Menu

Seeddms 4.3.3 - Ldap not working

birduser
2014-02-23
2018-05-10
  • birduser

    birduser - 2014-02-23

    Hello,

    I don't get the ldap authentication running, while I think my settings should be correct.

    I modified the settings.xml and changed the Ldap connector to:

    connector enable="true" type="ldap" host="10.11.1.20" port="390" baseDN="ou=Users,dc=sxps,dc=int" bindDN="cn=zentyal,dc=sxps,dc=int" bindPw="XXX"

    I tried the same LDAP settings with an own PHP code and the authentication is working, so its not a fault of the server or a missing installed package.
    While looking for the error i found in op.Login.php that there's old and new code for the LDAP authentication. Could it be, that the LDAP authentication is actually not working?

     

    Last edit: birduser 2014-02-23
  • birduser

    birduser - 2014-02-26

    Okay, I dont know what's wrong with the LDAP authentication in op.Login.php and I havent found why its not working for me.
    So I integrated my own code and its working now. Its written really simple and you have to set up the variables right in the script between the "NEW LDAP SIGN IN". Whats not integrated is getting the information of the LDAP user like mail, lastname, etc. If I get that running im gonna post it here. Now the fullname and the login name is identically, and in mailadress is a placeholder.

    The File is stored in "seeddmsrootfolder/op/op.Login.php" and the user in mysql is stored in Table "tblUsers"

     

    Last edit: birduser 2014-02-26
  • oDn

    oDn - 2014-02-27

    In order to use the LDAP code currently in SeedDMS, you need to make sure that you set restricted to "false" in the authentication section of your settings.xml file (see comments).

     
    • zzx

      zzx - 2014-03-07

      Actualy it worked.

       

      Last edit: zzx 2014-03-07
  • kulaki

    kulaki - 2014-04-11

    I was able to use Active Directory by adding the ldap option below.

            // Required for most authentication methods, including SASL.
    --->            ldap_set_option($ds, LDAP_OPT_REFERRALS, 0);
                    ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, 3);
    

    Without that option, authentication with Active Directory fails on seeddms-4.3.7

    From: http://stackoverflow.com/questions/6222641/how-to-php-ldap-search-to-get-user-ou-if-i-dont-know-the-ou-for-base-dn

     
  • Uwe Steinmann

    Uwe Steinmann - 2014-04-11

    Thanks for your research. A couple of lines where you put the extra line is a check for AD. Unless your change doesn't break anythink with openldap, you could have added the ldap_set_option up there.

     
  • dgrens

    dgrens - 2018-01-26

    Hi
    In my case (seeddms 51) I solved an openldap login problem by replacing
    if (is_bool($user) && !$settings->_restricted) {
    by
    if (empty($user) && !$settings->_restricted) {
    in the file inc.ClassLdapAuthentication.php

     
    • Laura Angelica Mantecon Lopez

      Hi
      I also have that problem, but I can not solve it! I already try to modify the parameters that you mention but it's not work! I have seeddms 5.1, I think it's my LDAP configuration but i don't sure. Can you show me your LDAP configuration (settings.xml)? Thank's

       

Log in to post a comment.

MongoDB Logo MongoDB