Skip navigation
Up to Discussions in Openfire Support
6044 Views 16 Replies Latest reply: Dec 14, 2007 1:52 AM by Jon RSS
Bronze
Jon
31 posts since
Dec 5, 2007
Currently Being Moderated

Dec 5, 2007 1:36 AM

OpenFire Configuration,HelpMe,SOS

 

 

 

 

Hello,Every one:

 

 

    I want to config openfire + Active Directory,   Use the LDAP Guide(http://www.igniterealtime.org/builds/openfire/docs/latest/documentation/ldap-gui de.html)  , I can't connect to the DC,can you help me ? thanks

 

 

    IF you have a step by step document, Please send it to me(chenwq16@hotmail.com) ?thank you very much!

 

 

  • Jonas Silver
    Jonas
    110 posts since
    Oct 19, 2006
    Currently Being Moderated
    Dec 5, 2007 3:23 AM (in response to Jon)
    Re: OpenFire Configuration,HelpMe,SOS

    It would be nice if you provide us at least with an error-report and your config if you need help. A step-by-step guide to this topic is probably not really helpful as there are some things that simply depend on your setup. Besides...the LDAP Guide is mostly Step-by-Step

  • sixthring KeyContributor
    sixthring
    3,797 posts since
    Apr 2, 2007
    Currently Being Moderated
    Dec 5, 2007 6:19 AM (in response to Jon)
    Re: OpenFire Configuration,HelpMe,SOS

     

    There are several guides posted in the community already, as well as many very detailed discussions.  Here are links to 2:

     

     

     

     

     

    http://www.igniterealtime.org/community/docs/DOC-1362

     

     

    http://www.igniterealtime.org/community/docs/DOC-1060

     

     

     

     

     

    Beyond these the LDAP config is fairly straight forward with the setup wizard.  The complexity of LDAP would come from your AD configuration.

     

     

  • Bronze
    Jon
    31 posts since
    Dec 5, 2007
    Currently Being Moderated
    Dec 8, 2007 3:12 AM (in response to Jon)
    Re: OpenFire Configuration,HelpMe,SOS

    Deal all:

     

    I use

     

    BaseDN: cn=Users;dc=sf;dc=com

    AdminDN: cn=Administrator;cn=Users;dc=sf;dc=com

     

    that's OK now , thanks ( the openfire server is DC server)

     

    but , not all users in "cn=Users", most users in "SF-Users" under root directory sf.com?Our architectural like this below:

     

     

    |sf.com

    |

    |-Builtin

    |-Computers

    |-....

    |-SF-Users

    |----|-SF-China

    |----

    |-SF Employes in China

    |----|-SF-American

    |----

    |-SF Employes in American

    |----|-SF-Japan

    |----

    |-SF Employes in Japan

    |----|-....

    |-Domain Controllers

    |-ForeignSecurityPrincipals

    |-Users

    |-....

     

     

    Can somebody help me ,thanks a lot!

    • Jonas Silver
      Jonas
      110 posts since
      Oct 19, 2006
      Currently Being Moderated
      Dec 10, 2007 2:46 AM (in response to Jon)
      Re: OpenFire Configuration,HelpMe,SOS

      in this case just use

       

      BaseDN: dc=sf;dc=com

       

      and restrict access later on with a filter to those OU/CNs or users that you would like to use jabber

      • Bronze
        Jon
        31 posts since
        Dec 5, 2007
        Currently Being Moderated
        Dec 11, 2007 9:22 PM (in response to Jonas)
        Re: OpenFire Configuration,HelpMe,SOS

        Follow you advice, I use:

         

         

         

         

         

        BaseDN:dc=sf;dc=com

         

         

        AdminDN:cn=Administrator;cn=Users;dc=sf;dc=com

         

         

        is ok now,but only under this environment (the openfire server is the DC Server,I create a test domain test.com is ok), But I can not connect to the prod DC Server(sf.com).

         

         

        Can AdminDN didn't use "cn=Administrator"?? For Example, I have create a user named "SF-Admin" in OU "SF-Account", did I can use AdminDN like this:"cn=SF-Admin;cn=SF-Account;dc=sf;dc=com" ?

         

         

        thanks!

        • Jonas Silver
          Jonas
          110 posts since
          Oct 19, 2006
          Currently Being Moderated
          Dec 13, 2007 3:52 AM (in response to Jon)
          Re: OpenFire Configuration,HelpMe,SOS

          Please correct me if I understood you wrong...I think I'm not 100% sure what you mean.

           

          What's your DC Server? Did you mean AD?

           

          If you cannot connect to your prod. server, make sure that it is configured to allow LDAP requests....it looks to me your problem is not caused by openfire but by the way your AD server handles requests (or blocks), especially if you say your test-server works btu the other one not.

          If your totally lost, try wireshark to take a look at what exactly is happening between your servers...this helped me, I got some helpful error descriptions that way

           

          You may use cn=Administrator as long as the cn Administrator has full rights to read the whole tree you need.

           

          If your OU SF-Account is in your Root you'll have to use:

           

          AdminDN :"cn=SF-Admin;ou=SF-Account;dc=sf;dc=com"

           

          as your selfmade OU is indeed an OU not a CN !

More Like This

  • Retrieving data ...

Bookmarked By (0)