And just to be sure, did somebody is using php7.0-ldap with the latest CE version and LDAPS ?

Thanks,

JF

On 2018-05-28 12:19 PM, Jean-Francois Allain wrote:

Hi Adam,

Yes I know that many changes were applied in 3 years but I have to do the update though. Here is my LDAP config in config.php for information :

//// LDAP Authentication

$config['auth_ldap_version'] = 3;                     // LDAP client version (2 or 3) $config['auth_ldap_server'] = "ldaps://servername:3269/"; // LDAP server name $config['auth_ldap_port']   = 3269; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_binddn'] = "cn=XX,ou=special accounts,ou=XX,dc=XX,dc=XX"; $config['auth_ldap_bindpw'] = "password"; $config['auth_ldap_bindanonymous'] = FALSE; $config['auth_ldap_kerberized'] = FALSE;

$config['auth_ldap_attr']['uid'] = "userPrincipalName"; $config['auth_ldap_attr']['uidNumber'] = "uidNumber"; $config['auth_ldap_attr']['cn'] = "displayname"; //$config['auth_ldap_attr']['dn'] = "dn"; $config['auth_ldap_objectclass'] = "posixAccount";

$config['auth_ldap_prefix'] = "cn="; $config['auth_ldap_suffix'] = "ou=users,ou=XX,dc=XX,dc=XX"; $config['auth_ldap_group']  = array("cn=XX,ou=XX,dc=XX,dc=XX"); $config['auth_ldap_groupbase'] = "dc=XX,dc=XX";

$config['auth_ldap_groupmembertype'] = "fulldn"; $config['auth_ldap_groupmemberattr'] = "member";

unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['GN=XX,OU=XX,OU=XX,DC=XX,DC=XX']['level'] = 10;

Feel free to give any tips or advices.

Thanks,

JF

On 2018-05-28 11:54 AM, Adam Armstrong wrote:

...

Yes, LDAP still works.

You upgraded between versions that are 3 years and 3530 commits apart, though.

adam.

...

On 2018-05-28 16:27:52, Jean-Francois Allain jean-francois.allain@gameloft.com wrote:

Hello everybody,

I did an upgrade of Observium recently from version 14.4.5229 to version 17.9.8859 and I have authentication issue with LDAP now.

I was wondering if Observium CE 17.9.8859 was compatible with the following version of PHP LDAP module : php7.0-ldap

Thanks in advance,

--

*Jean-François Allain*

---

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

To debug LDAP, you need to set $config['web_debug_unprivileged'] = TRUE

Then go to your.observium/debug and look at the output which should hopefully help you...

Tom

On 5/28/2018 11:57 PM, Jean-Francois Allain wrote:

Hi Adam,

I followed this procedure : http://docs.observium.org/updating/ especially this part : Community Edition Upgrade to latest Major release

Everything is working well except the LDAP authentication, I tried to activate the debug mode and I looked in the apache logs. But I don't have enough information to understand what is happening in the background.

When I tried to login nothing happen, no error message just nothing.

Any help will be really appreciated.

Thanks in advance,

JF

On 2018-05-28 03:31 PM, Jean-Francois Allain wrote:

...

And just to be sure, did somebody is using php7.0-ldap with the latest CE version and LDAPS ?

Thanks,

JF

On 2018-05-28 12:19 PM, Jean-Francois Allain wrote:

...

Hi Adam,

Yes I know that many changes were applied in 3 years but I have to do the update though. Here is my LDAP config in config.php for information :

//// LDAP Authentication

$config['auth_ldap_version'] = 3;                     // LDAP client version (2 or 3) $config['auth_ldap_server'] = "ldaps://servername:3269/"; // LDAP server name $config['auth_ldap_port']   = 3269; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_binddn'] = "cn=XX,ou=special accounts,ou=XX,dc=XX,dc=XX"; $config['auth_ldap_bindpw'] = "password"; $config['auth_ldap_bindanonymous'] = FALSE; $config['auth_ldap_kerberized'] = FALSE;

$config['auth_ldap_attr']['uid'] = "userPrincipalName"; $config['auth_ldap_attr']['uidNumber'] = "uidNumber"; $config['auth_ldap_attr']['cn'] = "displayname"; //$config['auth_ldap_attr']['dn'] = "dn"; $config['auth_ldap_objectclass'] = "posixAccount";

$config['auth_ldap_prefix'] = "cn="; $config['auth_ldap_suffix'] = "ou=users,ou=XX,dc=XX,dc=XX"; $config['auth_ldap_group']  = array("cn=XX,ou=XX,dc=XX,dc=XX"); $config['auth_ldap_groupbase'] = "dc=XX,dc=XX";

$config['auth_ldap_groupmembertype'] = "fulldn"; $config['auth_ldap_groupmemberattr'] = "member";

unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['GN=XX,OU=XX,OU=XX,DC=XX,DC=XX']['level'] = 10;

Feel free to give any tips or advices.

Thanks,

JF

On 2018-05-28 11:54 AM, Adam Armstrong wrote:

...

Yes, LDAP still works.

You upgraded between versions that are 3 years and 3530 commits apart, though.

adam.

...

On 2018-05-28 16:27:52, Jean-Francois Allain jean-francois.allain@gameloft.com wrote:

Hello everybody,

I did an upgrade of Observium recently from version 14.4.5229 to version 17.9.8859 and I have authentication issue with LDAP now.

I was wondering if Observium CE 17.9.8859 was compatible with the following version of PHP LDAP module : php7.0-ldap

Thanks in advance,

--

*Jean-François Allain*

---

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

---

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

Excellent! Don't forget to remove the unprivileged debug again, as this may otherwise leak information to outsiders about your setup.

Tom

On 5/29/2018 5:39 PM, Jean-Francois Allain wrote:

Hello Tom,

Thanks a lot for your answer, that's was very helpful.

I found the issue, I set this parameter to "user" ($config['auth_ldap_objectclass'] = "user";) and it worked !

Thanks again and have a good day,

JF

On 2018-05-29 03:37 AM, Tom Laermans wrote:

...

To debug LDAP, you need to set $config['web_debug_unprivileged'] = TRUE

Then go to your.observium/debug and look at the output which should hopefully help you...

Tom

On 5/28/2018 11:57 PM, Jean-Francois Allain wrote:

...

Hi Adam,

I followed this procedure : http://docs.observium.org/updating/ especially this part : Community Edition Upgrade to latest Major release

Everything is working well except the LDAP authentication, I tried to activate the debug mode and I looked in the apache logs. But I don't have enough information to understand what is happening in the background.

When I tried to login nothing happen, no error message just nothing.

Any help will be really appreciated.

Thanks in advance,

JF

On 2018-05-28 03:31 PM, Jean-Francois Allain wrote:

...

And just to be sure, did somebody is using php7.0-ldap with the latest CE version and LDAPS ?

Thanks,

JF

On 2018-05-28 12:19 PM, Jean-Francois Allain wrote:

...

Hi Adam,

Yes I know that many changes were applied in 3 years but I have to do the update though. Here is my LDAP config in config.php for information :

//// LDAP Authentication

$config['auth_ldap_version'] = 3;                     // LDAP client version (2 or 3) $config['auth_ldap_server'] = "ldaps://servername:3269/"; // LDAP server name $config['auth_ldap_port']   = 3269; $config['auth_ldap_starttls'] = FALSE; $config['auth_ldap_binddn'] = "cn=XX,ou=special accounts,ou=XX,dc=XX,dc=XX"; $config['auth_ldap_bindpw'] = "password"; $config['auth_ldap_bindanonymous'] = FALSE; $config['auth_ldap_kerberized'] = FALSE;

$config['auth_ldap_attr']['uid'] = "userPrincipalName"; $config['auth_ldap_attr']['uidNumber'] = "uidNumber"; $config['auth_ldap_attr']['cn'] = "displayname"; //$config['auth_ldap_attr']['dn'] = "dn"; $config['auth_ldap_objectclass'] = "posixAccount";

$config['auth_ldap_prefix'] = "cn="; $config['auth_ldap_suffix'] = "ou=users,ou=XX,dc=XX,dc=XX"; $config['auth_ldap_group']  = array("cn=XX,ou=XX,dc=XX,dc=XX"); $config['auth_ldap_groupbase'] = "dc=XX,dc=XX";

$config['auth_ldap_groupmembertype'] = "fulldn"; $config['auth_ldap_groupmemberattr'] = "member";

unset($config['auth_ldap_groups']); $config['auth_ldap_groups']['GN=XX,OU=XX,OU=XX,DC=XX,DC=XX']['level'] = 10;

Feel free to give any tips or advices.

Thanks,

JF

On 2018-05-28 11:54 AM, Adam Armstrong wrote:

...

Yes, LDAP still works.

You upgraded between versions that are 3 years and 3530 commits apart, though.

adam. > > On 2018-05-28 16:27:52, Jean-Francois Allain > jean-francois.allain@gameloft.com wrote: > > Hello everybody, > > I did an upgrade of Observium recently from version 14.4.5229 to > version 17.9.8859 and I have authentication issue with LDAP now. > > I was wondering if Observium CE 17.9.8859 was compatible with > the following version of PHP LDAP module : php7.0-ldap > > Thanks in advance, > > -- > > *Jean-François Allain*

---

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

---

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

---

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

---

observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium