vb.org Archive - Integration with vBulletin - vBulletin Ldap Authentication Plugin

Page 5 of 12

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 3.6 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=194)

- - Integration with vBulletin - vBulletin Ldap Authentication Plugin (https://vborg.vbsupport.ru/showthread.php?t=148573)

malcolmx

10-28-2007 08:45 AM

Quote:

Originally Posted by grahamar (Post 1369225)

Hi
I tried this plugin and followed the instructions but I get the following error:

Warning: ldap_search() [function.ldap-search]: Search: No such object in /ldapAuth/controller.php on line 37

Warning: ldap_get_entries(): supplied argument is not a valid ldap result resource in /ldapAuth/controller.php on line 38

I'm not technical at all - but line 37 in the code is this:

36: // search for the username and get the DN
37: $searchDn=ldap_search($ldapConnection,$ldapBase,$l dapFilter);
38: $searchResult=ldap_get_entries($ldapConnection,$se archDn);

Can any one offer some help as to how I can fix this. I would really like to get this working. We want touse VB within our intranet and LDAP is used extensively.

Thanks

Graham

hey,

please show me the content of the variables

Code:

$ldapBase

$ldapFilter

thanks

-malc

fhs2006

10-29-2007 06:53 AM

the error is in your $ldapBase.

the base is just: "dc=sun,dc=com"

all the other stuff like ?sub? (objectclass=*) has nothign to do with the deafault search base (=$ldapbase).

my script is searching for a specific user ($ldapFilter in controller.php) below the $ldapBase in your ldap directory.

if you want to want to add an (objectclass=*) to your search filter you have to add that to line 29 in controller.php

Code:

$ldapFilter = "(uid=" . $vbulletin->GPC['vb_login_username'] .")";

you do not have to add ?sub? to your query, because phps ldapsearch scope defaults to SUB.

-fhs

malcolmx

10-29-2007 10:52 AM

please user controller.debug.php and change in line 17 the debug output file location (if needed)

Code:

if(defined('LDDEBUG')) { $fp=fopen('/tmp/apache.debug', "a+"); }

then show me the content of that file.

-malc

malcolmx

10-29-2007 01:13 PM

Quote:

Originally Posted by grahamar (Post 1371078)

Hi Malc,

Just to confirm: Do you want me to run controller.debug.php from the browser after the login fails? or do you mean something else?

Graham

easiest you can do is:

rename controller.php to controller.php.orig
rename controller.debug.php to controller.php

:)

-malc

malcolmx

10-29-2007 02:39 PM

please do me a favour:

on the linux commandline (if available) try the following:
ldapsearch -W -D "XXXX" -x -b YYYY -h ZZZZZZ "(uid=grahamar)"

exchange:
XXXX: the FULL DN to your username (e.g. uid=grahamar,ou=bla=o=buh)
YYYY: the ldap search base
ZZZZ: the ldap server ip

1) additional questions from my side:
is the wiki doing an ldapbind or is it comparing the hash values of the password?

2) are you sure you did all changes to the vbulletin php files as written in the INSTALL file?
especially:

PHP Code:


		
			
defined('DISABLE_PASSWORD_CLEARING') ? 1 : 0;

to check that, add in the debug controller file below line 63

PHP Code:


		
			
 // bind to the ldap server with specified credentials (dn, password)

the following piece of code:

PHP Code:


		
			
if(defined('LDDEBUG')) {
   $pass = $vbulletin->GPC['vb_login_password']; 
    wrlog("++ your password  is:\t  $pass");
}

i dont have an working vb installation at home, but that should do fine. now if you login, you should see your password in plaintext in the debug output file. if this is not your password, please check all the installation steps.

-malc

malcolmx

10-29-2007 02:43 PM

Quote:

Originally Posted by Mark Tomlinson (Post 1361626)

Nice hack, works like a charm. Except...

[S]I set up vBulletin with the usual "Admin" account. After adding the hack, I logged in as myself with my LDAP ID - which automagically created my user ID in the user database. Then I logged on as Admin again gave my user ID administrative permissions. (I'll be wanting to give a couple of other users subsets of admin privledges as well).

Well, what happens is that I can not log into the Admin CP with my LDAP ID.
* I can log into the forums with my LDAP ID just fine.
* And I can log into the Admin CP with 'Admin' just fine.
* But I can't log into the Admin CP with my LDAP ID.
* And I can't log into the forums with 'Admin'.
My theory here is that there is a different log-in process for the Admin CP and it is trying to verify my password against the vBulletin database.

Familiar with this problem? Am I just missing something?[/S]

Nevermind! Missed the comment in the description that says LDAP is not used for the admin or moderation control panels. That's not going to work for me. I need it to check the LDAP directory and the database in all cases. I will settle for just checking LDAP, but would rather it check both.

Sounds like I need to do some digging.

just comment out the following code:

PHP Code:


		
			
// if login form is admin or moderator login, dont use ldap authentication

if(($vbulletin->GPC['logintype'] == "cplogin") || ($vbulletin->GPC['logintype'] == "modcplogin"))

{

        return;

}

malcolmx

10-29-2007 03:15 PM

when your password is shown correctly then you should have done the install instructions.

i have to do some brainwork now... no idea where the problem could be.

malcolmx

10-31-2007 04:10 PM

Code:

ldapsearch --help 2>&1 |grep W

  -W         prompt for bind password

-W is for password austhentication
-D is the full DN to your entity in the directory.

please test if this authentication works.

thanks

-malc

ps: i will be gone over the weekend. i am back on monday.

grahamar

11-08-2007 06:29 AM

Hi Malc,

any update you can give to help proceed with this?

Thank you

Graham

grahamar

11-11-2007 11:16 AM

Hi,

I now have LDAP working on another a Bulletin board from another Source.
I'll leave the situation of not being able to use LDap on vbulletin as it is.

Thanks for those who tried to help me.

Graham

All times are GMT. The time now is 09:37 AM.

Page 5 of 12

« First

Last »

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01300 seconds Memory Usage 1,755KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (4)bbcode_code_printable (4)bbcode_php_printable (3)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (10)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: