alepensato

I just re-installed a fresh instance of v1.18.1 and latest LDAP plugin, configured the LDAP plugin, and was able to login as Agents AND Users with no issues. Something weird is going on in your setup or server. You really need to look at the AD logs on the AD server to see if an auth attempt is even being made for Users. You should also ensure that your LDAP plugin has both Agent and User authentication enabled. Sometimes you enable and save it doesn't actually save. Sometimes you have to clear all cookies/cache, go back to the LDAP plugin config, re-enable the settings, and re-save the changes.

Cheers.

    7 days later

    Here the logs

    client-log.zip
    2kB
    staff-log.zip
    1kB

    I tried to make some changes to plugin but always the same problem

      alepensato

      I see for Client Login you have Error 32

      54d0883.0b21c006 0x7f33950fc6c0 conn=1000 op=7 meta_back_search[0] match="" err=32 (No such object) text="".
654d0883.0b227f25 0x7f33950fc6c0 send_ldap_result: err=32

      ... which according to google means:

      Error 32 usually means, the referenced object does not exist. I.e. You entered a bad DN value for something that needed a correct DN value.

      Cheers.

        Where is this DN??? if it is not corrected, why i was able to login as staff??????
        if ldap configuration is faulty.... i can not have access as CLIENT and as STAFF

          alepensato

          Not sure why, just going off the logs you provided. The DN is in the plugin instance configuration.

          Cheers.

            alepensato

            DN is in your Search Base setting btw. Make sure the DN you have configured includes the Agent and User groups.
            Also, make sure you are binding with an Admin account (for the Search User).

            Cheers.

                KevinTheJedi

                i use the same user to login as STAFF and as CLIENT.

                if ldap configuration is faulty.... i can not have access as CLIENT and as STAFF

                    alepensato

                    Go to your database, go to your *_user_account table, and show the column values for the record where user_id = 7.

                    Also, are you logging in with the User's Email Address or the AD Username?

                    Cheers.

                      alepensato

                      For your User you do not have a User Account. Try going to Agent Panel > Users > User Directory, click your User (ID of 7), click Register, set the Authentication Sources to your LDAP instance, set the appropriate AD username for the Username field, and click Create Account. Then logout as an Agent, visit the Client Portal, and attempt to login as the AD User again.

                      Cheers.

                          alepensato

                          That’s not what your example says:

                          MariaDB [osticketarea]> select * from ost_user;
+----+--------+------------------+--------+--------------------+---------------------+---------------------+
| id | org_id | default_email_id | status | name | created | updated |
+----+--------+------------------+--------+--------------------+---------------------+---------------------+
| 7 | 0 | 7 | 0 | ALESSANDRO PENSATO | 2023-10-29 10:31:42 | 2023-10-29 10:31:42 |
+----+--------+------------------+--------+--------------------+---------------------+---------------------+

                          Also, I still have not seen your plugin instance config.

                          Cheers.

                              alepensato

                              Please create your own discussion so we don’t keep blowing up this thread. There we can dig deeper as I’m unable to replicate this issue.

                              Cheers.

                                Write a Reply...