Pete McDonnell schrieb:
AD Authentication is working OK,
It isn't.
but I have to create an entry in the customer table before a customer can login. That's not a big deal, hopefully that will be working nicely in later versions :-)
It should not be necessary at all.
What's not working is that when I select the Customer User page under the Admin Area I only see the users that I've manually setup. I also get messages such as the following in my system's messages log file. At around 16:40 I changed the user to the Administrator of the AD tree to see if it was a permissions issue that was causing the browsing to fail.
I guess the user you're using to connect isn't equipped with a right's range broad enough. "cn=Pete McDonnell, ou=Users, dc=corp, dc=hiplab2003, dc=com" is probably not capable of reading all the necessary info. Try to create a designated reader user with no write access to any part of the AD tree, but all area read access (yes, except for the passwords). Unfortunately, I cannot tell you how to incorporate such a user, as I luckily do not have to work with AD or stuff like that. I could tell you what code would be necessarily on a regularyl LDAP server based on OpenLDAP, though. Better choice, btw. *scnr* hth, Robert Kehl