LDAP configuration error

poliveira

ntozier

Telnet in the server is working.
Also i try with a PHP gist, and is also working.

So has to be something related with the plugin.

ntozier

Then you will want to check the logs on the server to see why it cannot bind.

poliveira

ntozier

Apache error log: when saving is always this:

PHP Fatal error: Uncaught TypeError: ldap_close(): Argument #1 ($ldap) must be of type resource, bool given in phar:///var/www/XXXX/upload/include/plugins/auth-ldap.phar/include/Net/LDAP2.php:701\nStack trace:\n#0 phar:///var/www/XXXX/upload/include/plugins/auth-ldap.phar/include/Net/LDAP2.php(701): ldap_close()\n#1 /var/www/XXXX/upload/include/pear/PEAR.php(755): Net_LDAP2->_Net_LDAP2()\n#2 [internal function]: _PEAR_call_destructors()\n#3 {main}\n thrown in phar:///var/www/XXXX/upload/include/plugins/auth-ldap.phar/include/Net/LDAP2.php on line 701

KevinTheJedi

@poliveira

That error typically means that either something is wrong with the LDAP config info you supplied or the php-ldap extension is not installed/enabled. Since you confirmed the extension then it has to be something with the LDAP config info.

You can also debug the code to see where it's failing.

Cheers.

kewl

KevinTheJedi

I have the same error as poliveria. I have posted on another thread and still unable to get it resolved. You mentioned it works for you. Could you share your LDAP config settings (with dummy values)?

Thanks

tomoshokas

I have the same situation as the first post.
OsTicket 16.1, Apache 2.4.37, Maria DB 10.3.28, php 8.0.17 LDAP plugin v0.62 dowloaded from os Ticket web site.Open php-ldap is installed and enabled

So the situation is identical so I checked couple of things:

this php code runs successfully either from Apache either from command line:

<?php

$ldap_dn = "uid=user,ou=Apps,o=bab.at.int";

$ldap_password="*******";

$ldap_con = ldap_connect("ldap://ldap.bab.at.int:11389");

ldap_set_option($ldap_con, LDAP_OPT_PROTOCOL_VERSION, 3);

if(@ldap_bind($ldap_con,$ldap_dn,$ldap_password))
echo "done";
else
echo "no!";

and with with tcpdump I got following

tcpdump port 11389 -v -i ens32 -w /var/www/capture.log
dropped privs to tcpdump
tcpdump: listening on ens32, link-type EN10MB (Ethernet), capture size 262144 bytes
13 packets captured
14 packets received by filter
0 packets dropped by kernel

But if I try to capture while saving osTicket LDAP plugin, no packets are captured, that means plugin gets error without even trying to send any packet outside to LDAP server.

Interestingly I can have access to very old osTicket installation 1.9.7 with LDAP plugin 0.6.2 apache 2.4.6 php 5.4.16 and putting the same settings into it - everything works.

So probably there are some issues in LDAP plug-in itself in combination with 1.16.1 OsTicked version and Php 8.0.

KevinTheJedi

tomoshokas

Make sure you’ve downloaded the latest plugin and retest as I don’t have any issues using the latest plugin, v1.16.1, PHP 8.0, MySQL 8, and Apache.

Otherwise you should be seeing errors somewhere in your logs.

Cheers.

tomoshokas

I downloaded ldap_plugin php stuff from your git configured it and successfully traced the problem it is in config.php line 161 - port length is limited to 4 digits 😉 and this is why I did not see anything connecting throught 11389 as it was reduced to 1138 port. Now just need to learn how to make phar file 😉

Update. Configuration save works, but authentification - not probably there are oter places where port is limited to 4 digits will try to dig out tomorrow 😉

else {
154 if (!$config['servers'])
155 $this->getForm()->getField('servers')->addError(
156 $__("No servers specified. Either specify a Active Directory
157 domain or a list of servers"));
158 else {
159 $servers = array();
160 foreach (preg_split('/\s+/', $config['servers']) as $host)
161 if (preg_match('/([^:]+)🙁\d{1,4})/', $host, $matches))
162 $servers[] = array('host' => $matches[1], 'port' => (int) $matches[2]);
163 else
164 $servers[] = array('host' => $host);
165 }
166 }

KevinTheJedi

@kewl

It works for me because I’m using the default port which is 3 characters long. As tomoshokas pointed put it wasn’t working for them as they had a long port number that exceeded 4 characters. If you are using a long port number you need to do what tomoshokas did and download the raw plugin folder, use that in your installation, and modify the code to allow longer port characters.

Cheers.

ntozier

As a side not you don't have to phar it to use it.

remalia

ntozier True, you can just upload the folder of the plugin.

kewl

KevinTheJedi

I have not specify any port so I am using the default.

Thanks

KevinTheJedi

kewl

Then you will need to check your AD logs for a connection attempt and if one the reason why it’s failing. You should also check to ensure you don’t have a firewall or something blocking the connection and port on the webserver.

Cheers.

kewl

KevinTheJedi

I have checked AD logs previously but can't find any attempt. Also, no firewall running on the webserver. When I saved the ldap settings it saved fine. Is there a simple way to check if the plug-in works? It is enabled and active according to the admin panel.

KevinTheJedi

kewl

Yea by logging in as an agent or user using AD credentials if the plugin is installed, enabled, and configured. If it logs you in then it works if it doesn’t then it doesn’t work.

Do you have the php-ldap extension installed/enabled for the PHP version you are using?

Cheers.

kewl

KevinTheJedi

Yes. Let me know if I missed something. php -m also show 'ldap'

php8.0-apcu/focal,now 5.1.21+4.0.11-7+ubuntu20.04.1+deb.sury.org+10 amd64 [installed]
php8.0-bcmath/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed]
php8.0-cgi/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed]
php8.0-cli/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed,automatic]
php8.0-common/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed]
php8.0-curl/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed]
php8.0-fpm/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed]
php8.0-gd/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed]
php8.0-imap/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed]
php8.0-intl/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed]
php8.0-ldap/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed] <---------------
php8.0-mbstring/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed]
php8.0-mysql/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed]
php8.0-opcache/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed,automatic]
php8.0-readline/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed,automatic]
php8.0-xml/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 amd64 [installed]
php8.0/focal,now 8.0.17-1+ubuntu20.04.1+deb.sury.org+1 all [installed]

KevinTheJedi

kewl

Have you tried pinging the IP and port number from the webserver? Also try using a basic PHP ldap test script on the webserver to see if that connects fine.

Cheers.

kewl

Yes, port is open and it is pingable.

I used this php test script, test-ldap-2.php' from https://gist.github.com/leftclickben/9bcfca866b45e2d2b5fb and was able to successfully search for a user. In the script, I used

-b dc=<company name>, dc=com
-s sAMAccountName=<username>

On the auth-ldap plug-in in osticket, I only see Search Base. What should be the equivalent of the above for Search Base in the plugin?

kewl

For anyone with a similar issue. Search base doesn't need to be complicated. Removed everything except:

dc=<company name>,dc=com

works!

ntozier

If your running a [non routable] .local domain then you're search base could be like mine:

OU=Users,DC=corp,DC=domain,DC=local