RE: [External] Issues with LDAP Configuration

Dear Emmanuel,

Can I know the least level permission to required to establish the LDAP bind account, because I tried with a normal AD account but didn’t work getting below error,

" Failed to bind to the LDAP server. The error message was: 80090308: LdapErr: DSID-0C090439, comment: AcceptSecurityContext error, data 52e, v4563"

It seems its required some sort of additional permissions rather than a normal AD account.

Thanks,



Best Regards,

Agi Joseph
Systems & Network Administrator
Global Air Navigation Services LLC
Tel:+971 2 5565233 * 2583
Mob:+971 50 2383530
Email:[email protected]
Web:www.gans.aero


-----Original Message-----
From: support-list <[email protected]> On Behalf Of Emmanuel Seyman
Sent: Wednesday, February 16, 2022 3:05 AM
To: [email protected]
Subject: Re: [External] Issues with LDAP Configuration

* Daniel McCarty [15/02/2022 19:19] :
>
> Be careful with security here as this account is a domain super
> account (again I'm not an expert on AD by any means) and a potential
> attack vector.

Making the account an AD super admin seems unneccesary. If this account is dedicated to letting Bugzilla talk to the directory, you really only need bind and search permissions.

Emmanuel
_______________________________________________
support-list mailing list
[email protected]
https://lists.bugzilla.org/listinfo/support-list
_______________________________________________
support-list mailing list
[email protected]
https://lists.bugzilla.org/listinfo/support-list