TracLDAPAuth fails with MS AD if login != CN

[anonymous]

TracLDAPAuth is not work if login name is not same as CN. The error is: invalid name or password. But TracLDAPAuth is working fine if login name is same as CN=%s. So I guess that TracLDAPAuth works fine assuming login == CN and given to failure.

[Russell Ballestrini]

That is not true I have it working. Our usernames are flastname but our CN is lastname\, firstname

You need to figure out your search filter to get this to work.

host_url = ad server
base_dn = the DN all your valid users should be part of
bind_user = user@domain
bind_password = 
search_scope = subtree
search_filter = (&(objectClass=user)(sAMAccountName=%s))

Our "usernames" are really the sAMAccountName, so we need the search_filter

[Nikolaos Papagrigoriou]

Replying to anonymous:

TracLDAPAuth is not work if login name is not same as CN. The error is: invalid name or password. But TracLDAPAuth is working fine if login name is same as CN=%s. So I guess that TracLDAPAuth works fine assuming login == CN and given to failure.

I guess you deployed the latest release found here:

source:/tracldapauthplugin/tags/1.2/​

Did you manage to solve your problem by changing the search filter as Russel suggested?