Ldap external httpd configuration

[posttoashok]

Hi,

I am setting up of new MIQ and doing the configuration related to Ldap external httpd authentication.

In our lab we are using Windows AD and like to integrate with MIQ for the AD authentication based on the AD Group.

Just I followed this doc https://www.manageiq.org/docs/reference/latest/auth/ldap.html.

Did all listed configuration, but still no go.
Just giving some input what is did

1. /etc/openldap/cacerts/apacheds-cert.pem, used AD root CA for this apacheds-cert.pem
2. ldapsearch able to do with -D "ui=:userid,ou=People,dc=example,dc=com" -w :password
3. did sssd configuration as suggested in this portal https://www.manageiq.org/docs/reference/latest/auth/ldap.html.
4. Reamining all the steps arae followed with refer to the https://www.manageiq.org/docs/reference/latest/auth/ldap.html.

Here my question is Let me know here were we are configuring bind id and bind password ?

Error:
In /var/www/miq/vmdb/log/audit.log
Authentication failed for userid user1@lab.com: User not know to the underlying authentication module

In /var/log/sssd/sssd_default.log
In order to perform this operation a successful bind must be completed on the connection.

I am not sure what I missed here and looks like something related to bind id and password configuration think so . But I cant able to find any documents related to this bindid and password configuration.

Thanks in Advance

[Fryguy]

There are some helpful blogs in here: https://www.manageiq.org/blog/tags/tutorials/, in particular this one on Troubleshooting Authentication: https://www.manageiq.org/blog/2018/01/troubleshooting-auth/. See if those can help you out.

[posttoashok]

Hi,
I am just referring this https://www.manageiq.org/blog/2017/09/miqldap-to-sssd/#the-other-miqldap_to_sssd-arguments
From where can I download this miqldap_to_sssd script ? Can you help to share download link please.

[Fryguy]

It should be already on the appliance in the /var/www/miq/vmdb/tools directory. In newer versions it was renamed to miq_config_sssd_ldap after we removed support for MiqLdap