LDAP 查询的绑定用户所需的用户权限
我们正在实施 Subversion,但我在 LDAP 身份验证方面遇到了困难,因为我不想使用 DC 的管理员帐户来执行 LDAP 查询,因为那时我还需要在 Apache conf 文件中以纯文本形式指定其密码。
因此,我为此目的创建了一个特殊的 Subversion 用户,使其成为 Authenticated Users 组的成员(正如网络上的许多帖子所提到的,足以执行 LDAP 查询)。
但是,当我尝试测试我想在微软的 LDP 工具中使用的 LDAP 查询时,我得到以下结果:
与管理员绑定:我获得了所有需要的用户(大约 8 个),符合过滤器设置 与 Subversion 绑定:我只获得有限的用户集 (2),不清楚为什么只有这些用户。
我尝试扩展 Subversion 用户组(如管理员、域管理员等),但这不起作用。
有人有什么建议吗?
We are implementing Subversion and i'm struggling with the LDAP authentication because i don't want to use my DC's administrator account to execute the LDAP queries, as then I also need to specify its password in plain text in my Apache conf file.
So I created a special Subversion user for this purpose, making a member of Authenticated Users group (as mentioned in numerous posts across the net for being enough to execute a LDAP query).
But when i try to test the LDAP query i want to use in the LDP tool from microsoft, i get the following results:
Binding with administrator: I get all needed users (around 8), complying with the filter settings
Binding with Subversion: I only get a limited set of users (2), not clear why only those.
I tried expanding the groups of Subversion user (like administrators, domain-admins etc), but that didnt work.
Anyone have any suggestions?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(2)
我自己一定做错了什么,因为从头开始进行所有设置和测试后..一切都有效。我怀疑某个地方有一个打字错误,只是没有引起我的注意。
I must have done something wrong myself, because after starting from scratch with all settings and test .. it all worked. I suspect there was a typo somewhere that just didn't catch my eye.
如果经过身份验证的用户不够,这似乎是一个权限问题。这取决于您的查询的目的,而这不会在问题中显示。
This seems like a permission issue if Authenticated Users is not sufficient. It depends on what your query is for, and this does not show in the question.