Thanks for the pointers on the Debug.

I worked on the ldap.inc.php as well as config.php.

I think i found the issue but now since my modification, the debug spits me back to the non debug login screen. ODD.

Would someone have a suggestion as to how to stay in Debug and where to go from now?

Thanks

Here are my modifications to the ldap.inc.php

function ldap_search_user($ldap_group, $userdn, $depth = -1)
{
global $ds, $config;
# $compare = ldap_compare($ds, $ldap_group, $config['auth_ldap_groupmemberattr'], $userdn);

$binduser = ldap_internal_dn_from_username($userdn);
$compare = ldap_compare($ds, $ldap_group, $config['auth_ldap_groupmemberattr'], $binduser);
if ($compare === TRUE)
{
    return TRUE; // Member found, return TRUE
}
elseif (($config['auth_ldap_recursive'] === true) && ($depth < $config['auth_ldap_recursive_maxdepth']))
{
    $depth++;

    //$filter = "(&(objectClass=group)(memberOf=". $ldap_group ."))";
    $filter_params                = array();
#    $filter_params[] = ldap_filter_create('objectClass', 'group');
#///////
    $filter_params[] = ldap_filter_create('objectClass', $config['auth_ldap_groupobjectclass']); #Change to posix group for OpenLdap
#///////

Here is what i added to config.php
$config['auth_ldap_groupobjectclass'] = "posixgroup";

This is the testing I am doing on my Ldap server.

#ldapcompare -Y GSSAPI "cn=admins,cn=groups,cn=accounts,dc=domain,dc=com" memberof::dave

SASL/GSSAPI authentication started
SASL username: dave@GRENADINE.JUICY
SASL SSF: 56
SASL data security layer installed.
FALSE

# ldapcompare -Y GSSAPI "cn=admin,cn=groups,cn=accounts,dc=domain,dc=com" member:uid=dave,cn=users,cn=accounts,dc=domain,dc=com
SASL/GSSAPI authentication started
SASL username: dave@GRENADINE.JUICY
SASL SSF: 56
SASL data security layer installed.
TRUE

Dave

On Mon, Mar 6, 2017 at 4:45 PM, David Haché <dave@dhache.com> wrote:

Hi,
I have been using observium for a while and I am pleased with it.
Now when I try to integrate LDAP, I can't find the logs to troubleshoot.

I activated LDAP and it connect correctly, the query looks good but no go.

Log from my LDAP server
[06/Mar/2017:16:41:55.102124385 -0500] conn=255138 op=1 SRCH base="cn=users,cn=accounts,dc=domain,dc=com" scope=2 filter="(&(objectClass=posixaccount)(uid=dave))" attrs=ALL

Does anyone have suggestion how to activate the loggin for ldap on the PHP / NGINX / Observium side?
Thanks.

Dave