plugin-LoginLdap icon indicating copy to clipboard operation
plugin-LoginLdap copied to clipboard

LDAP plugin finds user but login is denied

Open erelling opened this issue 4 years ago • 3 comments

I have configured the plugin for LDAP-only authentication to Active Directory.

The two test buttons return the expected number of users in the directory and the two test users in the intended AD-group respectively.

However, neither of the two users can log in and are greeted with incorrect username and password.

I can find no instruction beyond the steps already taken and no log entries which seem relevant.

Plugin version is v4.3.1 running on matomo 4.6.2

What am I missing?

erelling avatar Jan 17 '22 13:01 erelling

Hello,

Same problem for me

Everything appears to be working, 40 users identified by the plugin in the LDAP group, but cannot log in: incorrect username and password.

Plugin version : 4.4.0 Matomo version : 4.6.2

gbarredev avatar Jan 31 '22 13:01 gbarredev

@AltamashShaikh are you maybe able to help on this one?

sgiehl avatar Jan 31 '22 14:01 sgiehl

Hey @erelling and @gbarredev

I tried replicating the issue by creating 1 test user and synchronising that user to my Matomo instance and was unable to reproduce it. I was able to login with that user without any difficulty.

I assume you can see those users under your Matomo Admin Interface

You can verify by checking for those user's under Matomo Administration -> Settings -> Users

Also if possible you can test by adding 1 test user by running this commands maybe.

  1. Generate a password by running below command slappasswd

  2. Create testuser.ldif

dn: uid=mytestuser,ou=people,dc={YOUR_VALUE},dc={YOUR_VALUE}
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
cn: My Test User
uid: mytestuser
givenName: My Test User
sn: mytestuser
userPassword: {PASWWORD_GENERATED_FROM_STEP1}
  1. Add the user sudo ldapadd -Y EXTERNAL -H ldapi:/// -f testuser.ldif

  2. Load the user from LDAP in your Matomo instance Screenshot from 2022-02-01 09-54-05

  3. Try logging with the mytestuser and password

AltamashShaikh avatar Feb 01 '22 04:02 AltamashShaikh