LDAP Authentication

husetech

I recently upgraded from 1.11 to 1.12, this wasn't my first time upgrading so I think I am familiar with the process.
When a user tries to login they get a 500 Error page in their browser. Users are supposed to authenticate via LDAP.
I checked the authentication settings in the plugin section, the seemed okay but when saving it gives me the following error:
Could not connect to 1.1.1.1:389: Unable to bind to server 1.1.1.1
(I changed the IP but not the port for this post)

So far I tried using the old auth-ldap.phar plugin which resulted in the same behavior.
Is this a known issue? I wasn't able to find anything related to the current version.

ntozier

Please help us to help you by reading and following the posting guidelines located in this thread: Please read before requesting assistance. The more information you give us the better we will be able to assist you. Thank you.

Environment details?
Version of osTicket?
Version of LDAP/AD plugin?
Did you try re-entering the password?
Is there some reason why you aren't using TLS to talk to AD?

husetech

OSTicket is running on WIndows 2012 R2 using XAMPP.
The Problem occured after upgrading to Version 1.12
LDAP Plugin is the one that comes with the 1.12 package, I cannot see a version number.

I did try the following:
Re-entering the password
Using a different user to authenticate
turn on TLS
turn off TLS

I also just discovered this:

It seems HTTP passthru Authentication is disabled, I don't know why.
One more thing to mention, I made OSticket only reachable via HTTPS which worked fine in 1.11.
Is there any more information I can give you?

ntozier

Version of PHP?
Honestly the problem might be XAMPP. They do a some non-standard release configuration stuff

husetech LDAP Plugin is the one that comes with the 1.12 package, I cannot see a version number.

Where did you get the "1.12 package"? I ask because 1.12 doesn't come with any plugins unless you specifically select them on the download screen. Also since 1.12 wasn't out on 7/2017 you may be using an older version of the plugin for an earlier version and you may need to upgrade it.

husetech

Will update XAMPP completely.
When I downloaded 1.12 I selected the plugins to be downloaded as well. That's where I got them from.
I will double check that I am using the correct LDAP Plugin version.

ntozier

Okay. I look forward to your response.

husetech

Thank you @notozier, after updating XAMPP completely I was able to authenticate via LDAP again.
After what I've learned now, I would not recommend updating PHP seperately ?

ntozier

You're very welcome.

As s side note: Personally I would actually not recommend running XAMPP. Updating PHP it pretty trivial if its not bundled with other packages. We've had some pretty funky error reports from people running XAMPP only to find that it XAMPP's configurations that are causing the problems. I've never had a problem installing the packages separately. So I guess its a trade off.

BobWeston

For what it is worth, I seem to have this problem whenever I upgrade the application (php version, osticket version, etc). For what it is worth, I've got this containerized for Docker too.

The fix seems to be reentering the ldap password in the plugin. If I try to login before that step, it fails with all my user and agent ldap logins. If I reenter the ldap password in the plugin and then save it, things work as expected.

I'm adding this answer here because I've searched high and low and didn't actually find this answer anywhere else. Hopefully it saves someone else some hassles.

dijith

LDAP authentication is done only for clients. Not for agents. why???

ntozier

@dijith Please do not be a necromancer. This is a really old thread.

LDAP auth can be done for Agents and Users. So I am not real sure why you would think other wise.