regarding Authentication

we have setup new LDAP servers and the DIT in this looks in this way..

under the main root ,dc=company,dc=com, we have separate OU's for Associates,contractors, and vendors(we have some vendors from our partners).

The other day we were trying to setup an application to authenticate against this newly built LDAP.. For this..in the setting page of the Application, when the base DN for the authentication was set as

dc=company,dc=com...(its a Basic authentication scheme).....

and we try to authenticate ,we got the result "No such object found"

BUt when i changes the base DN for the search to "ou=contractors,dc=company,dc=com" .(As the tested user was in ou=contractors in the New LDAP)...The authentication was successful.

The thing am not getting is "why is the first attempt of Authentication was an Unsuccessful...because the search should stil be able to find the user entry under the base DN.dc=company,dc=com...?

we dont have any OU=people( As this is suggested in the DOCS ) under which generally all the users are kept..SUggestiong would be greatly helpful...

Regards

[1139 byte] By [anandkaturia] at [2007-11-27 10:23:26]
# 1

It sounds like your application is limiting search scope. You should look at your Directory Access Log to see the search the application is performing.See if you have a setting in your application to tell it to do subtree searches. You will need to perform subtree searches if your base is not the same as your people container.

Eric

erk14485a at 2007-7-28 17:21:54 > top of Java-index,Web & Directory Servers,Directory Servers...
# 2

Thnks for the reply..i appreciate it...

anandkaturia at 2007-7-28 17:21:54 > top of Java-index,Web & Directory Servers,Directory Servers...