# Active Directory integration working in 2025?

**URL:** <https://forum.opennebula.io/t/active-directory-integration-working-in-2025/14292>\
**Category:** Installation & Configuration\
**Created:** [October 24, 2025, 12:38pm UTC](https://forum.opennebula.io/t/active-directory-integration-working-in-2025/14292 "2025-10-24T12:38:33Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Andrew\_Hancock](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/andrew_hancock/32/8806_2.png) [@Andrew\_Hancock](https://forum.opennebula.io/u/Andrew_Hancock)\
**Post date:** [October 24, 2025, 12:38pm UTC](https://forum.opennebula.io/t/active-directory-integration-working-in-2025/14292/1 "2025-10-24T12:38:33Z")

</div>

Anyway care to share their config files, we’ve been round the houses for two days, trying to get LDAP/LDAPS working, LDAP/LDAPs works using ldapsearch, and ruby, all SSL root certificates.

Oddly, very little info in the logs, Authenticate Error or Net::ReadTimeout with #TCPSocket:(closed)

So it’s either our config file which looks like

server 1:  
:user: ‘username@server.local’  
:password: ‘password’  
:auth\_method: :simple  
:host: server.local  
:port: 636  
:encryption: :simple\_tls  
:base: ‘……dc=server,dc=local’  
:user\_field: ‘sAMAccountName’  
:domain: ‘server.local’  
:timeout: 30  
:rfc2307bis: true  
:tls\_options:  
ca\_file: ‘/usr/lib/ssl/certs/ad-ca.crt’

:order:

- server 1

even if I dump this config

# List of LDAP servers to query  
server 1:  
:user: ‘sa\_read’  
:password: ‘password’  
:auth\_method: :simple  
:host: ad1.company.local  
:port: 636  
:base: ‘dc=company,dc=local’  
:user\_field: ‘sAMAccountName’  
:encryption: :simple\_tls

server 2:  
:user: ‘sa\_read’  
:password: ‘password’  
:auth\_method: :simple  
:host: ad2.company.local  
:port: 636  
:base: ‘dc=company,dc=local’  
:user\_field: ‘sAMAccountName’  
:encryption: :simple\_tls

# List the order the servers are queried

:order:  
- server 1  
- server 2

I get no error messages, so something is wrong ?

---

<div class="post-metadata">

**Author:** ![brunorro](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/brunorro/32/7590_2.png) [@brunorro](https://forum.opennebula.io/u/brunorro)\
**Post date:** [October 27, 2025, 4:50pm UTC](https://forum.opennebula.io/t/active-directory-integration-working-in-2025/14292/2 "2025-10-27T16:50:32Z")

</div>

Hello,

In my experience, sometimes ruby relies on `ldap-utils` configuration (some vars are not taken directly from OpenNebula config). If you already installed `ldap-utils` modify the `/etc/ldap/ldap.conf` file to look like

```auto
BASE ...,dc=company,dc=local
URI ldaps://ldapserver.company.local:636

# TLS certificates (needed for GnuTLS)
TLS_CACERT /usr/lib/ssl/certs/ad-ca.crt

```

---

<div class="post-metadata">

**Author:** ![Andrew\_Hancock](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/andrew_hancock/32/8806_2.png) [@Andrew\_Hancock](https://forum.opennebula.io/u/Andrew_Hancock)\
**Post date:** [October 30, 2025, 12:32pm UTC](https://forum.opennebula.io/t/active-directory-integration-working-in-2025/14292/3 "2025-10-30T12:32:55Z")

</div>

Thanks we will check this

---

<div class="post-metadata">

**Author:** ![system](https://canada1.discourse-cdn.com/flex031/uploads/opennebula/original/2X/1/14d66f1130b9cd292905f575da9b68a9f574dd03.png) [@system](https://forum.opennebula.io/u/system)\
**Post date:** [November 29, 2025, 12:33pm UTC](https://forum.opennebula.io/t/active-directory-integration-working-in-2025/14292/4 "2025-11-29T12:33:54Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.