alepensato

The only possible value for _user.status would be this:

• https://github.com/osTicket/osTicket/blob/develop/include/class.user.php#L88

As far as where to find the description, you just have to look at the codebase and figure it out.

As far as the user not being able to login, have you cleared your cookies/cache for the site? Have you tried Incognito/Private/InPrivate window? Have you ensured your LDAP Plugin has Client Authentication enabled?

Cheers.

KevinTheJedi
I tried with different browser, computer, reinstalled osticket on brand new vmachine etc etc, ldap auth is enabled for staff ad for client, but it not works

alepensato

Any specific errors? Do you see the auth attempt in the AD logs? Do you have User Registration enabled in your osTicket settings (Admin Panel > Settings > Users > Registration Method)?

Cheers.

I do not have access to the LDAP log, but i see that the same user with same logn data can login as Aggent but not as client.

Client registration mode does not change the matter, in any case, I have to manually add add user because the registration is not automatic.

Yes osticket is updated, as i wrote i also reinstalled osticked many time and used 1.17 and 1.18

alepensato

Did you install in Italian or just add the language pack afterwards? Can you test on an install that wasn’t installed with Italian language (just default English)?

Cheers.

KevinTheJedi
I used the packages downloaded from the site with the italian language pack and the ldap plugin.
probably i tried this way but i do not remember

KevinTheJedi
I reinstalled alla on a fresk vmachine, without the italian plugin. after basic osticket setup I enabled the ldap plugind and if i try to login as client, it not work and i get Access denied message and this php message
PHP Fatal error: Uncaught TypeError: ldap_free_result(): Argument #1 ($result) must be of type LDAP\\Result, bool given in phar:///var/www/html/include/plugins/auth-ldap.phar/include/Net/LDAP2/Search.php:501\nStack trace:\n#0 phar:///var/www/html/include/plugins/auth-ldap.phar/include/Net/LDAP2/Search.php(501): ldap_free_result()\n#1 /var/www/html/include/pear/PEAR.php(755): Net_LDAP2_Search->_Net_LDAP2_Search()\n#2 [internal function]: _PEAR_call_destructors()\n#3 {main}\n thrown in phar:///var/www/html/include/plugins/auth-ldap.phar/include/Net/LDAP2/Search.php on line 501, referer: http://

alepensato

You need to download and install the latest build of the LDAP plugin.

Cheers.

alepensato

Well maybe your LDAP config is not correct because it’s unable to destruct the connection after a search.

Cheers.

KevinTheJedi
LDAP config is ok, i was able to login as agent.
Maybe the plugins has been coded in a wrong way

alepensato

If that was the case everyone would be reporting issues

I’m at a loss in your case as I don’t know what’s happening without having detailed logs. If it’s working for Agents but not Users then something isn’t right.

Cheers.

alepensato

I just re-installed a fresh instance of v1.18.1 and latest LDAP plugin, configured the LDAP plugin, and was able to login as Agents AND Users with no issues. Something weird is going on in your setup or server. You really need to look at the AD logs on the AD server to see if an auth attempt is even being made for Users. You should also ensure that your LDAP plugin has both Agent and User authentication enabled. Sometimes you enable and save it doesn't actually save. Sometimes you have to clear all cookies/cache, go back to the LDAP plugin config, re-enable the settings, and re-save the changes.

Cheers.

Here the logs

I tried to make some changes to plugin but always the same problem

alepensato

I see for Client Login you have Error 32

54d0883.0b21c006 0x7f33950fc6c0 conn=1000 op=7 meta_back_search[0] match="" err=32 (No such object) text="".
654d0883.0b227f25 0x7f33950fc6c0 send_ldap_result: err=32 

... which according to google means:

Error 32 usually means, the referenced object does not exist. I.e. You entered a bad DN value for something that needed a correct DN value.

Cheers.

Where is this DN??? if it is not corrected, why i was able to login as staff??????
if ldap configuration is faulty.... i can not have access as CLIENT and as STAFF

alepensato

Not sure why, just going off the logs you provided. The DN is in the plugin instance configuration.

Cheers.