<html>
<head>
<!-- Template generated by Exclaimer Signature Manager Exchange Edition on 01:19:33 Tuesday, 15 February 2022 -->
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<style type="text/css">P.ImprintUniqueID {
MARGIN: 0cm 0cm 0pt
}
LI.ImprintUniqueID {
MARGIN: 0cm 0cm 0pt
}
DIV.ImprintUniqueID {
MARGIN: 0cm 0cm 0pt
}
TABLE.ImprintUniqueIDTable {
MARGIN: 0cm 0cm 0pt
}
DIV.Section1 {
page: Section1
}
</style>
</head>
<body>
<p class="ImprintUniqueID"></p>
<div>AD is a bit of voodoo to me but I recommend Emmanual's suggestion as well. We ended up creating a domain service account "xxxxxxxxconnector" just for this. Be careful with security here as this account is a domain super account (again I'm not an expert
on AD by any means) and a potential attack vector.<br>
<br>
We were able to bind with userPrincipalName (user: "username@company.local"), but things were easier once we switched to sAMAccountName (user: "username").<br>
<br>
Hope this helps,<br>
Dan<br>
<br>
<br>
</div>
<br>
<p></p>
<p class="ImprintUniqueID">
<table class="ImprintUniqueIDTable" style="HEIGHT: 78px; WIDTH: 330px" borderColor="#ffffff" cellspacing="0" cellpadding="0" width="230" border="0">
<tbody>
<tr>
<td style="FONT-SIZE: 9pt; FONT-FAMILY: Verdana; COLOR: #484848; PADDING-BOTTOM: 5px" valign="bottom" nowrap="">
<span style="FONT-SIZE: 9pt; FONT-FAMILY: Verdana; COLOR: #484848"><span style="FONT-SIZE: 13.5pt; FONT-FAMILY: Verdana"><font face="Arial"><font color="#055d8f"><strong><font style="font-size:10pt;">Daniel</font><font size="2"> </font><font style="font-size:10pt;">McCarty</font><br>
</strong></font></font></span><span style="FONT-SIZE: 12pt; FONT-FAMILY: Verdana; COLOR: #484848"><font color="#808080" face="Arial"><strong><font style="font-size:10pt;">Director of Engineering</font></strong></font></span></span></td>
</tr>
<tr>
<td><span style="FONT-SIZE: 12pt; FONT-FAMILY: Verdana; COLOR: #484848"><font color="#808080" size="2" face="Arial">W. H. Leary Co.<br>
<font color="#055d8f">P.</font> +1 708.444.4900</font></span><span style="FONT-SIZE: 9pt; FONT-FAMILY: Verdana; COLOR: #484848"><font color="#808080"><br>
<font size="2"><font color="#055d8f">E.</font> </font><font style="font-family:Arial;font-size:10pt;color:#808080;">danielm@whleary.com</font><font size="2"> |
</font></font><font size="2"><font color="#055d8f">W.</font> </font><span style="font-family:Arial;font-size:10pt;color:#808080;"><a href="http://www.whleary.com" title="" target="" style="font-family:Arial;font-size:10pt;color:#808080;"><span style="font-family:Arial; font-size:10pt; color:#808080;">whleary.com</span></a></span><font size="1" face="Arial"></font></span></td>
</tr>
</tbody>
</table>
</p>
<p class="ImprintUniqueID"><br>
</p>
<div>
<div>-----Original Message-----<br>
From: support-list <support-list-bounces@bugzilla.org> On Behalf Of Emmanuel Seyman<br>
Sent: Tuesday, February 15, 2022 12:44 PM<br>
To: support-list@bugzilla.org<br>
Subject: Re: [External] Issues with LDAP Configuration<br>
<br>
* Agi Joseph [15/02/2022 18:06] :<br>
><br>
> Can I know what is the least access required for the user to bind the<br>
> LDAP from bugzilla. We cannot configure the administrator account on<br>
> bugzilla portal, so required a least permitted user supposed to use<br>
> for the binding<br>
<br>
Note that the DN/password combo you use to bind to the LDAP server does not need to be that of a valid bugzilla user.<br>
<br>
I recommand you create a dedicated account in your AD to use as the bind account in your Bugzilla config.<br>
<br>
Emmanuel<br>
_______________________________________________<br>
support-list mailing list<br>
support-list@bugzilla.org<br>
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.bugzilla.org_listinfo_support-2Dlist&d=DwICAg&c=euGZstcaTDllvimEN8b7jXrwqOf-v5A_CdpgnVfiiMM&r=KfJK_i8bAAiKEOAyAm9y9vt5kSwc8dkKCDiCjPA9mhw&m=g-ZdcS0CauG1eVsHSGKIxfbr5olIkx9uRM4zvxaHE-c&s=aKUf25ydaBVSjpDDXZkiNWIIk50KnyeB331Rdo3-NQ8&e=<br>
</div>
</div>
</body>
</html>