Excellent! Don't forget to remove the unprivileged debug again, as this may otherwise leak information to outsiders about your setup.
Tom
On 5/29/2018 5:39 PM, Jean-Francois Allain wrote:
Hello Tom,
Thanks a lot for your answer, that's was very helpful.
I found the issue, I set this parameter to "user" ($config['auth_ldap_objectclass'] = "user";) and it worked !
Thanks again and have a good day,
JF
On 2018-05-29 03:37 AM, Tom Laermans wrote:
To debug LDAP, you need to set $config['web_debug_unprivileged'] = TRUE
Then go to your.observium/debug and look at the output which should hopefully help you...
Tom
On 5/28/2018 11:57 PM, Jean-Francois Allain wrote:
Hi Adam,
I followed this procedure : http://docs.observium.org/updating/ especially this part : Community Edition Upgrade to latest Major release
Everything is working well except the LDAP authentication, I tried to activate the debug mode and I looked in the apache logs. But I don't have enough information to understand what is happening in the background.
When I tried to login nothing happen, no error message just nothing.
Any help will be really appreciated.
Thanks in advance,
JF
On 2018-05-28 03:31 PM, Jean-Francois Allain wrote:
And just to be sure, did somebody is using php7.0-ldap with the latest CE version and LDAPS ?
Thanks,
JF
On 2018-05-28 12:19 PM, Jean-Francois Allain wrote:
Hi Adam,
Yes I know that many changes were applied in 3 years but I have to do the update though. Here is my LDAP config in config.php for information :
//// LDAP Authentication
$config['auth_ldap_version'] = 3; // LDAP client version (2 or 3) $config['auth_ldap_server'] = "ldaps://servername:3269/"; // LDAP server name $config['auth_ldap_port'] = 3269; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_binddn'] = "cn=XX,ou=special accounts,ou=XX,dc=XX,dc=XX"; $config['auth_ldap_bindpw'] = "password"; $config['auth_ldap_bindanonymous'] = FALSE; $config['auth_ldap_kerberized'] = FALSE;
$config['auth_ldap_attr']['uid'] = "userPrincipalName"; $config['auth_ldap_attr']['uidNumber'] = "uidNumber"; $config['auth_ldap_attr']['cn'] = "displayname"; //$config['auth_ldap_attr']['dn'] = "dn"; $config['auth_ldap_objectclass'] = "posixAccount";
$config['auth_ldap_prefix'] = "cn="; $config['auth_ldap_suffix'] = "ou=users,ou=XX,dc=XX,dc=XX"; $config['auth_ldap_group'] = array("cn=XX,ou=XX,dc=XX,dc=XX"); $config['auth_ldap_groupbase'] = "dc=XX,dc=XX";
$config['auth_ldap_groupmembertype'] = "fulldn"; $config['auth_ldap_groupmemberattr'] = "member";
unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['GN=XX,OU=XX,OU=XX,DC=XX,DC=XX']['level'] = 10;
Feel free to give any tips or advices.
Thanks,
JF
On 2018-05-28 11:54 AM, Adam Armstrong wrote:
Yes, LDAP still works.
You upgraded between versions that are 3 years and 3530 commits apart, though.
adam. > > On 2018-05-28 16:27:52, Jean-Francois Allain > jean-francois.allain@gameloft.com wrote: > > Hello everybody, > > I did an upgrade of Observium recently from version 14.4.5229 to > version 17.9.8859 and I have authentication issue with LDAP now. > > I was wondering if Observium CE 17.9.8859 was compatible with > the following version of PHP LDAP module : php7.0-ldap > > Thanks in advance, > > -- > > *Jean-François Allain*
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium