ldap_auth module

tatankat

I tried to upgrade from 4.1.3, but I did not succeed. (see the other 2 threads about the upgrade)

Now I solved those issues, but I still can't login. I assume now it is because the ldap_auth module did follow the authentication refactor as the doExplicitLogin is called which is not yet implemented in the module.
I tried implementing this method by using the _loginUser method and looking at AuthenticationBackend for inspiration (I also copied the other not-implemented methods as I still had problems and couldn't see why they would have to be any different). Afterwards, I could login, but I did not have access to anything.
Is this a known problem you are working on? Will the ldap authentication be dropped? Can you give me some pointers to fix it?

Thanks for The Bug Genie and hopefully I will still be able to use it after this testing period...

David

tatankat
Ok, tatankat, i'm logged in 😀
If you wanna be ok with the admin login you must disable the ldap module into the settings:

Open your database browser
Change the auth_backend field of the tbg_settings table from auth_ldap value to tbg.
validate
Attempt to log in aaaaaand.....you're logged in.

tatankat

David Ah yes, I forgot to mention that after the upgrade I succeeded to login after I did /tbg_cli revert_auth_backend. Which probably does what you also did.

But I'm not really ok without ldap (or ldap backend with a detour to something else)

David

tatankat
Ok, i will look a little more at the list of options of the CLI, it will save me farie changes in the database directly 😅 (i'm not really an advanced user of the CLI 😉

David

tatankat
Now, as administrator user, i tested the ldap connection with using the 'Test connection' button onto the LDAP Authentication module web page.

I have an error while the old v4.1.0 version with the same login data managed to connect to the ldap

The following notice has stopped further execution:
Undefined index: <My Object DN Attribute Value> in /thebuggenie/modules/auth_ldap/Auth_ldap.php, line 663 
Stack trace:
require() 
/thebuggenie/core/framework/Context.php, line 316
thebuggenie\modules\auth_ldap\Auth_ldap->getLDAPUserInformation() 
thebuggenie/modules/auth_ldap/Auth_ldap.php, line 435
thebuggenie\modules\auth_ldap\Auth_ldap->testConnection() 
/thebuggenie/modules/auth_ldap/controllers/Main.php, line 20
thebuggenie\modules\auth_ldap\controllers\Main->runTestConnection() 
/thebuggenie/core/framework/Context.php, line 2383
thebuggenie\core\framework\Context::performAction() 
/thebuggenie/core/framework/Context.php, line 2679
thebuggenie\core\framework\Context::go() 
/thebuggenie/public/index.php, line 29

Code of Auth_ldap.php:

659 // Grab username.
660 $user['username'] = $ldap_user[strtolower($username_attr)][0];
661
662 // Grab DN.
663 $user['ldap_username'] = $ldap_user[$dn_attr][0];

The same error appears if i attempt to import users

tatankat

David I have the impression that piece of code was not used in 4.1.3, as I also had a configuration issue there. You should reverify the "Object DN attribute" in the "LDAP Authentication" settings and set it to an existing ldap attribute in lowercase(?).

My issue with that was that I provided "dn" as I did not know that the suggested (entrydn) was available on my server (as a virtual attribute), but dn is not provided the same way as the entrydn in php.

Now, I retried the upgrade (using 4.3.1, which solves another issue I already worked around) with the correct DN parameter, hoping this would maybe solve the problem. But logging in still does not work, although the test still runs successful. Also:
> ./tbg_cli auth_ldap:test Connection test successful

I also tried to configure a fresh install to use ldap. But it doesn't work neither, which confirms my original report. ldap authentication is not implemented on 4.3

tatankat

This is the full upgrade procedure that worked for me:

cd thebuggenie-4.2.0
cp -av . ../thebuggenie/
cd ../thebuggenie/
touch upgrade
composer install --no-dev
./tbg_cli upgrade

cd thebuggenie-4.3.1
cp -av . ../thebuggenie/
cd ../thebuggenie/
touch upgrade
rm composer.lock
composer install --no-dev
rm -r core/modules/remote
./tbg_cli upgrade

patch -p1 -i ../tbg_ldap_auth.patch (or use the code with the latest pull request, see https://github.com/thebuggenie/thebuggenie/pull/542 )

Another note: when moving your site to another directory don't forget to update "UPLOAD LOCATION" in "Uploads and attachments" if that has changed too.