ldap not enter whit user : Page 5

ldap not enter whit user

alepensato

KevinTheJedi
I was unable to login as any user, I can only to login as Agent/Staff.
In the staff table the backend is ldap.p4i3

KevinTheJedi

alepensato

Try deleting a _user_account record associated with a user you can test with and try logging in after that.

Cheers.

alepensato

I deleted it, and now i have only a record in ost_user, but i was unable to login

MariaDB [osticketarea]> select * from ost_user;
+----+--------+------------------+--------+--------------------+---------------------+---------------------+
| id | org_id | default_email_id | status | name | created | updated |
+----+--------+------------------+--------+--------------------+---------------------+---------------------+
| 7 | 0 | 7 | 0 | ALESSANDRO PENSATO | 2023-10-29 10:31:42 | 2023-10-29 10:31:42 |
+----+--------+------------------+--------+--------------------+---------------------+---------------------+

alepensato

What does mean status values??? where is a reference to match value with description?

KevinTheJedi

alepensato

The only possible value for _user.status would be this:

https://github.com/osTicket/osTicket/blob/develop/include/class.user.php#L88

As far as where to find the description, you just have to look at the codebase and figure it out.

As far as the user not being able to login, have you cleared your cookies/cache for the site? Have you tried Incognito/Private/InPrivate window? Have you ensured your LDAP Plugin has Client Authentication enabled?

Cheers.

alepensato

KevinTheJedi
I tried with different browser, computer, reinstalled osticket on brand new vmachine etc etc, ldap auth is enabled for staff ad for client, but it not works

KevinTheJedi

alepensato

Any specific errors? Do you see the auth attempt in the AD logs? Do you have User Registration enabled in your osTicket settings (Admin Panel > Settings > Users > Registration Method)?

Cheers.

alepensato

I do not have access to the LDAP log, but i see that the same user with same logn data can login as Aggent but not as client.

Client registration mode does not change the matter, in any case, I have to manually add add user because the registration is not automatic.

KevinTheJedi

alepensato

It should be once they login and they don’t exist or don’t have an account yet. Seems to me like you either don’t have LDAP config configured properly for Users or something is going on with your LDAP config. Are you certain you are using the latest LDAP Plugin build and v1.18.1?

Cheers.

alepensato

Yes osticket is updated, as i wrote i also reinstalled osticked many time and used 1.17 and 1.18

KevinTheJedi

alepensato

Did you install in Italian or just add the language pack afterwards? Can you test on an install that wasn’t installed with Italian language (just default English)?

Cheers.

alepensato

KevinTheJedi
I used the packages downloaded from the site with the italian language pack and the ldap plugin.
probably i tried this way but i do not remember

alepensato

KevinTheJedi
I reinstalled alla on a fresk vmachine, without the italian plugin. after basic osticket setup I enabled the ldap plugind and if i try to login as client, it not work and i get Access denied message and this php message
PHP Fatal error: Uncaught TypeError: ldap_free_result(): Argument #1 ($result) must be of type LDAP\\Result, bool given in phar:///var/www/html/include/plugins/auth-ldap.phar/include/Net/LDAP2/Search.php:501\nStack trace:\n#0 phar:///var/www/html/include/plugins/auth-ldap.phar/include/Net/LDAP2/Search.php(501): ldap_free_result()\n#1 /var/www/html/include/pear/PEAR.php(755): Net_LDAP2_Search->_Net_LDAP2_Search()\n#2 [internal function]: _PEAR_call_destructors()\n#3 {main}\n thrown in phar:///var/www/html/include/plugins/auth-ldap.phar/include/Net/LDAP2/Search.php on line 501, referer: http://

KevinTheJedi

alepensato

You need to download and install the latest build of the LDAP plugin.

Cheers.

alepensato

KevinTheJedi the plugins has been downloaded form the osticket site

KevinTheJedi

alepensato

Well maybe your LDAP config is not correct because it’s unable to destruct the connection after a search.

Cheers.

alepensato

KevinTheJedi
LDAP config is ok, i was able to login as agent.
Maybe the plugins has been coded in a wrong way

KevinTheJedi

alepensato

If that was the case everyone would be reporting issues 😉

I’m at a loss in your case as I don’t know what’s happening without having detailed logs. If it’s working for Agents but not Users then something isn’t right.

Cheers.

KevinTheJedi

alepensato

I just re-installed a fresh instance of v1.18.1 and latest LDAP plugin, configured the LDAP plugin, and was able to login as Agents AND Users with no issues. Something weird is going on in your setup or server. You really need to look at the AD logs on the AD server to see if an auth attempt is even being made for Users. You should also ensure that your LDAP plugin has both Agent and User authentication enabled. Sometimes you enable and save it doesn't actually save. Sometimes you have to clear all cookies/cache, go back to the LDAP plugin config, re-enable the settings, and re-save the changes.

Cheers.

alepensato

Here the logs

client-log.zip

2kB

staff-log.zip

1kB

I tried to make some changes to plugin but always the same problem

KevinTheJedi

alepensato

I see for Client Login you have Error 32

54d0883.0b21c006 0x7f33950fc6c0 conn=1000 op=7 meta_back_search[0] match="" err=32 (No such object) text="".
654d0883.0b227f25 0x7f33950fc6c0 send_ldap_result: err=32

... which according to google means:

Error 32 usually means, the referenced object does not exist. I.e. You entered a bad DN value for something that needed a correct DN value.

Cheers.

« Previous Page Next Page »