To debug LDAP, you need to set $config['web_debug_unprivileged'] = TRUE

Then go to your.observium/debug and look at the output which should hopefully help you...

Tom

On 5/28/2018 11:57 PM, Jean-Francois Allain wrote:

Hi Adam,

I followed this procedure : http://docs.observium.org/updating/ especially this part : Community Edition Upgrade to latest Major release

Everything is working well except the LDAP authentication, I tried to activate the debug mode and I looked in the apache logs. But I don't have enough information to understand what is happening in the background.

When I tried to login nothing happen, no error message just nothing.

Any help will be really appreciated.

Thanks in advance,

JF

On 2018-05-28 03:31 PM, Jean-Francois Allain wrote:

And just to be sure, did somebody is using php7.0-ldap with the latest CE version and LDAPS ?

Thanks,

JF


On 2018-05-28 12:19 PM, Jean-Francois Allain wrote:

Hi Adam,

Yes I know that many changes were applied in 3 years but I have to do the update though. Here is my LDAP config in config.php for information :

//// LDAP Authentication

$config['auth_ldap_version'] = 3;                     // LDAP client version (2 or 3)
$config['auth_ldap_server'] = "ldaps://servername:3269/";  // LDAP server name
$config['auth_ldap_port']   = 3269;
$config['auth_ldap_starttls'] = FALSE;
$config['auth_ldap_binddn'] = "cn=XX,ou=special accounts,ou=XX,dc=XX,dc=XX";
$config['auth_ldap_bindpw'] = "password";
$config['auth_ldap_bindanonymous'] = FALSE;
$config['auth_ldap_kerberized'] = FALSE;

$config['auth_ldap_attr']['uid'] = "userPrincipalName";
$config['auth_ldap_attr']['uidNumber'] = "uidNumber";
$config['auth_ldap_attr']['cn'] = "displayname";
//$config['auth_ldap_attr']['dn'] = "dn";
$config['auth_ldap_objectclass'] = "posixAccount";

$config['auth_ldap_prefix'] = "cn=";
$config['auth_ldap_suffix'] = "ou=users,ou=XX,dc=XX,dc=XX";
$config['auth_ldap_group']  = array("cn=XX,ou=XX,dc=XX,dc=XX");
$config['auth_ldap_groupbase'] = "dc=XX,dc=XX";

$config['auth_ldap_groupmembertype'] = "fulldn";
$config['auth_ldap_groupmemberattr'] = "member";

unset($config['auth_ldap_groups']);
$config['auth_ldap_groups']['GN=XX,OU=XX,OU=XX,DC=XX,DC=XX']['level'] = 10;

Feel free to give any tips or advices.

Thanks,

JF

On 2018-05-28 11:54 AM, Adam Armstrong wrote:
Yes, LDAP still works.

You upgraded between versions that are 3 years and 3530 commits apart, though.

adam.

On 2018-05-28 16:27:52, Jean-Francois Allain <jean-francois.allain@gameloft.com> wrote:

Hello everybody,

I did an upgrade of Observium recently from version 14.4.5229 to version 17.9.8859 and I have authentication issue with LDAP now.

I was wondering if Observium CE 17.9.8859 was compatible with the following version of PHP LDAP module : php7.0-ldap

Thanks in advance,

--

Jean-François Allain


_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium





_______________________________________________
observium mailing list
observium@observium.org
http://postman.memetic.org/cgi-bin/mailman/listinfo/observium