troubleshooting LDAP authentication

[KOM]

Sorry, I don't have any other specific solutions as I don't use LDAP auth here.

[mcury]

Try to set this at your smb.conf in your AD, at global parameters
ldap server require strong auth = no

then set a password without any special character

[adamw]

@mcury that didn't help

[adamw]

@KOM

I'm also seeking help on Samba mailing lists and one of Samba guys has asked "It might also help if you can show how pfsense is trying to connect to AD."

Can you provide some more details on what exactly happens to /system_authservers.php -> "Bind credentials" ?

[KOM]

@adamw I'd love to help you but I'm not a coder and I have no idea how any of that works. I was just trying to help with references you might have missed.

[adamw]

I've solved my problem but can't post my (short) reply:

ERROR
Post content was flagged as spam by Akismet.com

[KOM]

I bumped your reputation by 1. Try again.

[adamw]

The harder I try the fussier the antispam engine gets.
Now I can't even post 4 lines with a single code quote, no links or email addresses :(
Maybe I'll let it cool down a bit and try again on Monday.

[KOM]

OK now you're at 5. I think I remember that 5 was the lucky number. Please try again.

[adamw]

LDAP browser tool helped a bit and allowed me to see a more specific error:

[LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1]

After a bit of research I've managed to connect using account@domain.co.uk format in "Bind credentials" username.

This might be worth adding to the pfSense-LDAP troubleshooting guide.