Thanks for all the help. I finally got this working for another user too. Here are the settings that worked for us:
Note the AuthLDAPURL does not have “CN” in our case. Also binding with an admin account was necessary.
[root@host ~]# cat /etc/ood/config/ood_portal.yml
auth:
- ‘AuthType Basic’
- ‘AuthName “private”’
- ‘AuthBasicProvider ldap’
- ‘AuthLDAPURL “ldaps://ldaps…/OU=<user_name>,DC=<dc_dir>,DC=<dc_org>?name”’
- ‘AuthLDAPGroupAttribute cn’
- ‘AuthLDAPGroupAttributeIsDN on’
- ‘Require valid-user’
- ‘AuthLDAPBindDN “cn=<cn_admin>,ou=<ou_users_name>,dc=<dc_name>,dc=<dc_org>”’
- ‘AuthLDAPBindPassword ***’