KevinTheJedi
I used the packages downloaded from the site with the italian language pack and the ldap plugin.
probably i tried this way but i do not remember

KevinTheJedi
I reinstalled alla on a fresk vmachine, without the italian plugin. after basic osticket setup I enabled the ldap plugind and if i try to login as client, it not work and i get Access denied message and this php message
PHP Fatal error: Uncaught TypeError: ldap_free_result(): Argument #1 ($result) must be of type LDAP\\Result, bool given in phar:///var/www/html/include/plugins/auth-ldap.phar/include/Net/LDAP2/Search.php:501\nStack trace:\n#0 phar:///var/www/html/include/plugins/auth-ldap.phar/include/Net/LDAP2/Search.php(501): ldap_free_result()\n#1 /var/www/html/include/pear/PEAR.php(755): Net_LDAP2_Search->_Net_LDAP2_Search()\n#2 [internal function]: _PEAR_call_destructors()\n#3 {main}\n thrown in phar:///var/www/html/include/plugins/auth-ldap.phar/include/Net/LDAP2/Search.php on line 501, referer: http://

    alepensato

    Well maybe your LDAP config is not correct because it’s unable to destruct the connection after a search.

    Cheers.

      alepensato

      If that was the case everyone would be reporting issues 😉

      I’m at a loss in your case as I don’t know what’s happening without having detailed logs. If it’s working for Agents but not Users then something isn’t right.

      Cheers.

      alepensato

      I just re-installed a fresh instance of v1.18.1 and latest LDAP plugin, configured the LDAP plugin, and was able to login as Agents AND Users with no issues. Something weird is going on in your setup or server. You really need to look at the AD logs on the AD server to see if an auth attempt is even being made for Users. You should also ensure that your LDAP plugin has both Agent and User authentication enabled. Sometimes you enable and save it doesn't actually save. Sometimes you have to clear all cookies/cache, go back to the LDAP plugin config, re-enable the settings, and re-save the changes.

      Cheers.

      7 days later

      Here the logs

      client-log.zip
      2kB
      staff-log.zip
      1kB

      I tried to make some changes to plugin but always the same problem

        alepensato

        I see for Client Login you have Error 32

        54d0883.0b21c006 0x7f33950fc6c0 conn=1000 op=7 meta_back_search[0] match="" err=32 (No such object) text="".
        654d0883.0b227f25 0x7f33950fc6c0 send_ldap_result: err=32 

        ... which according to google means:

        Error 32 usually means, the referenced object does not exist. I.e. You entered a bad DN value for something that needed a correct DN value.

        Cheers.

        Where is this DN??? if it is not corrected, why i was able to login as staff??????
        if ldap configuration is faulty.... i can not have access as CLIENT and as STAFF

          alepensato

          Not sure why, just going off the logs you provided. The DN is in the plugin instance configuration.

          Cheers.

          alepensato

          DN is in your Search Base setting btw. Make sure the DN you have configured includes the Agent and User groups.
          Also, make sure you are binding with an Admin account (for the Search User).

          Cheers.

            KevinTheJedi

            i use the same user to login as STAFF and as CLIENT.

            if ldap configuration is faulty.... i can not have access as CLIENT and as STAFF

              alepensato

              Go to your database, go to your *_user_account table, and show the column values for the record where user_id = 7.

              Also, are you logging in with the User's Email Address or the AD Username?

              Cheers.

              alepensato

              For your User you do not have a User Account. Try going to Agent Panel > Users > User Directory, click your User (ID of 7), click Register, set the Authentication Sources to your LDAP instance, set the appropriate AD username for the Username field, and click Create Account. Then logout as an Agent, visit the Client Portal, and attempt to login as the AD User again.

              Cheers.