Forum

LDAP Connection Pro...
 
Notifications
Retirer tout

LDAP Connection Problems

12 Posts
2 Utilisateurs
0 Reactions
19.6 K Vu
(@romain)
Posts: 9
Active Member
Début du sujet
 
[#2168]

Hi all,

I try to use LDAP connection.
When I tried to connect :

Paramètres de connexion incorrects

And in the log file:

2015-01-23 16:35:17 ** ERROR ** Ldap not installed on your PHP server. Check php_ldap extension or you should not set $paramLdap_allow_login to "true"

I don't now where is the parameter "$paramLdap_allow_login" ?

My LDAP configuration:

connexion via LDAP : Yes
base dn LDAP : OU=FRA,DC=blemea,DC=bausch,DC=com
serveur LDAP : "name of my Active directory server"
port LDAP : 389
version LDAP : 3
utilisateur LDAP : cn=UserLDAP,dc=blemea,dc=com
mot de passe LDAP : *********
filtre pour utilisateur : sAMaccountName=%USERNAME%

My Active directory is Windows 2003 server.
ProjeQtOr V4.5.4

Thnaks for for help
Have a nice WE.

Romain


 
Posté : 23 Jan PM 18:011
(@babynus)
Posts: 14952
Membre Admin
 

Issue is on your PHP installation.
LDAP extension is not enabled.
Check for php.ini file.
Possibly you just have to uncomment extension and restart php.


 
Posté : 23 Jan PM 21:011
(@romain)
Posts: 9
Active Member
Début du sujet
 

In my php.ini file I got only this parameter:
[ldap]
; Sets the maximum number of open links or -1 for unlimited.
ldap.max_links = -1


 
Posté : 26 Jan PM 13:011
(@romain)
Posts: 9
Active Member
Début du sujet
 

I was run :

a2enmod ldap
service apache2 restart

And I haven't the error in the log :

Ldap not installed on your PHP server. Check php_ldap extension or you should not set $paramLdap_allow_login to "true"


 
Posté : 26 Jan PM 14:011
(@babynus)
Posts: 14952
Membre Admin
 

The "a2enmod ldap" enables LDAP for Apache (for digest athentication or similar)

What you need is php_ladp extension.

Check you php.ini file.
You should have on windows

extension=php_ldap.dll

or on linux

extension=php_ldap.so

For instance, to install it on linux you need :

apt_get install php_ldap

for Debian like
or

yum install php_ldap

for RedHat like


 
Posté : 26 Jan PM 14:011
(@romain)
Posts: 9
Active Member
Début du sujet
 

In /etc/php5/mods-available/ldap.ini
extension=php_ldap.so

Do you know where I can find logs ?


 
Posté : 26 Jan PM 19:011
(@babynus)
Posts: 14952
Membre Admin
 

apache and php logs location depends on your OS and if linux on distribution.
On debian like it should be on /var/logs/apache2 if my remenbering is correct.


 
Posté : 27 Jan PM 13:011
(@romain)
Posts: 9
Active Member
Début du sujet
 

Yes, is /var/logs/apache2. But there aren't information for the LDAP.

It's work if I put base dn LDAP "DC=blemea,DC=bausch,DC=com". But I don't want to all people of my compagny create a account in ProjeQtor.
I would like only in this base "OU=Users,OU=TLS,OU=FRA,DC=blemea,DC=bausch,DC=com" can be connecting.

Thanks lot


 
Posté : 27 Jan PM 16:011
(@romain)
Posts: 9
Active Member
Début du sujet
 

Dear all,

I have 2 questions on LDAP ?
1 / How I can setup the LDAP to check only the user in this Noeud : OU=Users,OU=TLS,OU=FRA,DC=blemea,DC=bausch,DC=com
2 / How I change a User created manually to become a LDAP user ?

Thanks


 
Posté : 28 Jan PM 13:011
(@babynus)
Posts: 14952
Membre Admin
 

1 / How I can setup the LDAP to check only the user in this Noeud : OU=Users,OU=TLS,OU=FRA,DC=blemea,DC=bausch,DC=com

This should work.

You have to check that ldap user (defined in global parameters) correctly connects to this base DN. (check PHP ldap_bind documentation for help)
Other hint : uncomment the debugLog calls in User->authenticate(). This can give hint to unsuccessfull binding.

Maybe you can try to play with user filter criteria check PHP ldap_search documentation for help).
Concider that this search is done like in any other tool. For instance, you can try this filter in LdapBroser to see if it returns what you expect.


 
Posté : 29 Jan PM 18:011
(@babynus)
Posts: 14952
Membre Admin
 

2 / How I change a User created manually to become a LDAP user ?

You must update directly in database : set isLadap to 1.


 
Posté : 29 Jan PM 18:011
(@romain)
Posts: 9
Active Member
Début du sujet
 

2/ Done
1/ I used LdapBroser to check the DN base and it is Ok. I'll try next week.


 
Posté : 30 Jan AM 10:011
Share:
Retour en haut