LDAP user XXX not found or password invalid

[cptdpicard]

Authentication doesn't work in my configuration. I get a message as a notice in my syslog stating the following: "LDAP user XXX not found or password invalid." What is happening?

[cptdpicard]

mod_psldap authenticates the user by opening up a LDAP connection using the provided credentials. One of the credentials is an attribute in the user's record. In order to get the dn to perform a login, mod_psldap must first search the LDAP store for the records with an attribute value that matches the one provided by the user. It will perform this search first using the parameters provided in the PsLDAPBind* attributes and then attempt an anonymous search of the LDAP store.

A failure to autheticate likely indicates one of two conditions:

• The account specified with PsLDAPBindDN and PsLDAPBindPassword does not have search rights on the LDAP store for the attribute specified in PsLDAPUserKey.
• The LDAP server does not allow anonymous search of all records for the value defined in PsLDAPUserKey

To resolve the situation, you must either configure mod_psldap with a username and password to access the LDAP store or configure the LDAP server to allow anonymous access to the attribute defined in PsLDAPUserKey.