schakko
Forum Replies Created
-
Forum: Plugins
In reply to: [Next Active Directory Integration] NADI – no longer workingHey there, please take a look into https://wordpress.org/support/topic/locked-configuration-screen/ – the reason for your described error could be same.
It may be that the newer Wordfence does not repackage Monolog in its own namespace. We are doing this since NADI version 3.0. To keep our plug-in compatible, there is a stub.
You can remove our Monolog stub by commenting out the line 40 (require_once DIR . '/monolog_logger.php';) innext-active-directory-integration/src/compat-v2/stubs.php.Forum: Plugins
In reply to: [Next Active Directory Integration] NADI – no longer workingNADI should log at least *something*. Could it be that some of your other plug-ins or your theme have been auto-updated? Maybe a plug-in which also extends your authentication?
Forum: Plugins
In reply to: [Next Active Directory Integration] Activate Plugin breaks WordPressHey there, please take a look into https://wordpress.org/support/topic/locked-configuration-screen/ – the reason for your described error is almost the same.
Your cera theme does not repackage Monolog in its own namespace. We are doing this since NADI version 3.0. To keep our plug-in compatible, there is a stub.
You can remove our Monolog stub by commenting out the line 40 (require_once DIR . '/monolog_logger.php';) innext-active-directory-integration/src/compat-v2/stubs.php. For some reason in your environment the loading of the theme dependency occurs to a later point in time.Forum: Plugins
In reply to: [Next Active Directory Integration] connect with active directoryWe have a very detailled documentation at https://docs.active-directory-wp.com/Getting_Started.html. If you need some onboarding, you can also purchase a support plan + onboarding at https://active-directory-wp.com/shop-overview/.
We did not test any of those plug-ins. But it may be that those are also hooking in a very specific way into WordPress’ login process. Due to NADI’s SSO functionality we can not guarantee to make it work with any other plug-ins. We would have have to take look at each of those plug-ins separately and get it integrated.
Forum: Plugins
In reply to: [Next Active Directory Integration] PHP errorNADI requires PHP 8.1. The error you are describing means that your PHP version does not support Union Types. I assume that your IIS site has not been assigned with PHP 8.2.x but with an PHP version < 8.x.
Forum: Plugins
In reply to: [Next Active Directory Integration] Locked Configuration ScreenWe have just tested BackWPUp 4.1.2 with the latest available NADI version and it works on our side without any problems. Two remarks here:
- BackWPUp 4.1.2 is wrongly packaged. There is the file
vendor\monolog\src\Monolog\Handler\ElasticsearchHandler.phpandvendor\monolog\src\Monolog\Handler\ElasticSearchHandler.php(note the uppercase ‘S’) in the ZIP file. We had to manually delete the upper-case file from the ZIP files. Otherwise we would not be able to extract the archive manually. - BackWPUp does not repackage Monolog in its own namespace. We are doing this since NADI version 3.0. To keep our plug-in compatible, there is a stub.
You can remove our Monolog stub by commenting out the line 40 (require_once DIR . '/monolog_logger.php';) innext-active-directory-integration/src/compat-v2/stubs.php. For some reason in your environment the loading of BackWPUp’s dependency occurs to a later point in time.
Forum: Plugins
In reply to: [Next Active Directory Integration] Locked Configuration ScreenHey there,
- Do you have enabled “Set local password on first successful login” and/or “Fallback to local password” on the configuration page https://docs.active-directory-wp.com/Configuration/Password.html?
- What does your Windows Server event log shows when your users are not able to log in with their new password?
- Do you have NADI installed in a WordPress Multisite environment?
- Can you check with your browser’s Web Developer Console if there any JavaScript errors on the configuration page?
Forum: Plugins
In reply to: [Next Active Directory Integration] Delete userDeleting users in WordPress is not implemented:
- It is not performant to check if a missing user during a synchronization is really deleted or just have been moved to another domain in a forest.
- For different user (groups) in WordPress there might be a different handling, what to do with items of the deleted user – think of posts, WooCommerce orders and so on. There are too many corner-cases, depending upon the concrete WordPress environment.
Please feel free to use the hooks from https://docs.active-directory-wp.com/API/Synchronization.html to implement a matching solution for your environment!
We have fixed this issue in https://github.com/NeosIT/active-directory-integration2/issues/191. You can either check out the latest devlopment branch or wait for the next release!
Forum: Plugins
In reply to: [Next Active Directory Integration] AD Login is working but SSO isn’tI’am unable to reproduce the issue with the latest 3.1.0 version. A quick question: Do you have added valid credentials to Sync to WordPress and is the username UPN format and not just the sAMAccountName?
Forum: Plugins
In reply to: [Next Active Directory Integration] AD Login is working but SSO isn’tI am not sure if we can sort this issue out without any further digging into it. Can you re-check if in the logs it is really printed “John.Doe@domain.com” for
userPrincipalNamein the first log line andprincipalin the second line?2023-09-18T12:28:47.160923+00:00 [DEBUG] Dreitier\Ldap\Connection::findAttributesOfUser [line 424] UserInfo for user 'UserQuery={principal='mySAM',isGuid=''}': cn={Doe, John}, sn={Doe}, description={John Doe}, givenname={John}, displayname={John Doe}, objectguid={5233eabc-1111-2222-87a5-f3b0a110a44a}, useraccountcontrol={512}, objectsid={^A^E^@^@^@^E^U^@^@^@1111191>jPVU<8e>DÅu}^D^@^@}, samaccountname={mySAM}, userprincipalname={John.Doe@domain.com}, mail={John.Doe@domain.com} .... 2023-09-18T12:28:47.163423+00:00 [WARNING] Dreitier\Ldap\Connection::findAttributesOfUser [line 415] Query 'UserQuery={principal='John.Doe@domain.com',isGuid=''}' did not return any values. Does the sAMAccountName or userPrincipalName exist? Is the provided base DN valid? Is the Kerberos realm mappedThe second query should return the same result as your first query.
Forum: Plugins
In reply to: [Next Active Directory Integration] AD Login is working but SSO isn’tThe
Account suffixdoes not apply to SSO authentication, due to technical reasons.You have two options:
- Append the users’s UPN suffix in your webserver’s Kerberos authentication module
- Use the filter from https://docs.active-directory-wp.com/API/Authentication.html to manually rewrite the credentials on each login:
add_filter('next_ad_int_auth_configure_credentials', function($credential) {
$credential->setUpnSuffix('your-upn-suffix.domain');
return $credential;
}, 10, 1);Forum: Plugins
In reply to: [Next Active Directory Integration] Fatal error when activating plugin@lavzza You are completely right, thank you for letting us! The docs are updated soon 🙂
Forum: Plugins
In reply to: [Next Active Directory Integration] Fatal error when activating plugin@lavzza You are probably using PHP 7.x which is EOL since the beginning of the year. NADI requires at least PHP 8.0. So you have to upgrade to a newer PHP version.
- BackWPUp 4.1.2 is wrongly packaged. There is the file