08 July 2009, 16:09

Has anyone set up Active Directory authentication for Mahara yet?

I'm getting a pretty big error in my error.log file when I try to login as an AD user account.

 Can anyone help me read this, and tell me whats missing?

 

Thanks

 

 

[WAR] 0e (auth/ldap/lib.php:213) ldap_search() [function.ldap-search]: Search: Partial results and referral received, referer: https://voltron.uarts.edu/mahara/
Call stack (most recent first):, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * log_message("ldap_search() [function.ldap-search]: Search: Part...", 8, true, true, "/var/www/mahara/auth/ldap/lib.php", 213) at /var/www/mahara/lib/errors.php:378, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * error(2, "ldap_search() [<a href='function.ldap-search'>func...", "/var/www/mahara/auth/ldap/lib.php", 213, array(size 5)) at Unknown:0, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * ldap_search(resource(#44), "dc=ua,dc=lan", "(sAMAccountName=dgoodyear)", array(size 1)) at /var/www/mahara/auth/ldap/lib.php:213, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * AuthLdap->ldap_find_userdn(resource(#44), "dgoodyear") at /var/www/mahara/auth/ldap/lib.php:102, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * AuthLdap->authenticate_user_account(object(LiveUser), "MYPASSWORD") at /var/www/mahara/auth/lib.php:1148, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * login_submit(object(Pieform), array(size 6)) at Unknown:0, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * call_user_func_array("login_submit", array(size 2)) at /var/www/mahara/lib/pieforms/pieform.php:430, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * Pieform->__construct(array(size 8)) at /var/www/mahara/auth/lib.php:451, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * auth_setup() at /var/www/mahara/init.php:233, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * require("/var/www/mahara/init.php") at /var/www/mahara/index.php:31, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56] , referer: https://voltron.uarts.edu/mahara/


 [error] [client 10.64.30.56] [WAR] 0e (auth/ldap/lib.php:222) ldap_first_entry(): supplied argument is not a valid ldap result resource, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56] Call stack (most recent first):, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * log_message("ldap_first_entry(): supplied argument is not a val...", 8, true, true, "/var/www/mahara/auth/ldap/lib.php", 222) at /var/www/mahara/lib/errors.php:378, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * error(2, "ldap_first_entry(): supplied argument is not a val...", "/var/www/mahara/auth/ldap/lib.php", 222, array(size 6)) at Unknown:0, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * ldap_first_entry(resource(#44), false) at /var/www/mahara/auth/ldap/lib.php:222, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * AuthLdap->ldap_find_userdn(resource(#44), "dgoodyear") at /var/www/mahara/auth/ldap/lib.php:102, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * AuthLdap->authenticate_user_account(object(LiveUser), "MYPASSWORD") at /var/www/mahara/auth/lib.php:1148, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * login_submit(object(Pieform), array(size 6)) at Unknown:0, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * call_user_func_array("login_submit", array(size 2)) at /var/www/mahara/lib/pieforms/pieform.php:430, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * Pieform->__construct(array(size 8)) at /var/www/mahara/auth/lib.php:451, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * auth_setup() at /var/www/mahara/init.php:233, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56]   * require("/var/www/mahara/init.php") at /var/www/mahara/index.php:31, referer: https://voltron.uarts.edu/mahara/
 [error] [client 10.64.30.56] , referer: https://voltron.uarts.edu/mahara/

09 July 2009, 16:22

Hummm, it looks like your LDAP server is returning a referral for the first query, which shouldn't happen if you've specified 'MS Active Directory' for the user type in your LDAP settings (if I'm reading the code right).

Do you have more than one AD domain (in a forest/tree, or with bidirectional relationships) and querying a Global Catalog instead of one of the DCs for the user specific domain? (just shooting in the dark here).

Saludos.
Iñaki.

09 July 2009, 17:16

We only have one AD Domain

I target the top level by hitting "dc=ua,dc=lan"  which is the domain's internal naming. (and how I have every other AD/LDAP application I manage set up as well).

Thoughts?

Thanks!

13 July 2009, 15:52

I can't think of anything else right now, Can you paste your LDAP settings? (omit passwords and other sensitive data).

Saludos.
Iñaki.