• archesis

    (@anchises)


    Hi, I am trying to set up the plugin for ldap-authorization. When trying to login, the browser seems to be stuck for a minute before denying login with the information that username is not valid.

    The server error log shows the following when trying to login:

    [AuthLDAP] User ” logging in
    [AuthLDAP] Username not supplied: return false

    The username to login is in attribute “cn”, so I am using (cn=%s) with brackets as a filter.

    I can do requests using “ldapsearch”.

    Can you point me in the direction of what might be the problem?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author heiglandreas

    (@heiglandreas)

    Can you perhaps provide me the configuration-details (sanitized)? Feel free to send them to authldap AT heigl DOT org if you don’t want to post them here.

    And any log-output would be much apprechiated when you have debugging set to “on”.

    Thread Starter archesis

    (@anchises)

    Thanks for the quick response.

    Where does the plugin save the log? Do have to enable WP logging?

    ldap structure is like this (simplified):
    c
    |-o
    |-|-ou
    |-|-|-cn

    Settings:

    Save passwords: No

    Map LDAP Groups to roles: No

    URI: ldap://cn=auth-user,ou=unit,o=organization,c=country:[email protected]/c=country
    (using full path of the authorized user)

    LDAP URI-Separator: empty

    StartTLS: No

    Filter: (cn=s%)

    Name-Attribute: givenName

    Second Name Attribute: sn

    User-ID Attribute: cn

    Mail Attribute: eMailAddress

    Web-Attribute: empty

    Default Role: Author

    Also:
    If I would like to use multiple ldap-servers, I would have to set a a “separator” and then type the full URIs (like the one above) one after another, separated by the separator, true?

    Is it allowed to set ports? In my case like this: @ldap-server.com:1234/c=country

    • This reply was modified 6 years ago by archesis.
    Plugin Author heiglandreas

    (@heiglandreas)

    If you need a different port you have to provide the port like you posted to the LDAP-URI

    And yes, you would provide multiple LDAP-URIs one after the other separated by the separator.

    Have you URL-Encoded any special characters in the LDAP-URI? Like Spaces or anything not ASCII?

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Username not supplied’ is closed to new replies.