ldap-sync with ms chap v2 authentification

Volker Stoppe Grenzlaeufer at gmx.net
Thu Jan 31 11:08:33 CET 2008


Hallo together,

I want to sync oder just transfer the kolab user to a win2003 active  
directory to integrate them better into outlook. The authentification on  
the windows site is done by kerberos/ms chap v2. Is it possible to  
authenticate from the linux site with such a server?
How do I configure it.


At the moment I get from the "python ldapsync.py" an error-messge.
The Base looks like:
ad_base_dn = "dc=AD001,dc=company,dc=tld"
kolab_base_dn = "dc=company,dc=tld"

Can anybody tell me in which line of the config.py to look for the wrong  
syntax?

Traceback (most recent call last):
   File "ldapsync.py", line 137, in main
     sync_ldap_servers()
   File "ldapsync.py", line 86, in sync_ldap_servers
     perform_sync()
   File "ldapsync.py", line 62, in perform_sync
     T.transfer()
   File "/opt/ldap-sync/transferrer.py", line 146, in transfer
     source_data = self.read_ldap(self.source, self.source.user_search)
   File "/opt/ldap-sync/transferrer.py", line 187, in read_ldap
     return dict(server.search(search, attrlist=attrlist))
   File "/opt/ldap-sync/transferrer.py", line 90, in search
     conn.simple_bind_s(self.bind_dn, self.bind_pw)
   File "/usr/lib64/python2.5/site-packages/ldap/ldapobject.py", line 199,  
in simple_bind_s
     return self.result(msgid,all=1,timeout=self.timeout)
   File "/usr/lib64/python2.5/site-packages/ldap/ldapobject.py", line 428,  
in result
     res_type,res_data,res_msgid = self.result2(msgid,all,timeout)
   File "/usr/lib64/python2.5/site-packages/ldap/ldapobject.py", line 432,  
in result2
     res_type, res_data, res_msgid, srv_ctrls =  
self.result3(msgid,all,timeout)
   File "/usr/lib64/python2.5/site-packages/ldap/ldapobject.py", line 438,  
in result3
     rtype, rdata, rmsgid, serverctrls =  
self._ldap_call(self._l.result3,msgid,all,timeout)
   File "/usr/lib64/python2.5/site-packages/ldap/ldapobject.py", line 97,  
in _ldap_call
     result = func(*args,**kwargs)
INVALID_DN_SYNTAX: {'info': 'invalid DN', 'desc': 'Invalid DN syntax'}


Greetinx

Volker




More information about the users mailing list