Active Directory User Authentication Doesn't Work - Agents Do..?: Page 5

Active Directory User Authentication Doesn't Work - Agents Do..?

KevinTheJedi

Everyone,

Below is a custom build of the plugin until we make new releases. This has the PHP 8.1 support patches as well as a patch to fix a fatal error included. Just replace your current plugin build with this build (after unzipping of course).

auth-ldapphar.zip

116kB

mtovar

Updated the plugin with this one KevinTheJedi and client authentication works as expected. Thanks

gamerclassn7

If anyone have same problem whitch is not respolved by build from @"KevinTheJedi" i created separed thread where i am trying to troubleshoot it 🙂

https://github.com/osTicket/osTicket-plugins/issues/273

KevinTheJedi

gamerclassn7

That's because your issue is completely unrelated to this thread. Your issue is with LDAPS not connecting at all. This thread is about LDAP is able to connect but user authentication is not working.

Cheers.

gamerclassn7

KevinTheJedi OK sorry should i remove the message ?

soiledhalo

Sigh, I have a similar issue using the LDAP plugin, inclusive of the one that @KevinTheJedi submitted. I installed it, configured it and it works fine for agent creation, but no matter what, the user accounts get access denied.
OS: AlmaLinux 9.2
OSTicket v1.17.3
Apache: 2.4.53
MySQL: 10.5.16
PHP: 8.1.19

I have all of the recommended extensions installed as well.
I also checked the ost_user_account table and can confirm that the backend is ldap.client.pxxx

Is there anything else I can check to get this to work?

Regards.

KevinTheJedi

soiledhalo

Clear the cache/cookies and retest. Have them try a different browser/device. Make sure you restart the webserver and PHP-FPM (if you're running it) to clear any file cache. If you use a shared host ask them if there is anything else you need to do to clear any file cache. Most of the time PHARs are heavily cached so even if you replace the PHAR file it will still serve the cached version.

Other than that look into your logs on the AD server to see if their authentication attempts are actually going through and if they are successful or not.

Cheers.

soiledhalo

KevinTheJedi To confirm, I deleted the file and restarted the server before replacing it. I manage the server so I have full access. I see in Event Viewer the successful LDAP authentication on the AD server "An account was successfully logged on."
Will continue to read, but I'm unsure on what else I can do. Is there a way to run OSTicket or the Plugin in a debug mode?

KevinTheJedi

soiledhalo

No, you'll need to add debug statements in the code yourself. It does sound like the new plugin is not loading for some reason. Check your logs (general server logs, webserver error logs, PHP error logs, MySQL/MariaDB error logs, osTicket System Logs, Browser Console logs, etc.) for any related errors on User login.

Cheers.

soiledhalo

KevinTheJedi Thanks much. Like @eagletech, none of my logs show any related errors.
I'll look into downgrading my PHP version from 8.1.19 to 8.1.17. If that doesn't work, we will have to put the install on pause. What's weird is that agent accounts that use LDAP are fine, it's just the users that do not work.

KevinTheJedi

soiledhalo

Yes, and this is due to the user ldap auth code not accounting for latest PHP 8.1 changes which is addressed in the custom build of the plugin I linked above. Here is the relevant pull that's included in the custom build of the plugin:

https://github.com/osTicket/osTicket-plugins/pull/271

Cheers.

soiledhalo

KevinTheJedi I downgraded to PHP 8.0.28, rebooted the system and ensured that everything else on my machine works (they do). When I tried to login a user, I still got access denied. On a whim, I removed, your plugin, deleted the configuration, restarted the server, and then added the original plugin - now it works. Guess we will stay on PHP 8.0 for a while. Thanks for your assistance, I appreciate it.

GenApophis01

Hi, quick question, is there a solution i.e. a new release on the horizon for the LDAP Plugin???
i would lie to use it but i can't downbgrade to a lower php version.

KevinTheJedi

GenApophis01

Of course. New builds are made on new core releases.

Cheers.

GenApophis01

Can you give an estimated date by when that will be?

KevinTheJedi

GenApophis01

Next week some time.

Cheers.

GenApophis01

Hi, just a quick question, is the AD Plugin Updated jet?

KevinTheJedi

GenApophis01 yea

ipsieker

KevinTheJedi I hope, it's OK to reopen this thread here.
I have the same problem: agents can log in via LDAP, clients can't.

Here are the specs of server:

LDAP plugin version is 0.6.2p8

What I did so far is extracting the phar as you described above and set some error_log statements in the file authentication.php.
So I found out, that the function authenticate in the class ClientLDAPAuthentication is never called. So the client login fails.

Any Ideas?

Cheers Bjoern

KevinTheJedi

ipsieker

See here:

https://forum.osticket.com/d/105097-ldap-working-only-for-agents/2

Cheers.

« Previous Page