Users in Child Domains cannot log in

We are trying to implement TikiWiki Groupware for my organization. My problem is getting the LDAP function to allow users in my child domains to login. Currently it only allows users from the parent domain to login. Here is the issue I posted to the TikiWiki Community:

My company has 4 child domains (representing 4 remote offices) in addition to the parent domain set up in Active Directory.
So, it looks something like this:

Parent: domain.com (This is my Base DN)
Child1: remotesite1.domain.com
Child2: remotesite2.domain.com
Child3: remotesite3.domain.com
Child4: remotesite4.domain.com

Each child domain has users that are not present on the parent domain (Base DN), which is the main office.

Attached is a screenshot of the set up I currently have on my LDAP tab (without specifics)

Any user registered in the Active Directory parent domain (BASE DN) can log into the Tiki with no problem.

Any user who logs in from any of my child domains fails to log in with a "Invalid password" message. I can reset the password, triple check it's being entered in properly, and the result it ALWAYS the same.

The response I received back from the community was:

So far as I know, Tiki is not currently capable of authenticating against multiple domains (or multiple LDAP servers). The code could be modified to search, say, the global catalog for the user's DN and then authenticate against the corresponding domain, but this would be custom coding.

My question is how would I modify the code to search the global catalog? I'm more of a Network type, not a coding type. I've attached the same screenshot I used for this forum. If more information is needed let me know. I would love to get this working.
ShoanAmuseAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Leon FesterSenior Solutions ArchitectCommented:
Depending on how that application is configured, you may not be able to use the Global catalog, since they bind is slightly different.
If they've hardcoded that in the application and all you're entering is the BASE DN, then not, it'll not work.

But here are the links for how to bind to the Global Catalog.

http://technet.microsoft.com/en-us/library/cc978012.aspx
http://msdn.microsoft.com/en-us/library/windows/desktop/ms675564(v=vs.85).aspx

P.S. I don't see any screenshots.
0
ShoanAmuseAuthor Commented:
My apologies for not responding sooner, I have been away from the office for several days. I am checking into this now.

I had made a modification to the question after posting and forgot to re-include the attachment, I am including that with this comment.
tikiexample.JPG
0
Leon FesterSenior Solutions ArchitectCommented:
According to this document, you should be able to search the Global catalog.
http://technet.microsoft.com/en-us/library/cc978012.aspx

In your config change the following:
1. Ensure that you host is a Global Catalog.
You can run "nslookup gc._msdcs.%USERDNSDOMAIN%" to find all the GC's in your domain
2. Change the port to "3268"
3. Change the Scope to "Entire Directory"
4. Make sure that you Base DN is set to the root domain "dc=domain,dc=com"
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ShoanAmuseAuthor Commented:
Thanks for the help! I have tried all the suggested options with this and it appears it is just a major flaw in the design of the Groupware for TikiWiki. I have put in a request to have the option edited to be able to include child domains.

According to the way the code is set up, all the above suggestions would allow users in multiple domains to access the TikiWiki, but no matter how it is modified to include the Global Catalog, child domain users still cannot login.

I hope they can develop a solution. Thanks so much for your suggestions anyway!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Web Development

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.