Active Directory User Authentication Doesn't Work - Agents Do..?: Page 2

Active Directory User Authentication Doesn't Work - Agents Do..?

KevinTheJedi

That usually means it can't connect to the AD server. We call dn() on $r->current() which should be the current AD Entry from the binded AD connection.

You can also try applying the following changes:

Also, have you tried entering the password for the bind user as well as adding a search base?

Cheers.

whowe-ppd

Agents can log in 100% of the time -- I'm using the same LDAP instance for Agents and users -- should I not be doing that?

KevinTheJedi

whowe-ppd

That should be fine. Others have complained about PHP 8.1 so try downgrading to 8.0.

Cheers.

whowe-ppd

I can't go to PHP8.0 at the moment -- is there a way we can get you more information to see if this bug can be fixed or what's the official process?

KevinTheJedi

whowe-ppd

I've tried replicating the 8.1 issue repeatedly and cannot replicate the issue so the cause is unknown and I can't debug any further as I cannot replicate the issue. I'm using v1.17.2, PHP 8.1, and OpenLDAP and everything works as expected.

We do have some LDAP plugin patches and such coming which I referenced above so hopefully that will address the issue for you.

Cheers.

roark

I am having the same problem, I am running osTicket 1.17.2 with the LDAP Authentication and Lookup plug-in version 0.6.2. I'm running Ubuntu 22.04 with PHP 8.1. The error is the one that includes "Call to a member function dn() on bool..."

I guess I'm just looking for clarification, I found another thread where it said that the LDAP Authentication plug-in required PHP 8.0 and it also said to look at the documentation. I have searched for official documentation for the plug-in, if I go the docs.osticket.com/en/latest and look at the plugins section, I don't see it listed. Can someone please tell me where to find the official documentation for this plugin?

Also, can someone verify once and for all whether PHP 8.0 is required or should it be working with PHP 8.1? I have the same plugin installed and working on an older osTicket installation and I was able to copy the configuration settings from there so I'm pretty sure I have it configured right.

Thank you

KevinTheJedi

roark

PHP 8.1 should work as I mentioned above. There is no plugin documentation for the ldap plugin.

Cheers.

sgriffin

I installed php8.0, disabled 8.1, and set apache to use 8.0 to no avail. I'll check out the notes linked.

Wismerhill

Hello,
I have almost the same problem...
I upgraded OSTicket from version 1.15.2 to version 1.17.2, going from PHP7.3 to PHP8.1 and MySQL/MariaDB version is 10.3.36. My server is a Debian 10 Virtual Machine.
I had previously upgraded my plugins including the LDAP plugin to 0.6.2 (Is it really the lastest version ??) and added a LDAP Search User.
The upgrade is done without problems, the integration of the PHP8.1 Extensions made by myself appears correct after the upgrade (Dashboard > Information looks great with valid sign !).
No errors in the Apache2 logs for example.
I upgraded as a Local (root) account so when I try to reconnect with my AD account I get an "Access denied" message.

I searched the forum and found a solution that works for agents here: https://forum.osticket.com/d/101553-ldap-not-enter-whit-user/66
You have to change the authentication method to "Local", save and change again to "LDAP" and save. After that the agent account can be reconnected by the LDAP method

However my "Standard" users who are not "Agents" still can't connect on their side, they get an "Access denied" message.

I have read many topics in the forum and I can't find any solution, even if I try to change in the database directly in the ost_user_account table the "backend" column by "NULL" and then by "ldap.client" it still doesn't work.

I'm pretty sure it's not a PHP version problem for my installation (between 8.0 or 8.1) because I don't have an error like you and according to the last post from @KevinTheJedi .
However, be aware that you have to completely deactivate/uninstall your old versions of PHP to avoid any problems of extension conflicts between versions.

I'm still looking for a solution but if you have an idea to help me, I'm interested!

Thanks

KevinTheJedi

Wismerhill

You need to do this:

https://forum.osticket.com/d/101553-ldap-not-enter-whit-user/15

Cheers.

Wismerhill

KevinTheJedi
Ok, I was too fast on this topic ... Thanks for telling me where I should look.
Well, now I also get the error of @roark ...

I'm going to look for a solution for this problem in PHP 8.1, if I don't find it I'll try in PHP 8.0 ...

I'll keep you up to date,
Thanks to you anyway @KevinTheJedi !

KevinTheJedi

Wismerhill

Did you also try applying these changes?

https://forum.osticket.com/d/102536-active-directory-user-authentication-doesnt-work-agents-do/11

Cheers.

Wismerhill

Hello,
I made the fixes in the php code and I also made the fix you put on GitHub in the plugin.
I re-compiled the plugin, uninstalled the old auth-ldap.phar and put mine instead.
I'm back to php8.1
After re-installing the plugin in OSTicket, I had to redo the database modification because the identifiers in the bakend column changed (I was expecting it).
The update is done, it works correctly for the agents but still not for the users.
This time I have no error in the /var/log/apache2 logs.

I'm still looking for an error somewhere in the logs 🙂

roark

I am still puzzled by this. For a couple years or so we've had a server running Ubuntu 18.0.4 with OSTicket 1.14.2 with the LDAP Authentication and Lookup plug-in version 0.6.2 which works fine. The plug-in is the same version that came with OSTicket 1.17.2 so I would think that matching the same settings should work fine, but I'm still getting the same error. Both servers are virtualized and running on the same Hyper-V server as is the domain controller it is authenticating to. They are all connected to the same virtual switch and the firewall is inactive on all three machines.

I've checked that all the PHP extensions that were installed on the old server were installed on the new one before installing OSTicket so as far as I can tell, the only difference is the version of Ubuntu, and the version of OSTicket. The only thing I can think of is perhaps I'm missing some dependency on the new server that was installed on the old one. Are there any Ubuntu packages that need to be installed for the LDAP plug-in to work correctly that are not required for OSTicket itself? Other than that, I'm kind of at a loss. I will continue reading through the various threads to see if I can find anything else that may help.

Thank you

KevinTheJedi

roark

You definitely need the php-ldap extension.

Cheers.

roark

Thanks Kevin, it would be nice if it was that easy but php-ldap is installed. Before installing OSTicket on the new server I made sure that all the PHP extensions installed on the older server were also on the new one. I just double checked and it definitely is installed.

KevinTheJedi

roark

I was just answering the question of:

Are there any Ubuntu packages that need to be installed for the LDAP plug-in to work correctly that are not required for OSTicket itself?

We do have a new release coming soon as well as new builds of the LDAP plugin, etc. so stay tuned!

Cheers.

roark

I decided to test PHP 8.0 to see if it would help. The repository I used also installed PHP 8.2 by default so before I installed 8.0 I tried it with 8.2, but still experienced the same error.
However, after installing 8.0.27 and setting Apache to use that version, we are able to authenticate and all seems to be working perfectly now.

whowe-ppd

roark
Not to be a total PITA for you -- but an you tell me -- did you just install 8.0.27 and all the same modules that you have for 8.1? To install 8.0.27 is it as easy as specifying 8.0.27?

roark

I followed the instructions here (I hope it's OK to paste a link here)...

https://blog[dot]devops[dot]dev/downgrade-php8-1-to-php8-0-or-php7-4-on-ubuntu-22-04-2fab4a6a3be3

When I first added the repository and ran apt-update it upgraded a lot of the 8.1 packages that were already there and also installed 8.2. I tested the plug-in with 8.2 and it still was not working for me so I followed the instructions to install 8.0 and 8.0.27 is what I ended up with. Now, my server has 8.0, 8.1 and 8.2 all installed but 8.0 has been set as the default, and it is working well for us now.

« Previous Page Next Page »