How to resolve "Connection to LDAP server failed." error?

[Guest]

Hello,

I have installed Coldfusion8 on one of my server that was having ColdFusionMX earlier.

The ColdFusionMX admin settings are automatically transferred to the new Coldfusion8 admin page after installation.

Also I have configured all my websites at the time of installation.

After all when I am trying to login into one of my website system is throwing the below error.

"Connection to LDAP server failed."

Prevously it was working well with coldfusionMX. After installed Coldfusion8 I am facing this problem.

Is there anything to do more with cf admin settings page or is this problem is with the code? (Infact I havent modified my cfm code)

Please find the piece of code that I am using.

<cfldap action="QUERY" server="#application.LDAPServer#" port="#application.LDAPPort#" start="#application.LDAPBase#" name="search" attributes="alias, dn, uid, technicalCareerLevel, locationorgunit, givenName, sn" filter="#filter#" scope="SUBTREE" maxRows="2">

Anybody can assist me on this?

Thanks in advance.

Manoz.

[ilssac]

Is the ColdFusion 8 Window's Service running as the same user as the ColdFusion MX Window's service in the Window's Services Control Panel?  CFLDAP access often requires ColdFuson to run as a domain user with the proper permissions go access the desired LDAP data.

[Guest]

Thanks for your quick turn around!!!

I have restarted CF8 application service. Still facing the problem.

About CFLDAP tag, I am just making use of the older code that was working well on CFMX 6.1.

Still if it requires code modifications to resolve this, Please let me know how to run coldfusion as a domain user with proper permissions.

Regards,

Manoz.

[ilssac]

Assigning a user to the ColdFusion service is not a code change.

It is a configuraiton setting change in the Windows Service Panel.

In the Panel you select the ColdFusion Service(s) you want to run under a different user then the default "LocalSystem"

You then change the "Log On As" setting of the service(s) to a user with the desired permissions.

[Guest]

I have fixed this problem successfully.

The problem was with the referral attribute of the cfldap tag.

After adding this (referral="yes") attribute to my code I am able to login into my website.

<cfldap action="QUERY" server="#application.LDAPServer#" port="#application.LDAPPort#" start="#application.LDAPBase#" name="search" attributes="alias, dn, uid, technicalCareerLevel, locationorgunit, givenName, sn" filter="#filter#" scope="SUBTREE" maxRows="2" referral="yes">

Any way thanks for your assistance!!!!!

[TLC-IT]

Interesting.  It is inconsistent with my documentation that "Yes" (a boolean) would be an acceptable value for this parameter.  My docs say it's supposed to be an integer.

The server-logs (e.g. Windows event-viewer) ought to be throwing more-detailed error records when CF attempts to do the LDAP connection and fails to do so.

Referrals are pretty-much a fact of reality in LDAP configurations in the real business world, where equipment moves around a lot and network topology changes, but they do take extra time.  If you can point your applications directly to the correct final-location of where the desired objects are actually now stored, that would be an improvement.