Need help in setting up LDAP for VCS

[santoshagrawal1]

Hi All, 

  I am trying to setup up LDAP for VCS. Please check my configurations and let me know where I am doing it wrong.I am getting error Invalid bind credentials.

 I have checked the username and password is correct and user has been added to group domain controllers.

[Patrick Sparkman]

Bind DN is the distinguished name (case sensitive) used by the VCS when binding to the LDAP server, and the username is the account that the VCS will use to log in to the LDAP server.

Bind DN: CN=VCS Admin,OU=Users,DC=santagra-lab,DC=local

Bind username: vcsadmin

[santoshagrawal1]

Hi Patrick,

  Still its giving me the same error.

[Patrick Sparkman]

I forgot to check the directory configuration, you have it set to a user, but it should be set point to the OU where either your users that should be able to login are or simply the top level of your AD.

Base DN for accounts: DC=santagra-lab,DC=local

[santoshagrawal1]

Thanks for the response. Now when I disable SASL it becomes available, but when I enable it it fails again. Not sure what could be the issue. All screen shots attached.

  Whats the difference between USER LDAP configuration 
 Configuration --> Authentication --> Devices --> Active Directory Service

[Patrick Sparkman · Accepted solution]

You could use SASL, or if it's working with it disabled, you can do that too.  I had a similar issue sometime back, and simply just disabled the SASL option because that was working at the time.

Users > LDAP configuration: authentication for administrators to login to the VCS.

Authentication > Devices > AD Service: authentication for endpoints when communicating to the VCS.

Note, not all endpoints support AD authentication, only endpoints that I'm aware is the Jabber Video for TelePresence software client.

[santoshagrawal1]

I want to activate NTLM.

   When I try to authenticate it gives me an error :

Failed to join domain: Could not connect to user

Kindly suggest what can be the issue.

  Config of AD and VCS attached.

[Patrick Sparkman]

You have the entire computer FQDN entered as your AD domain, it should just santagra-lab.local.

Take a look at the VCS Authenticating Devices Deployment Guide (X8.7), it has a section that goes over configuring the VCS to authenticate endpoint's to AD.

Also, regarding the LDAP user authentication, take a look at the VCS Authenticating Accounts Using LDAP Deployment Guide (X8.7).