<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.hoenzb
{mso-style-name:hoenzb;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">We upgraded to 3.3.0 and it is working now with dn_lookup_bind. We bind first with svc-ldap and then bind as the user.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Thank you for the assistance.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> rabbitmq-discuss [mailto:rabbitmq-discuss-bounces@lists.rabbitmq.com]
<b>On Behalf Of </b>Jason McIntosh<br>
<b>Sent:</b> Friday, May 02, 2014 7:22 AM<br>
<b>To:</b> Discussions about RabbitMQ<br>
<b>Subject:</b> Re: [rabbitmq-discuss] RabbitMQ LDAP Configuration<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Active Directory - the only way to do authentication is by bind authentication. Authorization of course is a different discussion. AD doesn't give you direct access to the passwords for users via ldap. <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Jason<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Fri, May 2, 2014 at 8:11 AM, Mark Soderquist <<a href="mailto:SoderquistMV@ldschurch.org" target="_blank">SoderquistMV@ldschurch.org</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal">We definitely need to bind first with svc-ldap, I'm not sure yet whether we bind with the user credentials or just do a lookup. I have to figure that one out.<br>
<br>
We currently have 3.2.4 installed so that makes sense why dn_lookup_bind is not working as expected. We'll update to the latest and give that a try.<br>
<span style="color:#888888"><br>
<span class="hoenzb">Mark</span></span><o:p></o:p></p>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
-----Original Message-----<br>
From: Simon MacMullen [mailto:<a href="mailto:simon@rabbitmq.com">simon@rabbitmq.com</a>]<br>
Sent: Friday, May 02, 2014 2:03 AM<br>
To: Discussions about RabbitMQ; Mark Soderquist<br>
Subject: Re: [rabbitmq-discuss] RabbitMQ LDAP Configuration<br>
<br>
On 01/05/2014 20:04, Mark Soderquist wrote:<br>
> We are<br>
> required to authenticate using the svc-ldap account before making<br>
> queries.<br>
<br>
Just to be clear, are you saying that you want to bind first with svc-ldap to look up a user's DN, before binding with their credentials (which is supported) or that you want to only ever bind with svc-ldap and never with the user's creds (which is not)?<br>
<br>
> We have tried several different configuration options but nothing has<br>
> worked so far. Here is the configuration we thought most likely to<br>
> work:<br>
<br>
<snip><br>
<br>
If you are going for the former choice, that should work. However, from your log it looks like dn_lookup_bind is being ignored. dn_lookup_bind is new in RabbitMQ 3.3.0, so are you using an earlier version?<br>
<br>
Cheers, Simon<br>
<br>
<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"> NOTICE: This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If
you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.<o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">_______________________________________________<br>
rabbitmq-discuss mailing list<br>
<a href="mailto:rabbitmq-discuss@lists.rabbitmq.com">rabbitmq-discuss@lists.rabbitmq.com</a><br>
<a href="https://urldefense.proofpoint.com/v1/url?u=https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss&k=wlPCrglRP6kzT4RbABWMaw%3D%3D%0A&r=x%2BoSSw1f95Au%2BZ5GVcjhyy%2BZIjVIfBi1eHMAQKueqpE%3D%0A&m=SHF9jdT6LhyH%2B15mY2Nq4G361dnX4VWvrzpDBHsGsWg%3D%0A&s=76abe78b7bf4c29713761810bfecc6515c7b171d06022c325fdb2c1913da30d4" target="_blank">https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss</a><o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><br>
<br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">-- <o:p></o:p></p>
<div>
<p class="MsoNormal">Jason McIntosh<br>
<a href="https://urldefense.proofpoint.com/v1/url?u=https://github.com/jasonmcintosh/&k=wlPCrglRP6kzT4RbABWMaw%3D%3D%0A&r=x%2BoSSw1f95Au%2BZ5GVcjhyy%2BZIjVIfBi1eHMAQKueqpE%3D%0A&m=SHF9jdT6LhyH%2B15mY2Nq4G361dnX4VWvrzpDBHsGsWg%3D%0A&s=05cd5c03421a13cd0f248384b6192e568b9c4c1cf6c0216a2e930dfcb5f99cf0" target="_blank">https://github.com/jasonmcintosh/</a><br>
573-424-7612<o:p></o:p></p>
</div>
</div>
</div>
<DIV>
<p class=MsoNormal><span style='font-size:7.0pt';font-family:'"Helvetica","Tahoma","Arial","sans-serif"'><font color="#666666"><br><br> NOTICE: This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.</span><o:p></o:p></span></p><BR>
</DIV></body>
</html>