Forum

Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.

[SOLVED] Problem ld...
 
Notifications
Clear all

[SOLVED] Problem ldap search

19 Posts
3 Users
0 Reactions
15.1 K Views
 rmo
(@coyote)
Posts: 6
Active Member
Topic starter
 
[#2559]

Hello,

I have a authentication problem with ldap.

2015-08-31 14:02:28.691 ** ERROR ** ERROR **
2015-08-31 14:02:28.692
** ERROR ** on file '/var/www/html/projeqtor/model /User.php' at line (933)
2015-08-31 14:02:28.692
** ERROR ***** cause = ldap_search(): Search: Bad search filter

My projeqtor is the latested version (V5.0.5).

Thanks you for your help,
Best regards.


 
Posted : 31 Aug 2015 16H10
(@babynus)
Posts: 14952
Member Admin
 

What did you enter in "LDAP user filter" (in global parameters)


 
Posted : 01 Sep 2015 10H31
(@samuelcochard)
Posts: 5
Active Member
 

Hi, I have the same problem :

2015-09-01 18:02:13.569 ===== TRACE ===== Login error for user 'my_ldap_id'
2015-09-01 18:06:18.849 ===== TRACE ===== authenticate - Filter error : filter retrieved admin user (LDAP user in global parameters)

Here is my LDAP user filter : sAMAccountName=%USERNAME%

Did the problem come from here ? :dry:

Edit : I use Projeqtor v. 5.0.5


 
Posted : 02 Sep 2015 8H06
(@babynus)
Posts: 14952
Member Admin
 

Your issue is not the same.
Your message is "Filter error : filter retrieved admin user"
It is explicit : you cannot connect to the application with LDAP user that you defined in the global parameters (it is a security constraint).


 
Posted : 02 Sep 2015 12H04
 rmo
(@coyote)
Posts: 6
Active Member
Topic starter
 

hello,

ldap user filter parameters is "sAMAccountName=%USERNAME%"


 
Posted : 02 Sep 2015 12H21
(@babynus)
Posts: 14952
Member Admin
 

And do you have sAMAccountName in your LDAP ?
Try to browse your LDAP and search "sAMAccountName=youUser"


 
Posted : 02 Sep 2015 12H29
(@samuelcochard)
Posts: 5
Active Member
 

The thing is that we are sure that the parameter is good, because we have another web-applications (named GRR) which is working very well with LDAP and with the same parameters..


 
Posted : 02 Sep 2015 13H36
 rmo
(@coyote)
Posts: 6
Active Member
Topic starter
 

yes, we use other application that uses the ldap with the same parameters.


 
Posted : 02 Sep 2015 13H40
 rmo
(@coyote)
Posts: 6
Active Member
Topic starter
 

yes, we use other application that uses the ldap with the same parameters.


 
Posted : 02 Sep 2015 13H41
(@babynus)
Posts: 14952
Member Admin
 

@samuelcochard
Your issue is not the same.
Your message is "Filter error : filter retrieved admin user"
It is explicit : you cannot connect to the application with LDAP user that you defined in the global parameters (it is a security constraint).
LDAP connection will success if you try another user.


 
Posted : 02 Sep 2015 14H09
(@samuelcochard)
Posts: 5
Active Member
 

Hi,

We try with another user and here is the error :

2015-09-02 15:44:26.326 ===== TRACE ===== Login error for user 'aire.lavage'
2015-09-02 15:44:43.009 ** ERROR ** ERROR **
2015-09-02 15:44:43.009
** ERROR ** on file '/var/www/projeqtor/model/User.php' at line (958)
2015-09-02 15:44:43.009
** ERROR ***** cause = ldap_bind(): Unable to bind to server: Invalid credentials


 
Posted : 03 Sep 2015 14H23
(@babynus)
Posts: 14952
Member Admin
 

Unable to bind to server: Invalid credentials

Wrong user or password


 
Posted : 03 Sep 2015 14H24
(@samuelcochard)
Posts: 5
Active Member
 

What should i write on fields "LDAP base dn" and "LDAP user filter" ?


 
Posted : 03 Sep 2015 14H40
(@babynus)
Posts: 14952
Member Admin
 

All depends on your LDAP configuration.
Default values are :

LDAP base dn :

dc=my-domain,dc=com

LDAP user filter :

uid=%USERNAME%

These values work fine for basic OpenLDAP (with my-domain replaced by correct domain)
With this configuration you should have something like that :
LDAP user :

cn=Manager,dc=my-domain,dc=com


 
Posted : 03 Sep 2015 14H50
 rmo
(@coyote)
Posts: 6
Active Member
Topic starter
 

that it is possible to send you the config with private message ?


 
Posted : 03 Sep 2015 18H04
(@babynus)
Posts: 14952
Member Admin
 

Yes
send at support@projeqtor.org


 
Posted : 03 Sep 2015 20H08
 rmo
(@coyote)
Posts: 6
Active Member
Topic starter
 

i have send a email, thanks


 
Posted : 04 Sep 2015 12H54
(@babynus)
Posts: 14952
Member Admin
 

Hi,

Problem found, analysed ... and solved.

Quick fix (as a workaround) is to change line 2665 in /model/persistence/SqlElement.php from

if (getSessionUser()->id) {

to

if (1) {

More accurate fix will be included in V5.1


 
Posted : 04 Sep 2015 16H27
(@samuelcochard)
Posts: 5
Active Member
 

It works ! Thx


 
Posted : 07 Sep 2015 9H20
Share:

Scroll to Top