By: Andrew Cassera user 28 Jan 2021 at 8:36 p.m. CST

9 Responses
Andrew Cassera gravatar
I added an additional LDAP server to the default LDAP server. After I did this I am getting an error that I cannot even log into oxtrust UI. Where can I look to delete the new LDAP server configuration added if I cannot use the ui. This does not appear to be clear in the documentation. Basic on other tickets that I have read after doing this it appears that I can only run a single LDAP server for Authentication. Is this a correct assumption. In other words is there a way to provide LDAP sync across multiple different LDAP servers?

By Michael Schwartz Account Admin 28 Jan 2021 at 8:55 p.m. CST

Michael Schwartz gravatar
You'll probably have to update one of the attribute values under `ou=configuration,o=gluu`. You can use "Cache Refresh" to sync the user information across multiple LDAP servers. See [https://gluu.org/docs/gluu-server/4.2/user-management/ldap-sync/](https://gluu.org/docs/gluu-server/4.2/user-management/ldap-sync/) If you can't sync the `userPassword` attribute, you could authenticate against multiple LDAP servers with a person authentication interception script. See the `basic.multi_auth_conf` in [https://github.com/GluuFederation/oxAuth/tree/master/Server/integrations](https://github.com/GluuFederation/oxAuth/tree/master/Server/integrations)

By Andrew Cassera user 28 Jan 2021 at 9:23 p.m. CST

Andrew Cassera gravatar
Thank you for the quick response, I have cache refresh working in a test environment so I will add the password attribute. As for getting back into the UI how can I delete the added LDAP server to restore the default LDAP server as the primary auth.

By Vadim Saratovtsev user 29 Jan 2021 at 9:41 a.m. CST

Vadim Saratovtsev gravatar
As far as not being able to login to the UI after adding the second server; can check what are seeing in the OXTrust logs? For addint the second server, can you check in the 'dsconfig' configuration? After logging on to the dsconfig utility please check the option 32 and 33. Do you see both servers configured under option 33-3 (View and Edit the Replication Server)? Under option 32-1 do you see this new server as well as old ones? Let me know if all information about that added server is true and correct. We can work to remove it and add the new LDAP server into the replication pool.

By Andrew Cassera user 30 Jan 2021 at 2:03 p.m. CST

Andrew Cassera gravatar
I cannot log into the dsconfig utility I am getting the following: >>>> Specify OpenDJ LDAP connection parameters Directory server hostname or IP address [localhost]: Directory server administration port number [4444]: Unable to connect to the server at "localhost" on port 4444

By Michael Schwartz Account Admin 30 Jan 2021 at 2:35 p.m. CST

Michael Schwartz gravatar
You sure your ldap server is running? `# ps -ef | grep ldap` from within the container. In a worst case scenario... re-install.

By Andrew Cassera user 30 Jan 2021 at 5:49 p.m. CST

Andrew Cassera gravatar
I will reinstall.

By Andrew Cassera user 03 Feb 2021 at 9:14 p.m. CST

Andrew Cassera gravatar
Okay I reinstalled the server. I followed the instruction for installing the basic.multi_auth_conf script. I created the multi_auth_conf.json file. When I enable the basic_multi_auth_conf script I get the following error https://pastebin.com/ex6jHEcp I also tried to add another LDAP server under Manage LDAP authentication. I tested the AD server with success but I cannot authenticate against the server when I tried to authenticate one of the users. I change the default authentication method for Authentication mode and oxTrust authentication mode to this AD server. I do have cache refresh working against that AD server as well. What I am trying to do is eventually use multiple AD server for different organizations as the source of truth for users. I then want to be able to use the gluu platform for 2fa for the radiator plugin authentication. I am now confused how this may work if I cannot auth against the AD server. What am I missing on this methodology.

By Mohib Zico staff 10 Apr 2021 at 11:11 p.m. CDT

Mohib Zico gravatar
Basic multi auth failing. Github issue [created](https://github.com/GluuFederation/oxAuth/issues/1531).

By Mohib Zico staff 25 Apr 2021 at 10:15 a.m. CDT

Mohib Zico gravatar
New patched script published. Basic multi auth working now.