in advance!

    Thread Starter adamkolenda

    (@adamkolenda)

    Hi Andres,

    I hope that you are feeling better now?
    I wonder if potentially you will have time to look into this problem in more detail some time this week?

    Thanks!

    Paul Distel

    (@pauldistel)

    Hi Adam,

    Busy with the same. I got it working with the below LDAP URI:

    ldap://<username>:<password>@active.directory.domain:3268/dc=accounts,dc=active,dc=directory,dc=domain

    Where username and password is an account with read permissions in the domain active.directory.com and the domain to be queried (accounts.active.directory.domain) is specified in distinguished form. I have a child domain in which the normal user accounts exists and I use an account of the parent domain to query it.

    Other settings used:

    Filter: (samAccountname=%s)
    Name-Attribute: firstname
    Second Name Attribute: surname
    User-ID Attribute: samAccountname
    Mail Attribute: mail

    I myself have another issue!

    I want to use WordPress role to group mapping. So I configured some roles with groups existing in my Active Directory. The problem now is that in the beginning I did not have the role administrator mapped to an AD group but only 2 other custom roles were configured. When I logged on using administrator, the administrator role was removed from the user and I locked myself out. I did manage to restore the account and created an additional administrator account (which does not exist in the AD!). I also created a group in AD for WP administrators and specified that for the administrator role. Still the role is deleted when I login as administrator and it is assigned the contributer role. Not a clue right now how to solve this and I wanted to post this issue when I saw yours…

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Unknown username. Check again or try your email address.’ is closed to new replies.