We recently converted all authentication for Annatech to point to a dedicated Active Directory server. This required configuring new LDAP authentication for jira.annatech.com, wiki.annatech.com, stash.annatech.com and www.annatech.com to connect to the new Active Directory server.
However, the specific issue with www.annatech.com related to LDAP creation. During new account creation, it looks like the wrong value was being used to create the DN (distinguishedName) attribute. The user DN needs to begin with CN=%Full Name%... However, it was incorrectly setup to use the %username%.
In testing where the username and full name were the same, this presented no issues. But, one of our visitors pointed out, when the username and full name are different, the incorrect configuration created a conflict in the LDAP creation event, causing Active Directory to throw an "invalid DN" error. Once the LDAP creation script was modified to use the full name value in the DN, the issue was resolved.
We will keep a close eye on this since this i s very new setup with a lot of complexity and we want to make sure no other bugs exist... especially ones which might prevent a potential customer from purchasing cAPI.
Thank you for your patience as we work on all the awesome stuff coming up for Annatech and cAPI!
Annatech LLC is not affiliated with or endorsed by the Joomla Project / Open Source Matters, Atlassian Pty Ltd., JetBrains s.r.o, Red Hat or the CentOS Project.