I have installed SVN Access Manager 0.5.6.6 on a Ubuntu Server 16.04 machine that is running SVN 1.9.3, PHP 5.6, apache2.4.18 and mysql 14.14 Distrib 5.7.15.
I installed SVN Access Manager a first time, with LDAP disabled, and everything worked fine (I could login with the admin user specified during installation).
But I need to use LDAP to pull the users from Active Directory, so I ran the web installer wizzard again, with exactly the same settings, but this time enabling LDAP. This is what I have configured in the LDAP tab during the installation:
LDAP user dn: OU=Company Staff,DC=local,DC=company,DC=com
LDAP user filter attribute: (&(objectCategory=person)(objectClass=user))
LDAP user object class: user
LDAP user additional filter:
Uid: uid
Name: name
Givenname: givenName
Mail: mail
Password: userPassword
LDAP User sort attribute: name
LDAP user sort order: ASC
LDAP bind with user login data: No
LDAP Bind Dn Suffix:
_
And now I cannot login with any LDAP user and I get the below errors when I try to login with a non-ldap user (the admin user I specified during the SVN Access Manager install process), and can't do anything else that going back to the login page:
Notice: Use of undefined constant LDAPOPTDEREF - assumed 'LDAPOPTDEREF' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1512
Notice: Use of undefined constant LDAPOPTSIZELIMIT - assumed 'LDAPOPTSIZELIMIT' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1513
Notice: Use of undefined constant LDAPOPTTIMELIMIT - assumed 'LDAPOPTTIMELIMIT' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1514
Notice: Use of undefined constant LDAPOPTPROTOCOLVERSION - assumed 'LDAPOPTPROTOCOLVERSION' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1515
Notice: Use of undefined constant LDAPOPTERRORNUMBER - assumed 'LDAPOPTERRORNUMBER' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1516
Notice: Use of undefined constant LDAPOPTREFERRALS - assumed 'LDAPOPTREFERRALS' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1517
Notice: Use of undefined constant LDAPOPTRESTART - assumed 'LDAPOPTRESTART' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1518
Any ideas on what's going on?
Thanks!
Last edit: David 2016-09-30
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
thanks, that seemed to be the issue as I am not getting those errors any more now after installing php5.6-ldap.
But I still can't login. I get to the login page, but I can't log in using an Active Directory username/password, I get the error message "Username and/or password wrong".
I can't access it using the local admin user I set up during the wizzard either (this is expected), I get an entry in the apache error.log file:
But I don't get anything in the logs when trying to login with the AD user.
I can access the repository directory listing from the web browser using an AD username and password, so authentication is set up correctly in the dav_svn.conf file.
Last edit: David 2016-09-30
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi,
I have installed SVN Access Manager 0.5.6.6 on a Ubuntu Server 16.04 machine that is running SVN 1.9.3, PHP 5.6, apache2.4.18 and mysql 14.14 Distrib 5.7.15.
I installed SVN Access Manager a first time, with LDAP disabled, and everything worked fine (I could login with the admin user specified during installation).
But I need to use LDAP to pull the users from Active Directory, so I ran the web installer wizzard again, with exactly the same settings, but this time enabling LDAP. This is what I have configured in the LDAP tab during the installation:
_
And now I cannot login with any LDAP user and I get the below errors when I try to login with a non-ldap user (the admin user I specified during the SVN Access Manager install process), and can't do anything else that going back to the login page:
Notice: Use of undefined constant LDAPOPTDEREF - assumed 'LDAPOPTDEREF' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1512
Notice: Use of undefined constant LDAPOPTSIZELIMIT - assumed 'LDAPOPTSIZELIMIT' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1513
Notice: Use of undefined constant LDAPOPTTIMELIMIT - assumed 'LDAPOPTTIMELIMIT' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1514
Notice: Use of undefined constant LDAPOPTPROTOCOLVERSION - assumed 'LDAPOPTPROTOCOLVERSION' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1515
Notice: Use of undefined constant LDAPOPTERRORNUMBER - assumed 'LDAPOPTERRORNUMBER' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1516
Notice: Use of undefined constant LDAPOPTREFERRALS - assumed 'LDAPOPTREFERRALS' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1517
Notice: Use of undefined constant LDAPOPTRESTART - assumed 'LDAPOPTRESTART' in /usr/share/svn-access-manager/include/db-functions-adodb.inc.php on line 1518
Any ideas on what's going on?
Thanks!
Last edit: David 2016-09-30
Hi,
just an idea with no further investigation: you are missing php ldap packages?
Kind regards
Thomas
Hi Thomas,
thanks, that seemed to be the issue as I am not getting those errors any more now after installing php5.6-ldap.
But I still can't login. I get to the login page, but I can't log in using an Active Directory username/password, I get the error message "Username and/or password wrong".
I can't access it using the local admin user I set up during the wizzard either (this is expected), I get an entry in the apache error.log file:
[Fri Sep 30 09:41:26.627905 2016] [:error] [pid 16237] [client 172.X.X.X] filter = (&((objectCategory=Person)=adminusername)(objectclass=user)), referer: https://server/svnaccessmanager/login.php
[Fri Sep 30 09:41:26.628097 2016] [:error] [pid 16237] [client 172.X.X.X] Error: Search error on (&((objectCategory=Person)=adminusername)(objectclass=user)): Bad search filter, referer: https://server/svnaccessmanager/login.php
But I don't get anything in the logs when trying to login with the AD user.
I can access the repository directory listing from the web browser using an AD username and password, so authentication is set up correctly in the dav_svn.conf file.
Last edit: David 2016-09-30
Hi David,
your LDAP queries look strange to me. Please check your active Directory structure and fix the queries.
Cu
Thomas