Hello,
look at the mail log file. Piler syslogs all events. For starters,
check config-site.php, and verify that you have enabled ldap
authentication.
Then check the ldap server, port, ldap helper user account settings.
Also check if there's any traffic from the archive to the ldap server.
Janos
On 2020-04-17 18:10, Robitaille, Cameron wrote:
Hi:
So I reinstalled everything according to documentation and again, I
can login as admin@local with no issue but I can't get any LDAP users
logged in even though the logs say they are authenticated. Is there
any other logging I should be checking or turning on?
Thanks,
Cameron Robitaille
Network Administrator
Waypoint Centre for Mental Health Care
Advancing Understanding. Improving Lives.
500 Church Street
Penetanguishene ON L9M 1G3
(705) 549-3181 ext. 2834
crobitai...@waypointcentre.ca
This electronic transmission and accompanying attachments may contain
privileged or confidential information intended only for the use of
the individual or organization named above. Any distribution, copy or
action taken in reliance of the contents of this communication by
anyone other than the intended recipient(s) is Strictly Prohibited.
If you have received this communication in error, please notify the
sender at the above email address and delete this email.
-----Original Message-----
From: s...@acts.hu <s...@acts.hu>
Sent: April 16, 2020 4:40 PM
To: Piler User <piler-user@list.acts.hu>
Cc: Robitaille, Cameron <crobitai...@waypointcentre.ca>
Subject: Re: SSO Issues
CAUTION: This email originated from outside of the organization. Do
not click links or open attachments unless you recognize the sender
and know the content is safe. If you are unsure, please delete the
message.
Hello Cameron,
based on the ntlm logs the authentication is successful, and apache
also says granted. Please check out the mail log as well as apache's
error log for additional clues.
Also check if you can login by using ldap authentication, ie. not
using sso.php but rather the usual login.php.
Janos
On 2020-04-16 21:49, Robitaille, Cameron wrote:
I am hoping there is an easy answer to this as I am about to pull my
hair out. I am installing to a new server in the hopes of migrating
from an existing install.
I have everything installed and I can log in as the admin@local user.
I configured the LDAP auth with the SSO configuration and I can run
and get good results from manually running ntlm_auth with a valid
user. I copied the working config from the other server into my
config-site.php. When I try to SSO it just spins although the log
says:
[Thu Apr 16 15:40:47.512194 2020] [:debug] [pid 4441]
mod_auth_ntlm_winbind.c(1041): [client 10.10.95.2:31200] doing ntlm
auth dance [Thu Apr 16 15:40:47.512209 2020] [:debug] [pid 4441]
mod_auth_ntlm_winbind.c(484): [client 10.10.95.2:31200] Using existing
auth helper 4591 [Thu Apr 16 15:40:47.512238 2020] [:debug] [pid 4441]
mod_auth_ntlm_winbind.c(703): [client 10.10.95.2:31200] parsing reply
from helper to KK
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\n
[Thu Apr 16 15:40:47.519444 2020] [:debug] [pid 4441]
mod_auth_ntlm_winbind.c(741): [client 10.10.95.2:31200] got response:
AF MHCP.ON.CA\\user
[Thu Apr 16 15:40:47.519499 2020] [:debug] [pid 4441]
mod_auth_ntlm_winbind.c(787): [client 10.10.95.2:31200] authenticated
MHCP.ON.CA\\user [Thu Apr 16 15:40:47.519522 2020] [authz_core:debug]
[pid 4441]
mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626:
authorization result of Require valid-user : granted [Thu Apr 16
15:40:47.519535 2020] [authz_core:debug] [pid 4441]
mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626:
authorization result of <RequireAny>: granted
I would read this that it was successful but the page just spins and
nothing ever happens, the search never comes up.
I am using version 1.38. Thanks,
Cameron Robitaille
Network Administrator
Waypoint Centre for Mental Health Care Advancing Understanding.
Improving Lives.
500 Church Street
Penetanguishene ON L9M 1G3
(705) 549-3181 ext. 2834
crobitai...@waypointcentre.ca
This electronic transmission and accompanying attachments may contain
privileged or confidential information intended only for the use of
the individual or organization named above. Any distribution, copy or
action taken in reliance of the contents of this communication by
anyone other than the intended recipient(s) is Strictly Prohibited.
If you have received this communication in error, please notify the
sender at the above email address and delete this email.
