I've used the Zope LDAP product in the past to give LDAP authentication to another Zope-based application, so I'm reasonably familiar with how the LDAP side of things should work in Zope. However, I'm getting problems with plone and LDAP and am not sure what to do next! Let me explain...
I'm currently tentatively experimenting with plone on a virtual pc setup, and have so far got the latest plone 3 installed successfully. I then installed the necessary plone/python/zope LDAP add-ons and they all appear as you would expect when you look in Zope and Plone.
I have configured the LDAP in Zope with the same properties as we use with our 'real world' Zope app and everything works as expected except for one thing; when we enter the password for the Manager DN entry on the virtual set up, plone throws out a very specific LDAP error 'CONFIDENTIALITY_REQUIRED' that we don't get in our 'real world' setup.
If we omit the password then everything works EXCEPT when we go into plone itself, we can search for users and it will interrogate the LDAP and pull in users. However, none of the users are editable so we can't assign plone roles to any of them.
Any ideas what is causing this? Presumably the fact that we can't give roles to our users pulled from our LDAP server is related to us not supplying the password for the Manager DN, but why is it erroring whenever we enter the password when configuring the acl_users LDAP settings in Zope?