Password Sync with OpenLDAP on Micro Focus (Novell)

Password Sync with OpenLDAP on Micro Focus (Novell)

After much trial and error and some packet sniffing, here is how I got it working.


First, after trying to enter many different formats of domain names and user names, I kept getting the message when trying to update the LDAP configuration in ADSelfService Plus, “An error occurred while trying to configure the OpenLDAP server. Please check your network connection.”


Using Wireshark packet sniffer, I found out ADselfService Plus was trying to connect on port 389 using a simple bind with a password, but would then just give up and stop when it was told THAT wasn’t acceptable, with the reply, “Confidentiality Required”. This was because TLS was required.


I disabled “Require TLS for All Operations” and “Require TLS for Simple Binds with Password”. The document https://support.microfocus.com/kb/doc.php?id=7013279 will tell you how to do that.


Now when saving the OpenLDAP configuration, I finally got, "System configuration updated successfully.”


Giving it a test changing a password in the ADSelfService plus web interface, I got the error “User not found in the OpenLDAP server.” The problem with that was an incorrect Domain Name.

 

Below is what finally worked, changing AD and eDirectory passwords at the same time with the same password.


Assuming an eDirectory tree with the highest-level organization of “myorg”, a user with admin rights named “admin” under that organization, and a Micro Focus (Novell) server running LDAP, named in DNS as “myserver.mydomain.com


Enter this:


System Name / IP Address: myserver.mydomain.com (or the IP address)

Display Name: Micro Focus (This can be anything. It shows as a selectable option when changing passwords.)

Domain Name: o=myorg

User Name: cn=admin,o=myorg

Password: <password of the user “admin”>

LDAP: 389 (if you did not change it on the server)

SSL: 686 (if you did not change it on the server)

Description: <Whatever you like>



                  New to ADSelfService Plus?