TMS PE and OpenLDAP

[Krzysztof Pieron]

Hello,

We have problem with authorization the Jabber's (Movi) users from LDAP database.

The synchronization between LDAP and TMS is working very well, but any user can't sign in - it's look like, the problem is with passwords.

When I changed the password manually in TMS, everything is ok.

Do You have any special scheme for LDAP and Provisioning users? Or maybe, we need to use any other encription for passwords then md5/clear?

Thanks,

[aborodai · Accepted solution]

Hello Krzysztof,

Import form LDAP to the TMS is working fine, but it will create just accounts in TMS. Authentication happens on VCS and VCS can send authentication requests only to AD.

In your case you should create manually passwords for all users and send emails to them with credentials or connect TMS and VCS to the MS Active Directory.

Best Regards,

Artem Borodai

[Krzysztof Pieron]

Artem,

Thank You so much for your response.

It's impossible to manually change/create passwords, AD also. Any other idea? ;-)

[aborodai]

Then you can go to the Administrative tools-Configuration-Provisioning Extension settings and enable Password Generation.

Passwords will be automatically generated for imported users.

Best Regards,

Artem Borodai

[Martin Koch · Accepted solution]

Also LDAP can be used to authenticate users, have it running here with the legacy mode

and it might be possible to do the same with TMS PE.

On TMS PE the local authentication DB gets populated that could cause issues.

On the other hand TMS can not import passwords, ... I think the password handling

is really not the biggest strength of Jabber Video, ...

Anyhow, authentication can be done via a h350 directory, you would need to have

passwords in clear text which is not so great neither. Not sure if MD5 hashes could work as well.

So if you have full control over your users and cleartext passwords its possible to generate

one ldap tree for your users to get imported (the password does not matter here) by TMS and

one h350 for the VCS.

The other option is just to let TMS create a password and send this password to the user via the email function.

But you will not be able to syncrhonze the password from some other source.