This post is more than 5 years old
1 Rookie
•
64 Posts
0
924
October 12th, 2016 11:00
OneFS 8.0.0.2 LDAP Setup and Issue with "Email Address" field
We're still setting up our Isilon and getting ready to migrate data, and I've been trying to get LDAP authentication working even though we're not planning to use LDAP at this time (we'll be using NIS to start, then AD at some point, and both are working as expected right now). I have a case open with Support and they assisted with some of my initial LDAP issues, but so far not with this "Email Address" field issue and this is sort of bugging me because this is the one field that should be really straightforward and mostly standard.
The problem is that the "Email Address" field part of User Information never has a value no matter what attribute I set up in Advanced LDAP Settings for "Email Attribute". We certainly do have the 'mail' attribute available and readable by the account doing the bind, but Email Address for every user is always "No value". In troubleshooting, I made EVERY attribute 'mail' that I could (UID and GID are the only exceptions since they throw errors when using 'mail') and I can see the user's email address as the User Name, Full Name, Home Directory and SAM account name. But Email Address is still No Value. Can anyone explain why I'm seeing this or confirm that it is working for you? I can't find any documentation that specifies exactly what "Email Attribute" in Advanced LDAP Settings is but common sense suggests that field would map to Email Address, yeah? See pics below:
0 events found
sjones51
252 Posts
0
October 18th, 2016 08:00
Hi Ryan_CSULB,
It is my understanding that Isilon Support is aware of the issue and has escalated it. It sounds like the issue is a display problem within webui. If you use the command line, you should be able to see the information correctly.
#isi auth users view
Ryan_CSULB
1 Rookie
•
64 Posts
0
October 18th, 2016 09:00
Thanks sjones5, I did receive an initial response to my SR at the end of last week along those same lines and am awaiting confirmation. Even with this GUI issue, I still may not have my LDAP correctly set up 100% yet, because I can't pull back anything from the isi auth user command line when I specify LDAP as the provider. No matter what I use for User or UID, it's always "no such user" even though I'm looking at the user in the GUI and I can pull back users and attributes via ldapsearch on the command line. I can pull back specific users via "isi auth user view" when selecting AD as the provider, so I know that is working.
For now I am fine with waiting, as LDAP is not critical for us and we are on OneFS 8. Hopefully this post may help someone else.