I am getting the error below:
ERRO[0079] [AD AUTH] Bind failed for user:
ERRO[0079] [AD AUTH] → Error was: LDAP Result Code 34 “Invalid DN Syntax”: invalid DN
I changed my profiles.json as below to include this:
[{
“ActionType”: “GenerateOrLoginDeveloperProfile”,
“ID”: “5”,
“IdentityHandlerConfig”: {
“DashboardCredential”: “573cb5c7a57deb1f78000001198fa5db868d42ff47dc56fa4a8080fd”
},
“OrgID”: “573cb5c7a57deb1f78000001”,
“ProviderConfig”: {
“FailureRedirect”: “http://portal.tyk-local.com:3000/portal/login/”,
“LDAPAttributes”: [],
“LDAPPort”: “389”,
“LDAPServer”: “localhost”,
“LDAPUserDN”: “cn=*USERNAME*,cn=email,dc=my-domain,dc=com”,
“GetAuthFromBAHeader”: true
},
“ProviderConstraints”: {
“Domain”: “”,
“Group”: “”
},
“ProviderName”: “ADProvider”,
“ReturnURL”: “http://portal.tyk-local.com:3000/portal/sso/”,
“Type”: “passthrough”
}
]
However, when I restart TIB as below:
pradeeban@pradeeban-VirtualBox:~/programs/tib-v0.1$ ./tib
it does not really propagate this.
In the Add IDM Profile option, it gives default params, such as
and
cn=*USERNAME*,cn=dashboard,ou=Group,dc=test-ldap,dc=domain,dc=io
So basically, I manually changed again from the dashboard:
User DN:
cn=*USERNAME*,cn=admin,ou=email,dc=my-domain,dc=com
My LDAP has the below entries:
pradeeban@pradeeban-VirtualBox:~/programs/tib-v0.1$ ldapsearch -x -LLL -H ldap:/// -b dc=my-domain,dc=com dn
dn: dc=my-domain,dc=com
dn: cn=admin,dc=my-domain,dc=com
dn: ou=People,dc=my-domain,dc=com
dn: ou=Groups,dc=my-domain,dc=com
dn: cn=miners,ou=Groups,dc=my-domain,dc=com
dn: uid=john,ou=People,dc=my-domain,dc=com
dn: ou=email,dc=my-domain,dc=com
dn: cn=Pradeeban Kathiravelu,ou=email,dc=my-domain,dc=com
So I guess, I did not give some weird entry to Tyk.
However, I am not very sure about the inclusion of cn=*USERNAME* in the dn in Tyk. Is it what causing the mismatch? Should I add some skeleton to OpenLDAP to reflect this?