Comments (2)
Thanks Kory
It looks like it's a restrictive policy preventing users looking up there own attributes.
Doing a bind with the user to check the password is correct and then using a more privileged account to look up attributes seems to work.
Thanks for getting back to me. Much appreciated!
Simon
from go-ad-auth.
I think this is likely one of two issues.
One of the biggest issues I've seen is not making your BaseDN
big enough. It has to encompass all of the users that would authentciate, but also all of the groups you're using. A lot of the time, this means you need to use the root DN, DC=example,DC=com
. If your group is outside of BaseDN
, you would get the no entries returned
error.
The other issue is if you have more restrictive search policies in place. AuthenticateExtended
will use the authenticating user's bind to search it's own attributes, as well as search for groups it's a part of. If this is the issue, you could try using the v3.0.0
version of this library which doesn't support nested groups. It uses the memberOf attribute instead of searching for groups.
If you need something more bare metal, you can use the Connect
, Bind
, and Search
functions of this library, or use the ldap
library directly.
You would basically have to bind with your standard user to make sure they authenticated properly then re-bind with a privileged user and do your searches.
from go-ad-auth.
Related Issues (13)
- Authenticates multiple passwords HOT 3
- Unable to change password with TLS not enabled in domain
- Unable to change user password if TLS is not enabled in domain HOT 3
- Escape LDAP filter arguments HOT 5
- adauth.AuthenticateExtended call is not returning an expected ldap group HOT 1
- Connection error: LDAP Result Code 2 "Protocol Error": unsupported extended operation HOT 3
- Wrong keyword HOT 1
- Authentication on LDAP over TLS does not work HOT 2
- Thanks for package HOT 1
- LDAP Error : Amount Of Entries Returned was not one. HOT 5
- Get user groups HOT 6
- ObjectGroups HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from go-ad-auth.