LDAP Authentication ends with white screen and no php.log file

[mobang]

Hi,

with this ldap.config.php on Feng Office 1.7 I am getting a white screen and unfortunately there is no log.php file in the cache directory.

I can query the Windows Server 2003 LDAP through ldapsearch from the linux box that runs feng office

'binddn' => 'cn=LDAP,ou=SBSUsers,ou=Users,ou=MyBusiness,dc=Goehre,dc=net',
'bindpw' => 'pw',
'basedn' => 'ou=SBSUsers,ou=Users,ou=MyBusiness,dc=Goehre,dc=net',
'host' => 'server.domain.net',
'uid' => 'ldap@goehre.net'

So what is uid for? What is set here?
Why do I not get a log.php file?

Confused...

TIA
Ralf

[cabeza]

You should enable debug=true in config/config.php to have a log.

[mobang]

OK,

thanks for the hint with debug = true!
But still no log.php in basedir/cache.

I am still getting a white browser window and no log.php is created.
The apache logs are clean.
The messages log and syslog are clean
The logs on the LDAP (AD) Server Win2003 are clean, too.

I'm on ubuntu 10.04
Apache 2.2.14
PHP Version 5.3.2-1ubuntu4.2
MySQL 5.1.41-3ubuntu12

Maybe I am missing something, what about apparmor, that is now a standard installation on ubuntu? I have unloaded all the profiles but no chance, so I think that should not be the problem.

TIA
Ralf

[markc]

I'm not sure this will be the end all fix but I do believe you are misusing that uid field and I can explain it a little bit.

That field is intended to identify which field in your AD user object fengoffice should use for the username. This is needed because depending on how you enter new users, each user's CN may not match it's sAMAccountName. Some interfaces or scripting tools will let you create a user without specifying a first and last name. In that case the CN usually matches the sAMAccountName. However in the case where a first and last name are entered the CN may be Bob Jones and the sAMAccountName could be bobjones. These are not even the only two fields in your user objects that could be suggested for use!

That line for me says:

Code: [Select]

'uid'       => 'sAMAccountName'
...and that makes it so that FO expects the username to be the same thing the user logs into their workstation with, instead of their pretty freetext CN or perhaps their sid or some other more difficult field.

Finally note that some people log into Windows domain workstations as bobjones@yourdomain.com, which is usually their email address. It works to get into the machine but, sAMAccountName won't work for that in fengoffice. I'm pretty sure that version of the username is called 'userPrincipalName', yet another field you could use!

HTH
Mark

[mobang]

Hi,

it seems that the login works, but the page is not rendered, just a white browser window.

If I use sAMAccountName to login and the user is existing in feng with this username the white page appears. If I use userPrincipalName and try to login with user@domain.local the white page is also displayed.

If I use a wrong username or credential the red wrong username or password text is presented.

So basically it seems to work, but the page is not displayed.

Ahh, if a user is logged in and if I activate ldap this user can still work, but once logged out he can not log in again. This login remains even if you close the browser, restart the computer etc.

Any other thoughts?

[markc]

Mine did that at one point and it turned out to be a dependency issue. LDAP was failing to load within PHP. I'm not fully familiar with that and the whole PEAR setup but somehow or another I was pointed towards adding a few more packages and it started working so I just put them in my notes. This was also on Linux, not sure if you've mentioned your platform.

Anyway my notes just say to make sure these PHP libs are all installed (some of them are obvious cause you can't even install if they're missing):
php5-mysql
php5-gd
php5-ldap

Also had a note for 'simplexml' but I can't seem to find the package now so that may be one that FO handles for you.

hth,
Mark

[mobang]

Mark

YMMD

That was the Problem php-ldap was missing.
Too stupid that I was not looking at this.

Thanks a lot for your help!

Ralf

[Baveskara]

stromectol for sale Uses of Cyclidox in details

[Baveskara]

The effects of estrogen and anti estrogen are mediated through the estrogen receptors ER alpha and beta, which function as ligand induced transcriptional factors online indian propecia

[AlfieTheo]

I wanted to leave a little comment to support you and wish you a good continuation. Wishing you the best of luck for all your blogging efforts.   Zwembad bouwen tuin

[AlfieTheo]

I have read your excellent post. This is a great job. I have enjoyed reading your post first time. I want to say thanks for this post. Thank you...   Zonnepanelen Leuven

[AlfieTheo]

I must admit that your post is really interesting. I have spent a lot of my spare time reading your content. Thank you a lot!   Zonnepanelen installateur Leuven

[AlfieTheo]

Nice information, valuable and excellent design, as share good stuff with good ideas and concepts, lots of great information and inspiration, both of which I need, thanks to offer such a helpful information here.   Airco prijs

[AlfieTheo]

Awesome blog. I enjoyed reading your articles. This is truly a great read for me. I have bookmarked it and I am looking forward to reading new articles. Keep up the good work!   Zonnepanelen installateurs

[AlfieTheo]

Wow! Such an amazing and helpful post this is. I really really love it. It's so good and so awesome. I am just amazed. I hope that you continue to do your work like this in the future also.   Zonnepanelen plaatsen