LDAP Authentication and Lookup Causes 500 error when "Use TLS" is selected

KevinTheJedi

ctyler69

Where did you download the plugin from? Also, please post a screenshot of Admin Panel > Dashboard > Information.

Cheers.

ctyler69

KevinTheJedi
I downloaded the plugin here:
https://osticket.com/download/ and select 1.16.

KevinTheJedi

ctyler69

Did you select the correct version of osTicket before selecting the plugin for download? Plugins these days are specific to the core version of osTicket. So on the Plugin download page make sure you select osTicket-v1.16.5 first.

Cheers.

ctyler69

KevinTheJedi
I did.

ctyler69

KevinTheJedi
If you select plugin from that page, 1.16.5 is the only option.

KevinTheJedi

ctyler69

Okay, can you post a screenshot of the plugin config? Censor any sensitive info before posting.

Cheers.

ctyler69

KevinTheJedi
Here it is:

If I select save as is I get a 5oo error shown above. If I deselect the "Use TLS to communicate with the LDAP server." it saves without issue but the authentication does not work.

I do have ldap enabled

Also keep in mind the plugin settings were working earlier in the day

KevinTheJedi

ctyler69

Also, did you make sure you installed and enabled the php-ldap extension for PHP 8.0?

Cheers.

tkisida-xbyte

Downgrading PHP from 8.1 to 8.0 resolved the issue for me.

KevinTheJedi

tkisida-xbyte

They are already running PHP 8.0.

Cheers.

KevinTheJedi

ctyler69

Okay, add a Search Base and Save Changes and retest.

Cheers.

ctyler69

KevinTheJedi
I added
CN=Users,DC=domain,DC=com
as the search base and got the same result.

ctyler69

KevinTheJedi
Also, I am seeing some videos that are using 0.6.3. The one I am getting from the download page is 0.6.2. Is that expected?

KevinTheJedi

ctyler69

Do you see any connection attempt failures in the logs on the LDAP server? Any other related errors?

Cheers.

ctyler69

KevinTheJedi
I am not seeing any login failures. I think I may create some new webspace and do a complete fresh install to see if I can get that to work. Do you think something could have went sideways during the update?

KevinTheJedi

ctyler69

No, the latest is 0.6.2 as seen here:

https://github.com/osTicket/osTicket-plugins/blob/develop/auth-ldap/plugin.php#L5

Cheers.

ctyler69

KevinTheJedi
Thank you so much for your help this evening. I really appreciate. If you think of anything else I could try in the meantime, please let me know.

KevinTheJedi

ctyler69

Potentially, but doubt it. The only time it doesn't work is when using TLS right? Otherwise it works fine?

Cheers.

ctyler69

KevinTheJedi
That's correct. I think it might be import to note I do have some applications on that server that use LDAP/AD authentication that are working without issue.

Also, one of the main reason I upgraded was the email fetching was not working. I was getting a weird issue where:

Email was sent to the support email
Email was generated and sent out that a new ticket was generated. This email also included the ticket number.
When visiting the Agent panel no ticket with the previous information was found. Not even in the tickets table.

Like the tickets were not generated or they were and immediately deleted.

Weird, right?
Now, updated did fix the tickets generated via email but now this auth issue.

KevinTheJedi

ctyler69

Weird, right?

Very weird; I've never heard that one before.

... but now this auth issue.

I will say that I use OpenLDAP without TLS with v1.17.2 and PHP 8.1 and it works just fine. I don't have TLS setup for my OpenLDAP server but I can potentially look into it to see if I can replicate it. It will take quite a bit of time as I'm working on other things and this will be just added to the list of things. In the meantime, if you notice anything else in regards to this issue let me know.

Cheers.

ntozier

ctyler69 When visiting the Agent panel no ticket with the previous information was found. Not even in the tickets table.

The only time that I have heard about this happening is when someone has a test site (or an old site) that was collecting the emails and making them tickets in the old/test database.