Re: [VuFind-General] LDAP configuration question

[Demian K. <dem...@vi...>]

That's great - glad to hear you got things working!

- Demian

From: Menk, Robert - 0050 - MITLL [mailto:bm...@ll...]
Sent: Thursday, November 16, 2017 10:54 AM
To: 'vuf...@li...' <vuf...@li...>
Subject: Re: [VuFind-General] LDAP configuration question

Just to close this one out: We had a few issues getting it to work initially with the slightly out of the ordinary configuration our LDAP/AD server requires.

Instead of trying to resolve the differences between LDAP, which uses on userid, and the Sirsi catalog which uses a different userid, we tweaked an existing set of php scripts to provide users with the ability to see what they have checked out and then pointed VUFind to use the static page we built for that instead of the standard link within the user profile.

Thanks for the help.

Bobb Menk

From: Demian Katz [mailto:dem...@vi...]
Sent: Wednesday, November 08, 2017 2:15 PM
To: Menk, Robert - 0050 - MITLL <bm...@ll...<mailto:bm...@ll...>>; 'vuf...@li...' <vuf...@li...<mailto:vuf...@li...>>
Subject: RE: LDAP configuration question

The values are case-sensitive, so if you have "Basedn" and "Username" settings rather than "basedn" and "username" settings, that might be part of the problem. Would you be willing to share your entire [LDAP] section for reference? (Obviously, feel free to censor any of the actual settings that are sensitive).

- Demian

From: Menk, Robert - 0050 - MITLL [mailto:bm...@ll...]
Sent: Wednesday, November 08, 2017 11:36 AM
To: Demian Katz <dem...@vi...<mailto:dem...@vi...>>; 'vuf...@li...' <vuf...@li...<mailto:vuf...@li...>>
Subject: RE: LDAP configuration question

I have the host and port values in place. I've tried both ldaps and simple ldap btw and both 389 and 636 for ports btw.

Basedn is set as mentioned below - in quotes and with simple spaces separating the values.
Username is simply set to uid.
Bind_username and bind_password are both set as below.

That's why I was thinking perhaps some small element of syntax (quotes, spaces, separators, etc.) in either the basedn or bind_username might be the culprit. I'll turn on debug mode to see if I can learn anything that way I guess.

Thanks

Bobb

From: Demian Katz [mailto:dem...@vi...]
Sent: Wednesday, November 08, 2017 11:21 AM
To: Menk, Robert - 0050 - MITLL <bm...@ll...<mailto:bm...@ll...>>; 'vuf...@li...' <vuf...@li...<mailto:vuf...@li...>>
Subject: RE: LDAP configuration question

That error indicates that one of the required settings (host, port, basedn or username) is missing from your config.ini:

https://github.com/vufind-org/vufind/blob/master/module/VuFind/src/VuFind/Auth/LDAP.php#L53<https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fvufind-org%2Fvufind%2Fblob%2Fmaster%2Fmodule%2FVuFind%2Fsrc%2FVuFind%2FAuth%2FLDAP.php%23L53&data=02%7C01%7Cdemian.katz%40villanova.edu%7Cfc99ecf3e95c4d1194ad08d52d0c44c9%7C765a8de5cf9444f09cafae5bf8cfa366%7C0%7C0%7C636464453079419353&sdata=m%2F9o%2FtLnOLyQQU3PXN1Z0Z35%2F%2FEo0PluDMAu%2BXMNOGg%3D&reserved=0>

I'd double-check that there is something in all of those values. Once they are set, you should be able to get further into the code and can hopefully get more helpful error messages to assist with further trial and error. Note that turning on debug mode can also help with troubleshooting.

I'm happy to help with further questions - but before I answer anything about specific values, let's get past this first obstacle and see what happens next. :)

- Demian

From: Menk, Robert - 0050 - MITLL [mailto:bm...@ll...]
Sent: Wednesday, November 08, 2017 10:56 AM
To: 'vuf...@li...' <vuf...@li...<mailto:vuf...@li...>>
Subject: [VuFind-General] LDAP configuration question

I'm experimenting with getting LDAP authentication to the VUFind MYSQL database to work and running into a view snags.

We use a basedn string that looks something like this:
Basedn="OU=MITLL DC=MITLL DC=AD DC=Local"

Do those values need some kind of separator between them or just spaces?

We also use a bind_username that's presently looking like this:
Bind_username="uid=myuser"
Or alternatively
Bind_username="uid=myuser@address"

Does that argument require an "o=..." value as well? Or can it go with just the user name? Also, are the quotes required on that string?

I'm getting "Some LDAP parameters are missing - check your cnfig.ini file" as my only error.

Thanks for your help.

Bobb Menk
bm...@ll...<mailto:bm...@ll...>