Issue with Posixldapauth in RS 7.8.554 possibly becasue of deprecated add-on?

[Chris Watson]

Hi David / other posixldapauth authors.

I know the plugin is listed as deprecated in the latest RS (bu I don't see any alternatives at the moment)

I am using it for AD authentication, I currently have an older RS 7.4 instance up and its running perfectly.

I got the plugin working fine after a few stumbles by myself however when it comes time for a new user to login for the first time its kind of just stopping before the user creation in RS (this may be why its deprecated??)

I can see from the apache logs its connecting fine to AD after all the checks I see the line:

[Thu Aug 18 11:51:38.677815 2016] [:error] [pid 1968] [client MYIP:63160] /var/www/resourcespace/plugins/posixldapauth/hooks/ldap_class.php ldapAuth::connect 65 Connected to LDAP ServerADSERVER.DOMAIN, referer: http://WEBSITE.DOMAIN/login.php?url=%2F&nocookies=true

it then goes through the process of checking the user:

[Thu Aug 18 11:51:38.677981 2016] [:error] [pid 1968] [client MYIP:63160] /var/www/resourcespace/plugins/posixldapauth/hooks/ldap_class.php ldapAuth::auth 109 Attempting to Auth dummyuser@DOMAIN, referer: http://WEBSITE.DOMAIN/login.php?url=%2F&nocookies=true
[Thu Aug 18 11:51:38.678112 2016] [:error] [pid 1968] [client MYIP:63160] /var/www/resourcespace/plugins/posixldapauth/hooks/ldap_class.php ldapAuth::auth 115 Auth to AD with dummyuser@DOMAIN, referer: http://WEBSITE.DOMAIN/login.php?url=%2F&nocookies=true
[Thu Aug 18 11:51:38.697661 2016] [:error] [pid 1968] [client MYIP:63160] /var/www/resourcespace/plugins/posixldapauth/hooks/ldap_class.php ldapAuth::auth 125 Auth Succesfull for dummyuser@DOMAIN, referer: http://WEBSITE.DOMAIN/login.php?url=%2F&nocookies=true
[Thu Aug 18 11:51:38.697851 2016] [:error] [pid 1968] [client MYIP:63160] user cn = dummyuser, referer: http://WEBSITE.DOMAIN/login.php?url=%2F&nocookies=true
[Thu Aug 18 11:51:38.697981 2016] [:error] [pid 1968] [client MYIP:63160] /var/www/resourcespace/plugins/posixldapauth/hooks/ldap_class.php ldapAuth::auth 140 Searching  dc=DOMAIN,dc=DOMAIN,dc=DOMAIN,dc=DOMAIN,dc=DOMAIN for (samaccountname=dummyuser), referer: http://WEBSITE.DOMAIN/login.php?url=%2F&nocookies=true
[Thu Aug 18 11:51:38.699467 2016] [:error] [pid 1968] [client MYIP:63160] /var/www/resourcespace/plugins/posixldapauth/hooks/all.php HookPosixldapauthAllExternalauth 94 auth to ldap server is successful , referer: http://WEBSITE.DOMAIN/login.php?url=%2F&nocookies=true
[Thu Aug 18 11:51:38.700945 2016] [:error] [pid 1968] [client MYIP:63160] /var/www/resourcespace/plugins/posixldapauth/hooks/all.php HookPosixldapauthAllExternalauth 100  cn=user, dummy, referer: http://WEBSITE.DOMAIN/login.php?url=%2F&nocookies=true
[Thu Aug 18 11:51:38.701081 2016] [:error] [pid 1968] [client MYIP:63160] /var/www/resourcespace/plugins/posixldapauth/hooks/all.php HookPosixldapauthAllExternalauth 101  dn=CN=user\\, dummy,OU=Users,OU=Building,OU=Dept,OU=Branch,OU=area,OU=Agency,DC=DOMAIN,DC=DOMAIN,DC=DOMAIN,DC=DOMAIN,DC=DOMAIN, referer: http://WEBSITE.DOMAIN/login.php?url=%2F&nocookies=true

However it just stops there, nothing else is recorded and I'm taken back o the login page with an error:

Sorry, your login details were incorrect.

If you have forgotten your password,
use the link above to request a new one.

I did the same process on my working RS7.4 instance (which uses the same version of the plug-in but it isn't listed as deprecated)

after the same process above I then see a lot more information it lists the groups then lists all the users in the groups after that it then finds that the login account is currently not created but the user is part of the correct group, it then creates the user and logs them in no issue.

So am I missing anything is there a replacement out there for posixldapauth (I couldn't find any info about one) or is something else amiss here?

[David Mac (new)]

Hi Chris

I haven't tested this with the latest version of RS. I was not aware it was marked as depreciated.

I do have it working with a server I setup a month or so ago, but admittedly that is against and LDAP server not AD.

Line 101 is a really strange place for it to fail... 

is 'Create Users' ticked in the plugin setup page?

Regards

David

[Chris Watson]

I think I might be going insane

I got in this morning, nothing has changed but I was able to login fine using the exact setup I had yesterday, nobody could of changed it as I was the only one that knew any of the logins, sorry to waste your time mate.
and yes it is marked as depreciated.

[R Snider]

Hi Chris,

I think posixldapauth has been replaced by simpleldap. I previously used posixldapauth and switched to simpleldap with no problems – though I'm running r8589 – which is a later release than yours.

Just as an FYI, if you're using Active Directory, use the samAccountName as the Login Field.

Cheers.

Rob