Problem with Group Mapping Settings

[hamza_ineos]

Hello

i get this message when i try to add Active directory user "Error: Failed to connect to 172.16.17.5(172.16.17.5):389"

i already enter the ldap information on the ldap profil

[Mick_Ball]

bind looks wrong, it needs to be the distinguished name for the AD server.

CN=administrateur,OU=xxx?,DC=pa,DC=ma

you will get this information from AD, user attributes, DistinguishedName.

[hamza_ineos]

i try with this also with no result

[Mick_Ball]

from CLI..

show user group-mapping state all

and post output.

also   from CLI, can you ping 172.16.7.5

[hamza_ineos]

[BPry]

@hamza_ineos,

You still don't have an OU in your Bind DN which is kind of odd to me. From my knowledge of AD (which isn't awesome) you need to include the OU that this account belongs to. 

[Mick_Ball]

can you post the attribute "distinguished name" for administrateur from within AD..

also... is 172.16.17.2 the management or trusted interface.

[hamza_ineos · Accepted solution]

Thank you brother

i found the solution for this problem, you can see it in the picture

[Mick_Ball]

OK "brother" thats a bit cryptic, so can we assume you changed LDAP to use the custom interface 1/2 and not the default management interface.

[Mick_Ball · Accepted solution]

oops sorry... just noticed you are sending all traffic to AD server via 1/2, not just LDAP.