[Koha-bugs] [Bug 7973] Allow for new type of LDAP authentication

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=7973

acowell at daviscollege.edu changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |acowell at daviscollege.edu

--- Comment #25 from acowell at daviscollege.edu ---
(In reply to Dobrica Pavlinusic from comment #24)
> David, can you please post your ldap config from koha-conf.xml? From looking
> at a code I agree with Rolando that setting auth_by_bind to 1 should fix
> your problem (hopefully).

I receive the same issue running the latest koha-common received via APT-GET
and trying to set up active directory. It doesn't seem to matter what I use for
hostname... LDAP:// LDAPS:// or just straight qualified name of AD LDAP server.
I always receive the below error messages. I also should state that we are on
Windows 2008 Domain and I believe that anonymous is turned off.

[Mon Jul 01 11:19:34 2013] [error] [client 127.0.0.1] [Mon Jul  1 11:19:34
2013] opac-user.pl: Use of uninitialized value in string ne at
/usr/share/koha/lib/C4/Auth.pm line 670, <DATA> line 522., referer:
http://127.0.1.1/cgi-bin/koha/opac-user.pl
[Mon Jul 01 11:19:34 2013] [error] [client 127.0.0.1] [Mon Jul  1 11:19:34
2013] opac-user.pl: Use of uninitialized value $pki_field in string eq at
/usr/share/koha/lib/C4/Auth.pm line 780, <DATA> line 522., referer:
http://127.0.1.1/cgi-bin/koha/opac-user.pl
[Mon Jul 01 11:19:34 2013] [error] [client 127.0.0.1] [Mon Jul  1 11:19:34
2013] opac-user.pl: Use of uninitialized value $pki_field in string eq at
/usr/share/koha/lib/C4/Auth.pm line 780, <DATA> line 522., referer:
http://127.0.1.1/cgi-bin/koha/opac-user.pl
[Mon Jul 01 11:19:34 2013] [error] [client 127.0.0.1] [Mon Jul  1 11:19:34
2013] opac-user.pl: LDAP Auth rejected : (sAMAccountName=duser2) gets 0 hits,
referer: http://127.0.1.1/cgi-bin/koha/opac-user.pl
[Mon Jul 01 11:19:34 2013] [error] [client 127.0.0.1] [Mon Jul  1 11:19:34
2013] opac-user.pl: LDAP error #1: LDAP_OPERATIONS_ERROR, referer:
http://127.0.1.1/cgi-bin/koha/opac-user.pl
[Mon Jul 01 11:19:34 2013] [error] [client 127.0.0.1] [Mon Jul  1 11:19:34
2013] opac-user.pl: # Server encountered an internal error, referer:
http://127.0.1.1/cgi-bin/koha/opac-user.pl
[Mon Jul 01 11:19:34 2013] [error] [client 127.0.0.1] [Mon Jul  1 11:19:34
2013] opac-user.pl: , referer: http://127.0.1.1/cgi-bin/koha/opac-user.pl
[Mon Jul 01 11:19:34 2013] [error] [client 127.0.0.1] [Mon Jul  1 11:19:34
2013] opac-user.pl: Use of uninitialized value $retuserid in string ne at
/usr/share/koha/lib/C4/Auth.pm line 817, <DATA> line 551., referer:
http://127.0.1.1/cgi-bin/koha/opac-user.pl


This is my koha-conf.xml file which as far as I can tell matches all of the
requirements...? Can you verify for me?



<useldapserver>1</useldapserver><!-- see C4::Auth_with_ldap for extra configs
you must add if you want to turn this on -->
     <ldapserver id="ldapserver" listenref="ldapserver">
        <hostname>ldaps://[server qualified name]</hostname>
        <base>dc=[domain],dc=[extension]</base>
        <user>[CN OU DN Information]</user>  <!-- DN, if not anonymous -->
        <pass>[PASSWORD]</pass><!-- password, if not anonymous -->
        <replicate>1</replicate> <!-- add new users from LDAP to Koha database
-->
        <update>1</update> <!-- update existing users in Koha database -->
        <auth_by_bind>1</auth_by_bind> <!-- set to 1 to authenticate by binding
instead of password comparison, e.g., to use Active Directory -->
        <principal_name>%s at daviscollege.edu</principal_name> <!-- optional, for
auth_by_bind: a printf format to make userPrincipalName from koha userid -->
        <mapping> <!-- match koha SQL field names to your LDAP record field
names -->
          <firstname is="givenname"></firstname>
          <surname is="sn"> </surname>
          <address is="postaladdress"></address>
          <city is="l"></city>
          <branchcode is="branch">[Branch Code]</branchcode>
          <userid is="sAMAccountName"></userid>
          <password is="userPassword"></password>
          <email is="mail"></email>
          <categorycode is="category">[category code]</categorycode>
          <phone is="ExtensionAttribute1"></phone>
        </mapping>
      </ldapserver>


</config>

-- 
You are receiving this mail because:
You are watching all bug changes.