Hi Humberto Am 27.07.20 um 12:59 schrieb Humberto Blanco Castillo:

Hi for all, We are trying to connect koha to LDAP, but appears as credentials its not working, and cant fount what the problem its. this configuration works fine in production environment in version 3.16

Follow are the paras in the /etc/koha/sites/catalogo/koha-conf.xml file

<useldapserver>1</useldapserver> <ldapserver id="ldapserver" listenref="ldapserver"> <hostname>ldap://ourldapServer:389</hostname> <base>DC=University,DC=EDU</base> <user>CN=ldap_user,OU=Cuenta de servicio,DC=University,DC=EDU</user> <pass>myPassword</pass> <replicate>1</replicate> <update>0</update> <auth_by_bind>1</auth_by_bind> <anonymous_bind>0</anonymous_bind> <update_password>0</update_password> <principal_name>%s@urosario.edu.co <mailto:s@urosario.edu.co></principal_name> <mapping> <firstname is="givenName" ></firstname> <surname is="sn" ></surname> <userid is="cn"></userid> <email is="mail"></email> <phone is="telephonenumber"></phone> <cardnumber is="postOfficeBox"></cardnumber> </mapping> </ldapserver>

We test the connection from the command line, so: export PERL5LIB=/usr/share/koha/lib/ && export KOHA_CONF=/etc/koha/sites/catalogo/koha-conf.xml && perl /usr/share/koha/opac/cgi-bin/opac/opac-user.pl <http://opac-user.pl> userid=humberto.blanco password=password_for_humberto.blanco

and gets the following error: LDAP bind failed as kohauser humberto.blanco: LDAP error #49: LDAP_INVALID_CREDENTIALS# The wrong password was supplied or the SASL credentials could not be processed

You may try with: <auth_by_bind>0</auth_by_bind> <anonymous_bind>0</anonymous_bind>

Does no matter what kind of information i put on the password field, ever gets the same error.

However you will always need to supply the CORRECT password! Otherwise you'll get a message like the following even with the above suggested change: LDAP bind failed as kohauser xxx: LDAP error #34: LDAP_INVALID_DN_SYNTAX # The request contained an invalid DN Also maybe the comments on the bug https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=18947 may be interesting to you. If you are using Windows Server Active Directory (instead of e. g. Open LDAP) you may find other surprising behaviour. Hope this helps. Best wishes: Michael -- Geschäftsführer · Diplombibliothekar BBS, Informatiker eidg. Fachausweis Admin Kuhn GmbH · Pappelstrasse 20 · 4123 Allschwil · Schweiz T 0041 (0)61 261 55 61 · E mik@adminkuhn.ch · W www.adminkuhn.ch