Thanks Clement, I tried the rpm on el6 and it works as well and I think I've sorted out my LDAP settings as I now get...
[Mon Oct 13 10:37:54 2014] [error] [client 160.128.20.4] PHP Warning: ldap_get_values(): Cannot get the value(s) of attribute Decoding error in /usr/share/self-service-password/pages/change.php on line 121, referer: http://127.0.0.1:800/ [Mon Oct 13 10:37:54 2014] [error] [client 160.128.20.4] PHP Warning: preg_match_all(): Compilation failed: missing terminating ] for character class at offset 2 in /usr/share/self-service-password/lib/functions.inc.php on line 171, referer: http://127.0.0.1:800/ [Mon Oct 13 10:37:54 2014] [error] [client 160.128.20.4] Cannot modify AD password as user, referer: http://127.0.0.1:800/ [Mon Oct 13 10:37:54 2014] [error] [client 160.128.20.4] PHP Notice: Undefined index: changehelpextramessage in /usr/share/self-service-password/pages/change.php on line 184, referer: http://127.0.0.1:800/ Then if I try changing to manager as to who sets the password I get the following... [Mon Oct 13 10:41:11 2014] [error] [client 160.128.20.4] PHP Warning: ldap_get_values(): Cannot get the value(s) of attribute Decoding error in /usr/share/self-service-password/pages/change.php on line 121, referer: http://127.0.0.1:800/ [Mon Oct 13 10:41:11 2014] [error] [client 160.128.20.4] PHP Warning: preg_match_all(): Compilation failed: missing terminating ] for character class at offset 2 in /usr/share/self-service-password/lib/functions.inc.php on line 171, referer: http://127.0.0.1:800/ [Mon Oct 13 10:41:11 2014] [error] [client 160.128.20.4] PHP Warning: ldap_mod_replace(): Modify: Constraint violation in /usr/share/self-service-password/lib/functions.inc.php on line 275, referer: http://127.0.0.1:800/ [Mon Oct 13 10:41:11 2014] [error] [client 160.128.20.4] LDAP - Modify password error 19 (Constraint violation), referer: http://127.0.0.1:800/ [Mon Oct 13 10:41:11 2014] [error] [client 160.128.20.4] PHP Notice: Undefined index: changehelpextramessage in /usr/share/self-service-password/pages/change.php on line 184, referer: http://127.0.0.1:800/ ...which as I see on the url you gave me says that AD won't allow me to reset the password as the user unless I use SSL, which I unfortunately can't do because I'm using Samba4 for my AD and I can't control the SSL certificates. Unless I've misunderstood this completely. Do you know if there is a way around this, below are my current config options... $ldap_url = "ldap://192.168.0.8";; $ldap_binddn = "[email protected]"; $ldap_bindpw = "mypass"; $ldap_base = "dc=mydomain,dc=local"; $ldap_login_attribute = "sAMAccountName"; #$ldap_login_attribute = "uid"; $ldap_fullname_attribute = "cn"; $ldap_filter = "(&(objectClass=person)($ldap_login_attribute={login}))"; $ad_mode = true; #$who_change_password = "user"; $who_change_password = "manager"; Not sure if there's actually a way around ? Thanks very much for your assistance. Regards. Neil Wilson. then On Mon, Oct 13, 2014 at 10:27 AM, Clément OUDOT <[email protected]> wrote: > > > 2014-10-13 9:48 GMT+02:00 Neil <[email protected]>: >> >> Hi Clement, >> >> Thank you very much, that resolved the first problem. When I try to >> reset a password now I get a "login or password incorrect" and the >> following errors display in the logs. >> >> [Mon Oct 13 09:45:32 2014] [error] [client 160.128.20.4] PHP Notice: >> Undefined variable: pwd_forbidden_chars in >> /usr/share/self-service-password/index.php on line 99, referer: >> http://127.0.0.1:800/ >> [Mon Oct 13 09:45:32 2014] [error] [client 160.128.20.4] PHP Warning: >> ldap_get_dn(): supplied argument is not a valid ldap result entry >> resource in /usr/share/self-service-password/pages/change.php on line >> 112, referer: http://127.0.0.1:800/ >> [Mon Oct 13 09:45:32 2014] [error] [client 160.128.20.4] LDAP - User >> neilwil not found, referer: http://127.0.0.1:800/ >> [Mon Oct 13 09:45:32 2014] [error] [client 160.128.20.4] PHP Notice: >> Undefined index: changehelpextramessage in >> /usr/share/self-service-password/pages/change.php on line 184, >> referer: http://127.0.0.1:800/ >> >> The url 127.0.0.1:800 is because I'm using an SSH tunnel. >> >> Do you think these are further issues because of Centos 5? > > > No, it the error is "LDAP - User neilwil not found", means that your LDAP > settings are not correct, check > http://ltb-project.org/wiki/documentation/self-service-password/latest/config_ldap > > > >> >> Is there a Centos 6 rpm perhaps? >> > > > The default RPM should be compatible with all versions of CentOS. > > > > > Clément. _______________________________________________ ltb-users mailing list [email protected] http://lists.ltb-project.org/listinfo/ltb-users
