Using AD accounts for web server application

[automater]

Hi all;

We have successfully integrated our AD environment into the OSX 10.5.2 Leopard Server. Authentication into the server works.

My problem now is, I have a web-hosted application running on this XServer. I want users to be able to log into the application using the AD accounts, but it seems that the application is only allowing logins using the default local directory, and none of the AD accounts. I am even able to use the AD security groups and integrate those into the web app, but still, any accounts members of those groups are still not working. What am I missing?

Thanks in advance….

[automater]

Well, it’s a java app. The odd part is that I have the AD successfully applied, and logging into the server with AD accounts work. But in the directory utility it says the server is functioning fine, but the server is not in my authentication policy. This is not the case however, I have it in my authentication search policy, and my contacts search policy. I verified this using the dscl client from the command line. like i said, my app uses all the local accounts no problem, but for some reason won’t authenticate using the search policy.

[automater]

also, if it’s any help, whenever you try to log into the java app from a client workstation, with a username from the AD list, it generates an error message that contains the following in the server admin window:

pps proxy error: dsDoDirNodeAuth = -14091

[Author]

Posts