topic Re: Configure both AD and LDAP authentication in SAS in Administration and Deployment

Configure both AD and LDAP authentication in SAS

pedrosantos_key — Wed, 19 Sep 2018 11:59:31 GMT

Hello,

I'm trying to configure both AD and LDAP authentication on a SAS Metadata server.

I'm configuring the sasv9_usermods.cfg like below:

/* Environment variables that describe your Active Diorectory server */
-set AD_HOST "lady2.letest.lu"
-set AD_PORT "389"

-set LDAP_HOST "ldap.letest.lu"
-set LDAP_BASE "ou=ouUsers,dc=letest,dc=lu"
-set LDAP_PORT "389"
-set LDAP_PRIV_DN "uid=XXXX,ou=XXXX,dc=letest,dc=lu"
-set LDAP_PRIV_PW "XXXX"

-authpd (ADIR:letest.lu, LDAP:letest.lu)
-primpd letest.lu

When I restart the metadata server, it doesn't start and return the following error:

ERROR: INVALID OPTION VALUE, FOR SAS OPTION SET

ERROR: INVALID OPTION VALUE, (ADIR:letest.lu, LDAP:letest.lu) FOR SAS OPTION AUTHPROVIDERDOMAIN
ERROR: Unable to assign a domain to the provider (LDAP). The specified domain is already assigned to another authentication provider.

What is wrong here?

Thanks,

Pedro Santos

Re: Configure both AD and LDAP authentication in SAS

JuanS_OCS — Wed, 19 Sep 2018 12:21:34 GMT

Hi Pedro @pedrosantos_key,

so far, and as far as I know, you can configure the SAS Metadata Server to connect to only one authentication system at a time.

Hence, please chose AD or LDAP, but not both.

If you need users from both, you will need to join the trees in a single auth system: AD or LDAP.

Re: Configure both AD and LDAP authentication in SAS

alexal — Wed, 19 Sep 2018 12:28:10 GMT

@pedrosantos_key,

I'm just wondering, what are you trying to achieve? Seems like those servers are in the same domain. If you want to configure authentication from two different domains, you have to use PAM and something like SSSD.