Hi all,
I try to use LDAP connection.
When I tried to connect :
Paramètres de connexion incorrects
And in the log file:
2015-01-23 16:35:17 ** ERROR ** Ldap not installed on your PHP server. Check php_ldap extension or you should not set $paramLdap_allow_login to "true"
I don't now where is the parameter "$paramLdap_allow_login" ?
My LDAP configuration:
connexion via LDAP : Yes
base dn LDAP : OU=FRA,DC=blemea,DC=bausch,DC=com
serveur LDAP : "name of my Active directory server"
port LDAP : 389
version LDAP : 3
utilisateur LDAP : cn=UserLDAP,dc=blemea,dc=com
mot de passe LDAP : *********
filtre pour utilisateur : sAMaccountName=%USERNAME%
My Active directory is Windows 2003 server.
ProjeQtOr V4.5.4
Thnaks for for help
Have a nice WE.
Romain
Issue is on your PHP installation.
LDAP extension is not enabled.
Check for php.ini file.
Possibly you just have to uncomment extension and restart php.
In my php.ini file I got only this parameter:
[ldap]
; Sets the maximum number of open links or -1 for unlimited.
ldap.max_links = -1
I was run :
a2enmod ldap
service apache2 restart
And I haven't the error in the log :
Ldap not installed on your PHP server. Check php_ldap extension or you should not set $paramLdap_allow_login to "true"
The "a2enmod ldap" enables LDAP for Apache (for digest athentication or similar)
What you need is php_ladp extension.
Check you php.ini file.
You should have on windows
extension=php_ldap.dll
or on linux
extension=php_ldap.so
For instance, to install it on linux you need :
apt_get install php_ldap
for Debian like
or
yum install php_ldap
for RedHat like
In /etc/php5/mods-available/ldap.ini
extension=php_ldap.so
Do you know where I can find logs ?
apache and php logs location depends on your OS and if linux on distribution.
On debian like it should be on /var/logs/apache2 if my remenbering is correct.
Yes, is /var/logs/apache2. But there aren't information for the LDAP.
It's work if I put base dn LDAP "DC=blemea,DC=bausch,DC=com". But I don't want to all people of my compagny create a account in ProjeQtor.
I would like only in this base "OU=Users,OU=TLS,OU=FRA,DC=blemea,DC=bausch,DC=com" can be connecting.
Thanks lot
Dear all,
I have 2 questions on LDAP ?
1 / How I can setup the LDAP to check only the user in this Noeud : OU=Users,OU=TLS,OU=FRA,DC=blemea,DC=bausch,DC=com
2 / How I change a User created manually to become a LDAP user ?
Thanks
1 / How I can setup the LDAP to check only the user in this Noeud : OU=Users,OU=TLS,OU=FRA,DC=blemea,DC=bausch,DC=com
This should work.
You have to check that ldap user (defined in global parameters) correctly connects to this base DN. (check PHP ldap_bind documentation for help)
Other hint : uncomment the debugLog calls in User->authenticate(). This can give hint to unsuccessfull binding.
Maybe you can try to play with user filter criteria check PHP ldap_search documentation for help).
Concider that this search is done like in any other tool. For instance, you can try this filter in LdapBroser to see if it returns what you expect.
2 / How I change a User created manually to become a LDAP user ?
You must update directly in database : set isLadap to 1.
2/ Done
1/ I used LdapBroser to check the DN base and it is Ok. I'll try next week.