[Xerte] Re: LDAP [Scanned]

Ron Mitchell ronm at mitchellmedia.co.uk
Wed May 25 20:23:40 BST 2011 

Hi Ray/Pat
did you resolve this?

I've been trying to get ldap working with an install on Windows with Apache
and ldap is working for moodle and mahara on the same server but XOT won't
play ball. I tracked back through the various threads and tried all the
things I've done successfully on other installs so have been trying the
login_top and testldap.php files Pat attached to this thread.

I get similar results to those reported by Ray below but not the search
failure. e.g.

IN VALID LOGIN
SINGLE HOST
AUTHENTICATION STARTING
AUTHENTICATION FUNCTION STARTS
LDAP CONNECTED
DS IS - Resource id #8
BASEDN IS - OU=etc etc (deleted for security)
FILTER IS - sAMAccountName=rmitchell

SEARCH ATTRIBUTES - Array
(
    [firstname] => givenname
    [lastname] => sn
)
AUTHENTICATION COMPLETE

I don't get a success message and the trouble is if I restore the original
files and try to login I just get the username or password is incorrect
message which it's definitely not.

Any ideas?

Cheers
Ron

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Ray Reeves
Sent: 11 March 2011 12:22
To: Xerte discussion list
Subject: [Xerte] Re: LDAP [Scanned]

Created a new ou and user and still get the same returned message.

What am i supposed to be seeing in the message?

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Patrick
Lockley
Sent: 11 March 2011 12:02
To: Xerte discussion list
Subject: [Xerte] Re: LDAP [Scanned]

Not seeing quotes in the output?

Do you have another OU you could use?

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Ray Reeves
Sent: 11 March 2011 11:58
To: Xerte discussion list
Subject: [Xerte] Re: LDAP [Scanned]

Still the same with quotes
IN VALID LOGIN
SINGLE HOST
AUTHENTICATION STARTING
AUTHENTICATION FUNCTION STARTS
LDAP CONNECTED
DS IS - Resource id #7
BASEDN IS - "OU=college staff users,DC=solihull,DC=ac,DC=uk"
FILTER IS - sAMAccountName=rayr

SEARCH ATTRIBUTES - Array
(
    [firstname] => givenname
    [lastname] => sn
)
SEARCH FAILUREAUTHENTICATION COMPLETE

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Patrick
Lockley
Sent: 11 March 2011 11:50
To: Xerte discussion list
Subject: [Xerte] Re: LDAP [Scanned]

Can you have a space in an OU name?

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Ray Reeves
Sent: 11 March 2011 11:49
To: Xerte discussion list
Subject: [Xerte] Re: LDAP [Scanned]

Got this after replacing the code

IN VALID LOGIN
SINGLE HOST
AUTHENTICATION STARTING
AUTHENTICATION FUNCTION STARTS
LDAP CONNECTED
DS IS - Resource id #7
BASEDN IS - OU=college staff users,DC=solihull,DC=ac,DC=uk
FILTER IS - sAMAccountName=rayr

SEARCH ATTRIBUTES - Array
(
    [firstname] => givenname
    [lastname] => sn
)
SEARCH FAILUREAUTHENTICATION COMPLETE

Ray


-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Patrick
Lockley
Sent: 11 March 2011 11:21
To: Xerte discussion list
Subject: [Xerte] Re: LDAP [Scanned]

Try this one now

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Ray Reeves
Sent: 11 March 2011 11:19
To: Xerte discussion list
Subject: [Xerte] Re: LDAP [Scanned]

Thanks for that Patrick, here is what i got,

IN VALID LOGIN
SINGLE HOST
AUTHENTICATION STARTING
AUTHENTICATION FUNCTION STARTS
LDAP CONNECTED
SEARCH FAILURE
AUTHENTICATION COMPLETE

Ray

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Patrick
Lockley
Sent: 11 March 2011 11:10
To: Xerte discussion list
Subject: [Xerte] Re: LDAP [Scanned]

Rename website_code/login_top to back up something

Then put login_top (attached) into website_code

And testldap.php into the root folder

Then go back to index.php and try logging in.

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Ray Reeves
Sent: 11 March 2011 10:56
To: Xerte discussion list
Subject: [Xerte] Re: LDAP [Scanned]

Did a check and disabled firewall temporarily on the server and still
got the same issue.  Im now trying to see if i've missed something in
the install or configuration of the php's.

I ran a vbs script to check ldap was working to see if i could get
anything back:

Const ADS_PROPERTY_CLEAR = 1
Set objUser = GetObject("LDAP://cn=Ray Reeves,OU=Network
Team,DC=solihull,DC=ac,DC=uk")
objUser.GetInfo
Wscript.echo objUser.Get("CN")

And this returned my name, so i know i can communicate with LDAP and to
our DC's.

Obviously the test (switch.txt > index.php) worked fine, is there
anything in the index.php that should be edited that anyone can think of
to point to ldap.  I have tried various changes in the management.php
with bind and base, with no success.


Thanks
Ray

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Rochford,
Thomas
Sent: 11 March 2011 09:55
To: Xerte discussion list
Subject: [Xerte] Re: LDAP [Scanned]

It may be that the firewall is blocking you. Active Directory's LDAP
interface is disabled by default and your institution may have blocked
port
389 and port 636 as a security measure. If LDAP is available is can be
used to gain access to personal email addresses etc., which is why it is
blocked or disabled. I've seen this cause problems with Shibboleth, too.

If you're using a local LDAP directory with IIS, do you know who
provides it?

Regards,
Thomas Rochford

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Patrick
Lockley
Sent: 11 March 2011 9:19 AM
To: Xerte discussion list
Subject: [Xerte] Re: LDAP [Scanned]

Special chars in the password?

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of Ray Reeves
Sent: 11 March 2011 09:18
To: n.friend at cant-col.ac.uk; Xerte discussion list
Subject: [Xerte] Re: LDAP [Scanned]

I should have stated before, i'm using a windows iis install, with php
5.3.5 installed.  After going to the PhP website and checking what they
have for LDAP error:

(path, editing php.ini, location of dll's)

I found that all to be ok.  I can't authenticate and get no white
screen, just a message stating my username and password are incorrect.

-----Original Message-----
From: xerte-bounces at lists.nottingham.ac.uk
[mailto:xerte-bounces at lists.nottingham.ac.uk] On Behalf Of
n.friend at cant-col.ac.uk
Sent: 11 March 2011 09:04
To: Xerte discussion list
Subject: [Xerte] Re: LDAP [Scanned]

Hi Ray
Do you have the php-LDAP extension installed?  Check your apache error
log to see where it's failing.

Cheers,

Nathan.
Sent from my BlackBerry(r) wireless device

-----Original Message-----
From: "Ray Reeves" <ray.reeves at solihull.ac.uk>
Sender: <xerte-bounces at lists.nottingham.ac.uk>
Date: Fri, 11 Mar 2011 08:37:31
To: <xerte at lists.nottingham.ac.uk>
Reply-To: "Xerte discussion list" <xerte at lists.nottingham.ac.uk>
Subject: [Xerte] LDAP [Scanned]

_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte

This message and any attachment are intended solely for the addressee
and may contain confidential information. If you have received this
message in error, please send it back to me, and immediately delete it.
Please do not use, copy or disclose the information contained in this
message or in any attachment.  Any views or opinions expressed by the
author of this email do not necessarily reflect the views of the
University of Nottingham.

This message has been checked for viruses but the contents of an
attachment may still contain software viruses which could damage your
computer
system:
you are advised to perform your own checks. Email communications with
the University of Nottingham may be monitored as permitted by UK
legislation.


_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte

------------------------------------------------------------------------
-----
----------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error please notify the
system manager.

This footnote also confirms that this email message has been swept by
SOPHOS for the presence of computer viruses.
------------------------------------------------------------------------
-----
----------------



_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte

_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte

_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte

------------------------------------------------------------------------
---------------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error please notify the
system manager.

This footnote also confirms that this email message has been swept by
SOPHOS for the presence of computer viruses.
------------------------------------------------------------------------
---------------------



_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte

------------------------------------------------------------------------
---------------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error please notify the
system manager.

This footnote also confirms that this email message has been swept by
SOPHOS for the presence of computer viruses.
------------------------------------------------------------------------
---------------------



_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte

------------------------------------------------------------------------
---------------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
SOPHOS for the presence of computer viruses.
------------------------------------------------------------------------
---------------------



_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte

_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte

------------------------------------------------------------------------
---------------------
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
SOPHOS for the presence of computer viruses.
------------------------------------------------------------------------
---------------------



_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte

_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte

----------------------------------------------------------------------------
-----------------
This email and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.
If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by SOPHOS
for the presence of computer viruses.
----------------------------------------------------------------------------
-----------------



_______________________________________________
Xerte mailing list
Xerte at lists.nottingham.ac.uk
http://lists.nottingham.ac.uk/mailman/listinfo/xerte

More information about the Xerte mailing list