matomo-org / matomo-org/plugin-LoginLdap

LDAP plugin finds user but login is denied

Open
#265 3 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
PHP
Stars
37
Forks
30
Avg merge
22h 53m
Merged PRs (30d)
19

Description

I have configured the plugin for LDAP-only authentication to Active Directory.

The two test buttons return the expected number of users in the directory and the two test users in the intended AD-group respectively.

However, neither of the two users can log in and are greeted with incorrect username and password.

I can find no instruction beyond the steps already taken and no log entries which seem relevant.

Plugin version is v4.3.1 running on matomo 4.6.2

What am I missing?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing LDAP-only authentication with LoginLdap v4.3.1 on Matomo 4.6.2, using the two directory users and intended AD group described in the report. Inspect the authentication flow and available logging to determine why directory lookup succeeds while login is denied. Done means identifying a reproducible cause and documenting or verifying the configuration or code change that permits valid users to log in.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.