Announcement

  •  » Extensions
  •  » Authentication of Active Directory user accounts does not work

#1 2024-02-19 15:16:18

berndv
Member
2024-02-19
2

Authentication of Active Directory user accounts does not work

Hello/Hi/Greetings,

LDAP-Login Test always fails with the following message:
Error : Operations error for binding on server ldap://ourserver.domain.de:389 for user TestUser, check your binding!
Binding is successful, the connection is not.

Environment:
Piwigo 14.2.0
Ldap_Login: 13.8.0
PHP Version 8.3

Configuration -> Reset to AD-values

General settings
Url for password reset: password.php
Log location: ./logs/
Enable logs: Yes
Clear logs after plugin update: Yes
Debug level: Debug

LDAP server host connection
Server location: ourserver.domain.de
LDAP-Port: 389
Secure Connection (ldaps): No
Base DN: dc=domain,dc=de

User Schema Settings
User Object Class: user
Username Attribute: sAMAccountname
User Object Filter: cn=*

Group Schema Settings
Group Object Class: group
Group Object Filter: cn=*
Group Name Attribute:: name
Group Description: description

Membership Schema Settings
Group Membership Attribute: member
User Membership Attribute:: memberOf
Use user membership attribute: No

Membership Settings
Group corresponding with users: cn=piwigo_users,cn=groups,dc=domain,dc=de
Group corresponding with administrators: cn=piwigo_admins,cn=groups,dc=domain,dc=de
Group corresponding with webmasters: cn=piwigo_webmasters,cn=groups,dc=domain,dc=de
Use user groups: No
Use administrator: No
Use Webmaster groups: No


LDAP connection credentials
Bind (Service account) DN: cn=UserForBinding,dc=domain,dc=de
Bind (Service account) password:


Extract from the log file "ldap_login.log"
[2024:02:19 11:07:116926] DEBUG: New LDAP Instance
[2024:02:19 11:07:117013] DEBUG: [save_config]> Saving values in SQL table
[2024:02:19 11:07:695853] DEBUG: New LDAP Instance
[2024:02:19 11:07:695912] DEBUG: [function]> ldap_conn
[2024:02:19 11:07:695940] DEBUG: [function]> make_ldap_conn
[2024:02:19 11:07:695964] DEBUG: [make_ldap_conn]> ld_port is 389. Connecting using default protocol
[2024:02:19 11:07:696012] DEBUG: [make_ldap_conn]> connected (LDAP_OPT_PROTOCOL_VERSION 3)
[2024:02:19 11:07:696039] DEBUG: [ldap_conn]> true
[2024:02:19 11:07:696062] DEBUG: [function]> Ldap_Login Test
[2024:02:19 11:07:696087] DEBUG: [function]> ldap_search_dn
[2024:02:19 11:07:696110] DEBUG: [function]> ldap_search_dn(bernd)
[2024:02:19 11:07:696133] DEBUG: [ldap_search_dn]> Connecting to server
[2024:02:19 11:07:696165] DEBUG: [ldap_search_dn]> make_ldap_bind_as($this->cnx,cn=UserForBinding@domain.de,dc=domain,dc=de ,$this->config['ld_bindpw']
[2024:02:19 11:07:696219] DEBUG: [function]> make_ldap_bind_as
[2024:02:19 11:07:696244] DEBUG: [make_ldap_bind_as]> $conn,cn=UserForBinding@domain.de,dc=domain,dc=de
[2024:02:19 11:07:697546] DEBUG: [make_ldap_bind_as]> Bind was successfull
[2024:02:19 11:07:697595] DEBUG: [ldap_search_dn]> @ldap_search($this->cnx,dc=domain,dc=de,(&(&(objectClass=user)(sAMAccountname=TestUser))(cn=*)),array('dn'),0,1)
[2024:02:19 11:07:697906] DEBUG: [ldap_search_dn]> ldap_search NOT successfull:
[2024:02:19 11:07:697956] DEBUG: [function]> check_ldap
[2024:02:19 11:07:697983] DEBUG: [function]> ldap_conn
[2024:02:19 11:07:698005] DEBUG: [function]> make_ldap_conn
[2024:02:19 11:07:698029] DEBUG: [make_ldap_conn]> ld_port is 389. Connecting using default protocol
[2024:02:19 11:07:698065] DEBUG: [make_ldap_conn]> connected (LDAP_OPT_PROTOCOL_VERSION 3)
[2024:02:19 11:07:698134] DEBUG: [ldap_conn]> true
[2024:02:19 11:07:698182] DEBUG: [function]> ldap_check_basedn
[2024:02:19 11:07:698836] DEBUG: [function]> getErrorString
[2024:02:19 11:07:698879] DEBUG: [getErrorString]> Operations error

Offline

 
  •  » Extensions
  •  » Authentication of Active Directory user accounts does not work

Board footer

Powered by FluxBB

github twitter newsletter Donate Piwigo.org © 2002-2024 · Contact