Group.Read.All Permissions Error

[lamb93]

I am getting an error when attempting to use GroupMember.Read.All - Application level permission on the LDAP Wrapper. I am using this permission instead of Group.Read.All as my company will not allow us to use Group.Read.All as it is too intrusive. Will GroupMember.Read.All work instead?

[ahaenggli]

It would be easiest if you could just try it out.

[lamb93]

So it's working but I'm getting DNS errors when I try to complete the LDAP Bind.

[ahaenggli]

You have followed the instructions and now receive which message for which step exactly?

[lamb93]

So when I start the container it is restarting every 15 seconds. I am not able to get it to stay online. I am getting the attached errors.

ldap-wrapper-1-ver6-1.csv

[lamb93]

And yes, I followed the instructions you linked.

[ahaenggli]

thx for the log :) is the internet access blocked in any way? Maybe a proxy has to be used?

[lamb93]

That might be it. I am going to test in a location where we have more open outbound. I will let you know if I still have these errors. Thank you for the help so far!

[lamb93]

So I got the network issue resolved. Now I am getting an error on the LDAP Check Authentication when I am attempting to bind. The username and password are correct; when I click details it mentions something about a certificate. Is there something I am missing here?

[ahaenggli]

can you add the exact error message?

[lamb93]

[ahaenggli]

Try writing “uid=ldapwrapperbind” (I assume the user is set in the corresponding env var)

[lamb93]

same error

[ahaenggli]

You are using the user ldapsearch this time. In the last printscreen it was ldapwrapperbind. Which one did you set in your env var?
You can also set the env var for debugging to true, this way you maybe get a hint in the log.

[lamb93]

we created a new container to ensure we hadn't missed any steps. The ldapsearch user is the one that is set in this container. I have attached the error log. I can't see anything that jumps out at me in the log.

ldap-wrapper-1-ver8-1.xlsx

[ahaenggli]

there are some error while trying to save the file azure.json. does the file exist in the mapped folder?
if not, did you choose the /docker/...ldap... path or something custom for the mapped folder? if you use some custom paths, make sure docker or everyone has read/write access.

[lamb93]

It is mapped, and has permissions, but there is nothing in the mapped folder...

[ahaenggli]

Currently only read seems to be possible. In your 2nd printscreen, change everyone to read & write.