owncloud / owncloud/user_ldap

running the wizzard makes LDAP unusable

Open
#423 2 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug
Dominant language
PHP
Stars
17
Forks
19
Avg merge
11h 40m
Merged PRs (30d)
2

Description

I have this configuration that I have used to test the app for a long time

+-------------------------------+---------------------------------------------------------------------------------------+
| Configuration                 | LDAPTestId                                                                            |
+-------------------------------+---------------------------------------------------------------------------------------+
| ldapHost                      | localhost                                                                             |
| ldapPort                      | 389                                                                                   |
| ldapBackupHost                |                                                                                       |
| ldapBackupPort                |                                                                                       |
| ldapOverrideMainServer        |                                                                                       |
| ldapAgentName                 | cn=admin,dc=owncloud,dc=com                                                           |
| ldapAgentPassword             | ***                                                                                   |
| ldapBase                      | dc=owncloud,dc=com                                                                    |
| ldapBaseUsers                 | dc=owncloud,dc=com                                                                    |
| ldapBaseGroups                | dc=owncloud,dc=com                                                                    |
| ldapUserFilter                | (|(objectclass=inetOrgPerson))                                                        |
| ldapUserFilterMode            | 0                                                                                     |
| ldapUserFilterObjectclass     | inetOrgPerson                                                                         |
| ldapUserFilterGroups          |                                                                                       |
| ldapLoginFilter               | (&(|(objectclass=inetOrgPerson))(|(uid=%uid)(|(mailPrimaryAddress=%uid)(mail=%uid)))) |
| ldapLoginFilterMode           | 0                                                                                     |
| ldapLoginFilterEmail          | 1                                                                                     |
| ldapLoginFilterUsername       | 1                                                                                     |
| ldapLoginFilterAttributes     |                                                                                       |
| ldapGroupFilter               | (&(|(objectclass=posixGroup)))                                                        |
| ldapGroupFilterMode           | 0                                                                                     |
| ldapGroupFilterObjectclass    | posixGroup                                                                            |
| ldapGroupFilterGroups         |                                                                                       |
| ldapUserName                  | samaccountname                                                                        |
| ldapUserDisplayName           | displayName                                                                           |
| ldapUserDisplayName2          |                                                                                       |
| ldapGroupDisplayName          | cn                                                                                    |
| ldapTLS                       | 0                                                                                     |
| ldapQuotaDefault              |                                                                                       |
| ldapQuotaAttribute            |                                                                                       |
| ldapEmailAttribute            | mail                                                                                  |
| ldapGroupMemberAssocAttr      | memberUid                                                                             |
| ldapCacheTTL                  | 600                                                                                   |
| ldapNetworkTimeout            | 2                                                                                     |
| homeFolderNamingRule          |                                                                                       |
| turnOffCertCheck              | 0                                                                                     |
| ldapConfigurationActive       | 1                                                                                     |
| ldapAttributesForUserSearch   |                                                                                       |
| ldapAttributesForGroupSearch  |                                                                                       |
| ldapExpertUsernameAttr        |                                                                                       |
| ldapExpertUUIDUserAttr        | uid                                                                                   |
| ldapExpertUUIDGroupAttr       |                                                                                       |
| hasMemberOfFilterSupport      | 0                                                                                     |
| useMemberOfToDetectMembership | 1                                                                                     |
| lastJpegPhotoLookup           | 0                                                                                     |
| ldapNestedGroups              | 0                                                                                     |
| ldapPagingSize                | 500                                                                                   |
| ldapExperiencedAdmin          | 0                                                                                     |
| ldapDynamicGroupMemberURL     |                                                                                       |
+-------------------------------+---------------------------------------------------------------------------------------+

It still works, sync works all is good. BUT opening the wizzard says The Base DN appears to be wrong on the UI

sync break with

In Connection.php line 552:
                                                  
  [OCA\User_LDAP\Exceptions\BindFailedException]  

and log is full with this errors

{
  "reqId": "zhPk6cMzYzV66xEXr8Tg",
  "level": 3,
  "time": "2019-05-30T04:32:55+00:00",
  "remoteAddr": "127.0.0.1",
  "user": "admin",
  "app": "PHP",
  "method": "GET",
  "url": "/index.php/settings/admin?sectionid=authentication",
  "message": "Undefined index: ldap_dynamic_group_member_url_default at /home/artur/www/owncloud-core/apps/user_ldap/templates/settings.php#103"
}

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the wizard and sync failure with the LDAPTestId configuration in the issue. Start at apps/user_ldap/templates/settings.php line 103 and OCA\User_LDAP\Connection.php line 552, then trace the missing ldap_dynamic_group_member_url_default value and BindFailedException; done means the wizard and sync work without these errors.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.