LDAP working only for agents

luismsobotyk

Hi folks, I just make a fresh installation of osticket 1.18.1 and installed LDAP Plugin (0.6.2). If I put Registration Method as Public osticket creates a new account when a user try to log using LDAP credentials but it doesnt log in the system and doesnt return any message.
If I make this account agent i can log in as agent but still having the problem trying to log in as a normal user and i receive no message.

Also, i know that i dont need to let registration method as public. I should let it as private but if i do that and try to log in with a new user i receive the message: "Access Denied. Contact your help desk administrator to have an account registered for you"

I already tryied uninstall and reinstall the plugin and it didnt work. I also have sure the credentials for my LDAP are working fine because i can log in as agent, i can find all my users when i add a new agent and i have a old vesion installation running on production wich is working with the exact same credentials dor LDAP.

Hope someone can help me 😃

KevinTheJedi

luismsobotyk

We need a screenshot of Admin Panel > Dashboard > Information. Also, you may need this:

https://github.com/osTicket/osTicket-plugins/issues/276#issuecomment-1939580525

Also, when you get the error about contacting admin are you attempting login as Agent or User?

Cheers. M

luismsobotyk

KevinTheJedi Hi Kevin, i appreciate your answer.

By my mistake i was using php8.3, however i downgraded to 8.1 (and 8.2 before it) as the link you provided sugests and keep having an issue with ldap, then i could log in with users that are already in my database but users who never logged in are not automatically created and returning "Access denied" message.

Responding your question, i was getting the contacting admin error loging as User.

After try downgrade i tryed the other solution, downloading the more recent version of LDAP Plugin. Now, as User, I cannot log in with any user (registered or no in the database) but osticket return no message.

This is my Information Page now:

Also, i record this video showing that osticket dont return any message. The user in this example is not in the database.

https://youtu.be/N3qLaFOnP9s

luismsobotyk

I read this entire thread (https://forum.osticket.com/d/102536-active-directory-user-authentication-doesnt-work-agents-do/93)

Nothing there solve my problem, so i start to debbug ldap plugin by my own. Debbuging the authentication.php file i realized that the authenticate() method is returning a ClientSession Object in line 225: return $this->lookupAndSync($username, $dn);

I don't know for sure where to look now, but if I make any progress I come back here.

KevinTheJedi

ipsieker luismsobotyk

Y'all might just need to wait for the next set of osTicket releases and new builds of the LDAP plugin to retest. There are various patches and such floating around that addresses all the LDAP issues so if you cannot find/apply all of them you'll just have to wait.

Cheers.

ipsieker

Havin the same Problem.
As I wrote in the other thread I got to the point, that
UserAuthenticationBackend::register(new ClientLDAPAuthentication($config));
is called.
So from the class ClientLDAPAuthentication the function function __construct($config) is called, too.
But from the same class the function function authenticate($username, $password=false, $errors=array()) is never calles when a client tries to login. That seems to be my problem.
Unfortunately I'm a little bit lost in the file include/class.auth.php ...

luismsobotyk

KevinTheJedi I appreciate your help. There is any forecast for that?

And, there is any version that I can use LDAP Authentication and OAuth plugin fine? I have a 1.10 osticket running right now and working with my LDAP but IMAP will no longer work from September end so I will need OAuth as well. I thanks in advance.

KevinTheJedi

luismsobotyk

All I can say is soon; we’ve never had set release dates - ever. That’s not healthy for anyone.

Not at the moment unless you have the patches applied and latest Net_LDAP2 package within the plugin. There are many people running it right now with v1.18.1 and latest build with the above patches and Net_LDAP2 package.

So to recap you need to download/install/unpack the latest build of the LDAP plugin (make sure you are downloading the LDAP version specific to your osTicket version), download the latest Net_LDAP2 package, and replace that directory in the plugin code with the one you downloaded; as shown in my earlier referenced GitHub comment. Once you’ve done that you can apply any LDAP patches for the core codebase (essentially the first two from me), apply this one for the core codebase, apply these two pulls to the plugin codebase, ensure the top three pulls listed here are applied to your plugin codebase, ensure you are using PHP 8.2, and retest. If that doesn’t work then you are having some weird issue specific to your environment or simply have something cached or something along those lines in which you would simply need to wait for the new releases and plugin builds.

Cheers.

luismsobotyk

KevinTheJedi I appreciate. I made it and it still doesnt work. So I tried to make a fresh installation from OS instalattion to ensure that it would not have anything cached at all. I did all you sugest before any login attempt. Fun behavior, the first two accounts logged successufuly, the third I tried had the same issue as before, no message at all but no session started. After this one the other two accounts (who functioned before) doesnt work anymore showing the same behavior.

Anyway, I will keep trying find out a solution and if I make any progress I return here to say what I did.

Thanks anyway for your time 😃