Forum

Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.

LDAP Connection Pro...
 
Notifications
Clear all

LDAP Connection Problems

12 Posts
2 Users
0 Reactions
19.6 K Views
(@romain)
Posts: 9
Active Member
Topic starter
 
[#2168]

Hi all,

I try to use LDAP connection.
When I tried to connect :

Paramètres de connexion incorrects

And in the log file:

2015-01-23 16:35:17 ** ERROR ** Ldap not installed on your PHP server. Check php_ldap extension or you should not set $paramLdap_allow_login to "true"

I don't now where is the parameter "$paramLdap_allow_login" ?

My LDAP configuration:

connexion via LDAP : Yes
base dn LDAP : OU=FRA,DC=blemea,DC=bausch,DC=com
serveur LDAP : "name of my Active directory server"
port LDAP : 389
version LDAP : 3
utilisateur LDAP : cn=UserLDAP,dc=blemea,dc=com
mot de passe LDAP : *********
filtre pour utilisateur : sAMaccountName=%USERNAME%

My Active directory is Windows 2003 server.
ProjeQtOr V4.5.4

Thnaks for for help
Have a nice WE.

Romain


 
Posted : 23 Jan 2015 18H38
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

Issue is on your PHP installation.
LDAP extension is not enabled.
Check for php.ini file.
Possibly you just have to uncomment extension and restart php.


 
Posted : 23 Jan 2015 21H41
(@romain)
Posts: 9
Active Member
Topic starter
 

In my php.ini file I got only this parameter:
[ldap]
; Sets the maximum number of open links or -1 for unlimited.
ldap.max_links = -1


 
Posted : 26 Jan 2015 13H32
(@romain)
Posts: 9
Active Member
Topic starter
 

I was run :

a2enmod ldap
service apache2 restart

And I haven't the error in the log :

Ldap not installed on your PHP server. Check php_ldap extension or you should not set $paramLdap_allow_login to "true"


 
Posted : 26 Jan 2015 14H00
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

The "a2enmod ldap" enables LDAP for Apache (for digest athentication or similar)

What you need is php_ladp extension.

Check you php.ini file.
You should have on windows

extension=php_ldap.dll

or on linux

extension=php_ldap.so

For instance, to install it on linux you need :

apt_get install php_ldap

for Debian like
or

yum install php_ldap

for RedHat like


 
Posted : 26 Jan 2015 14H19
(@romain)
Posts: 9
Active Member
Topic starter
 

In /etc/php5/mods-available/ldap.ini
extension=php_ldap.so

Do you know where I can find logs ?


 
Posted : 26 Jan 2015 19H33
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

apache and php logs location depends on your OS and if linux on distribution.
On debian like it should be on /var/logs/apache2 if my remenbering is correct.


 
Posted : 27 Jan 2015 13H43
(@romain)
Posts: 9
Active Member
Topic starter
 

Yes, is /var/logs/apache2. But there aren't information for the LDAP.

It's work if I put base dn LDAP "DC=blemea,DC=bausch,DC=com". But I don't want to all people of my compagny create a account in ProjeQtor.
I would like only in this base "OU=Users,OU=TLS,OU=FRA,DC=blemea,DC=bausch,DC=com" can be connecting.

Thanks lot


 
Posted : 27 Jan 2015 16H00
(@romain)
Posts: 9
Active Member
Topic starter
 

Dear all,

I have 2 questions on LDAP ?
1 / How I can setup the LDAP to check only the user in this Noeud : OU=Users,OU=TLS,OU=FRA,DC=blemea,DC=bausch,DC=com
2 / How I change a User created manually to become a LDAP user ?

Thanks


 
Posted : 28 Jan 2015 13H07
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

1 / How I can setup the LDAP to check only the user in this Noeud : OU=Users,OU=TLS,OU=FRA,DC=blemea,DC=bausch,DC=com

This should work.

You have to check that ldap user (defined in global parameters) correctly connects to this base DN. (check PHP ldap_bind documentation for help)
Other hint : uncomment the debugLog calls in User->authenticate(). This can give hint to unsuccessfull binding.

Maybe you can try to play with user filter criteria check PHP ldap_search documentation for help).
Concider that this search is done like in any other tool. For instance, you can try this filter in LdapBroser to see if it returns what you expect.


 
Posted : 29 Jan 2015 18H39
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

2 / How I change a User created manually to become a LDAP user ?

You must update directly in database : set isLadap to 1.


 
Posted : 29 Jan 2015 18H40
(@romain)
Posts: 9
Active Member
Topic starter
 

2/ Done
1/ I used LdapBroser to check the DN base and it is Ok. I'll try next week.


 
Posted : 30 Jan 2015 10H27
Share:

Scroll to Top