Base DN not allowed to be empty, but IBM Lotus Domino LDAP stores groups in root of tree [#357363]

An empty Base DN causes the code to abort LDAP authentication (ldapauth.module line 425). But some LDAP arrangements need an empty Base DN

Example: LDAP Integration module works with Lotus Domino (8) LDAP perfectly. However Domino installations might have groups defined in the root of the LDAP so the BaseDN needs to be empty.

Workaround: I had to put a "space" character in the Base DN in the settings page. That tricked it into using an empty BaseDN.

Comments

Comment #1

miglius commented 29 January 2009 at 17:46

Component:

Code

» Documentation

Comment #2

richguynextdoor commented 3 February 2009 at 22:06

I had a similar problem with the database requiring a value for the Base DN and the "space" work-around didn't work for me. (ldap_integration module downloaded on Feb 3, 2009)

When I looked at the table configuration for the ldapauth table in MySQL it specified the default value for basedn, ldapdata_rwattrs, ldapdata_roattrs, and ldapdata_mappings to be NULL. The error comes because they are also specified to not allow NULL values.

I fixed this by unchecking the "NOT NULL" option in the MySQL Table Editor (the same thing can be accomplished by using the 'alter table' command from the MySQL prompt).

Essentially you can't have a NULL value as the default value if the table won't allow NULL values for those entries. Perhaps this can be fixed to save others the heartache and time?