LDAP Issue

Alex10

Hello,

I'm having a problem when i'm trying configure my LDAP Plugin on osTicket, it says: LDAP Extension is not available. Please install or enable the 'php-ldap' extension on your web server.
I'm using php 8.1 and I already modified my php.ini file on path: etc/php/8.1/apache2:

Do you know what else could i check/do/modify?

KevinTheJedi

Alex10

Have you confirmed that extension actually exists on your machine? Are you certain you installed the latest PHP 8.1 ldap extension and it's not using an older version of it? Have you tried restarting your webserver and PHP-FPM (if you're running it)?

Cheers.

Alex10

KevinTheJedi Hi Kevin!

Where can i check if the extension already exist on my ubuntu server?
Here's a screenshot where i'm trying install the latest version of ldap and it says is already the newest version:

Yes, i already ran command sudo systemctl restart apache2 and restarted my server at all.

KevinTheJedi

Alex10

You’ll need to look at your INI file to see where it includes them from and look there.

Cheers.

Alex10

KevinTheJedi
I don't know if it's this, i used the 'find' utilitie and just find this with LDAP word and the 1st screenshot that i putted on the start of this discussion:

Let me know if i'm wrong or i need search this in another place or another form.

KevinTheJedi

Alex10

No, that’s not it. You’ll need to do some googling. There is a setting in the INI file that defines the path to load all modules/extensions from. You’ll need to check that path.

Cheers.

Alex10

KevinTheJedi I believe you mean to this line of INI file, but i'm not sure... anyways, i putted the path where my modules/extensions are located but same issue happened on my osTicket portal when i'm configuring my LDAP plugin 🙁

KevinTheJedi

Alex10

You’ll have to look at your PHP logs for any errors.

Cheers.

Alex10

KevinTheJedi Okay so... i ran php --ini command and i saw is running files from directory /etc/php/8.1/cli when i have all my files where i configured my .ini on /etc/php/8.1/apache2... maybe this is the problem? Do you know if there's a way to declare to grab apache2 directory?

KevinTheJedi

Alex10

PHP CLI is different than the PHP that Apache uses. You will be better off creating a PHP file with <?php phpinfo(); and visiting that in the browser to see the correct information.

Cheers.

Alex10

KevinTheJedi Hi Kevin, this logs could help in something?
osticket logs

php logs

KevinTheJedi

Alex10

No, those are not helpful in the slightest.

Maybe this will help?

https://github.com/osTicket/osTicket-plugins/issues/129#issuecomment-565574203

If all else fails you’ll need to do some googling like “php-ldap extension installed but not working”, etc.

Cheers.

Alex10

KevinTheJedi
Well, now i'm sure my PHP grab the configuration of cli Directory and not of my apache2 Directory.
I tried configuring INI file of cli directory but same issue happened. Don't know if is something obligatory use apache2 directory but i don't know indicate to my PHP use that Directory.

I'm giving up with this lol.

KevinTheJedi

Alex10

Okay, I hope you can eventually figure it out. You can always use OAuth2 to authenticate with your provider instead of using LDAP. Doesn’t work exactly the same but will let them authenticate with Microsoft vs local credentials in osTicket.

Cheers.

Alex10

KevinTheJedi There's a guide for configure OAuth2 for end users and agents? I already do this configuration for helpdesk email but no for end users/agents.

KevinTheJedi

Alex10

Yep yep:

https://docs.osticket.com/en/latest/OAuth2/Microsoft%20Authentication%20(SSO)%20Guide.html

Cheers.

Alex10

KevinTheJedi
Looks promising, thanks for your time Kevin.

Alex10

Hey Kevin, i did this but... i have a little inconvenient. How i'm gonna connect to my server if i put the redirect URL is a localhost? Usually to login to my osticket portal i use: osticket.saguicorp.local. When i try log in everything is okay, request my email and my password but then:

KevinTheJedi

Alex10

If you do not have a legitimate domain name with HTTPS then you will have to use localhost. If you have issues with that send your complaints to MS as they implemented these restrictions.

Cheers.

Alex10

KevinTheJedi Hey Kevin! Good news, i solve the LDAP Plugin issue. I can authenticate now with my network user but, i have a little doubt, do you know why my end users can't authenticate? I don't know if i'm missing something. When i configured the plugin i put this to clients and agents.

KevinTheJedi

Alex10

Check your logs on your server for any errors. Check your AD logs for any login attempts.

Without any errors it’d be impossible for me to say.

Cheers.