Username not supplied

archesis
(@anchises)

7 years, 2 months ago

Hi, I am trying to set up the plugin for ldap-authorization. When trying to login, the browser seems to be stuck for a minute before denying login with the information that username is not valid.

The server error log shows the following when trying to login:

[AuthLDAP] User ” logging in
[AuthLDAP] Username not supplied: return false

The username to login is in attribute “cn”, so I am using (cn=%s) with brackets as a filter.

I can do requests using “ldapsearch”.

Can you point me in the direction of what might be the problem?

Viewing 3 replies - 1 through 3 (of 3 total)

Plugin Author heiglandreas
(@heiglandreas)

7 years, 2 months ago

Can you perhaps provide me the configuration-details (sanitized)? Feel free to send them to authldap AT heigl DOT org if you don’t want to post them here.

And any log-output would be much apprechiated when you have debugging set to “on”.
Thread Starter archesis
(@anchises)

7 years, 2 months ago
Thanks for the quick response.

Where does the plugin save the log? Do have to enable WP logging?

ldap structure is like this (simplified):
c
|-o
|-|-ou
|-|-|-cn

Settings:

Save passwords: No

Map LDAP Groups to roles: No

URI: ldap://cn=auth-user,ou=unit,o=organization,c=country:Password-of-auth-user@ldap-server.com/c=country
(using full path of the authorized user)

LDAP URI-Separator: empty

StartTLS: No

Filter: (cn=s%)

Name-Attribute: givenName

Second Name Attribute: sn

User-ID Attribute: cn

Mail Attribute: eMailAddress

Web-Attribute: empty

Default Role: Author

Also:
If I would like to use multiple ldap-servers, I would have to set a a “separator” and then type the full URIs (like the one above) one after another, separated by the separator, true?

Is it allowed to set ports? In my case like this: @ldap-server.com:1234/c=country
- This reply was modified 7 years, 2 months ago by archesis.
Plugin Author heiglandreas
(@heiglandreas)

7 years, 1 month ago

If you need a different port you have to provide the port like you posted to the LDAP-URI

And yes, you would provide multiple LDAP-URIs one after the other separated by the separator.

Have you URL-Encoded any special characters in the LDAP-URI? Like Spaces or anything not ASCII?

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Username not supplied’ is closed to new replies.

Tags