I'm trying to configure LimeSurvey Version 2.59.1+170116 to lookup in Active Directory via ldap and query users. (LimeSurvey server is Ubuntu 16.04, AD Server is Windows 2012 R2)

I tried all kind of configurations, including LdapSoftware to test quarry users. Currently I still can't configure the plug-in to be able to query windows users logon name from the domain via one of the Domain Controllers.

Also created AD users with rights to read over required users OU's and created same user with same password in Limesurvey, still can't query.

I'm attaching picture of my Ldap plugin configuration and the error I get. Tried all kind of configurations, even manual config of the ldap.php config.php files and still wasn't able to query. Any help will really appreciated!

Will be really helpful if someone can take screenshot of working ldap plugin module configuration with Active Directory users bind!

P.S. Attached screenshot of the ldap module config and error I get.

Thanks in advance!

Actual LDAP plugin are only compatible via Simple LDAP login for AD.

You can not choose user group or any other things without make your own plugin.

Hi Denis,

Do you mean below setting is incorrect?
$ldap_queries[$query_id] = '(&(objectClass=user)(!(userAccountControl=514)))';

ldap.php is done only for ldap import token. You don't have to touch it : it's not linked with LDAP authentification plugin ...

See the big waring on our manual : www.limesurvey.org/manual/LDAP_settings

And you can not do what you want with included AuthLDAP plugin : www.limesurvey.org/manual/Authentication_plugins#LDAP

Hi Denis,

I refer those document before, but my situation is that "authentication with LDAP and sAMaccountName attribute" & enable "Automatically create user if it exists in LDAP server".

I found the document has one error. www.limesurvey.org/manual/Authentication_plugins#LDAP
The setting of "Attribute to compare to the given login can be uid, cn, mail, ..." should use "sAMAccountName" not "cn=: empty"

After I changed the setting to "sAMAccountName", I can successfully use "lastname.firstname" to login.