I've also tried enabling referrals and it didn't help. This is what I see at the end of the login page if I use /debug/

LDAP[Filter][(CN=Ryan\2c Spencer,OU=Ann Arbor)][OU=All Users,DC=arbor,DC=net]
LDAP[UserID][User not found through filter]

That is my correct CN. But the next line shows that it isn't grabbing a UserID for me:

SELECT * FROM `entity_permissions` WHERE `user_id` = '-1'


Spencer Ryan | Senior Systems Administrator | sryan@arbor.net
Arbor Networks
+1.734.794.5033 (d) | +1.734.846.2053 (m)

On Thu, Feb 26, 2015 at 10:53 AM, Ryan, Spencer <sryan@arbor.net> wrote:
I'm having an issue with our OU's and how devices are assigned to users in Observium.

To keep the explanation simple our users OU structure basically looks like this:
arbor.net
---All Users
------Ann Arbor
------City 2
------City 3

I have the base set to the top "all users":
$config['auth_ldap_prefix'] = "CN=";
$config['auth_ldap_suffix'] = ",OU=All Users,DC=arbor,DC=net";

The issue is that the ldap module won't look down into the sub OU's to find the users, so any device associations fail.

If I create a test user in the "All Users" OU directly it works properly.

Is there any way to make this work properly? I have users logging in in various sub OU's so I can't just point it at one of the city OU's directly.

Thanks!

Spencer Ryan | Senior Systems Administrator | sryan@arbor.net
Arbor Networks