https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43497 Bug ID: 43497 Summary: LDAP auth by bind failing to fetch all LDAP attributes Initiative type: --- Sponsorship --- status: Product: Koha Version: 26.05 Hardware: All OS: Linux Status: NEW Severity: normal Priority: P5 - low Component: Authentication Assignee: koha-bugs@lists.koha-community.org Reporter: accounts@nyabla.net QA Contact: martin.renvoize@openfifth.co.uk CC: dpavlin@rot13.org Target Milestone: --- The LDAP binds and successfully logs in pulling the cn, uid, and uidNumber fields, however, it is not able to access the mail field which is only accessible to the authenticated user. Looking at the flow of the authentication code, the LDAP server is bound to using the provided principal name and password, before searching for the uid using that binding, so it should be able to find the mail field, but it seems to be able to access everything but. I also tested with a perl script using the same Net::LDAP interface which was able to get all attributes without issue, and ldapsearch command line tool confirmed the same. LDAP section of koha-conf.xml: <ldapserver id="ldapserver"> <hostname>ldaps://pool.ldap.my.domain</hostname> <base>dc=my,dc=domain</base> <auth_by_bind>1</auth_by_bind> <replicate>1</replicate> <welcome>0</welcome> <update>1</update> <principal_name>uid=%s,ou=Accounts,ou=People,dc=my,dc=domain</principal_name> <mapping> <!-- match koha SQL field names to your LDAP record field names --> <surname is="cn"/> <userid is="uid"/> <email is="mail"/> <cardnumber is="uidNumber"/> <categorycode is="1">M</categorycode> <branchcode is="1">LIB</branchcode> </mapping> </ldapserver> -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.