Question2Answer Q&A - Recent questions tagged ldap

How to make LDAP plugin work with Global Catalog?

Thu, 29 Jul 2021 13:30:22 +0000

I have given the LDAP server name and port as 3268. But when I enabled LDAP debug, I see that ldap_connect() is still connecting to port 389

I enabled LDAP debug with the following line in ActiveDirectoryLDAPServer.php:

ldap_set_option(NULL, LDAP_OPT_DEBUG_LEVEL, 7);

What happen to the internal users if I setup LDAP authentication?

Fri, 26 Feb 2021 04:43:33 +0000

We have an active Q2A site with internal user authentication enabled. There are at least 30 users. I would like to setup LDAP authentication using qa-ldap-login. Will the existing users be able to login using the internal accounts once I setup LDAP? Will those users be removed/overwritten from the database? What happens to the score of the users ?

I am packaging Question2Answer for YunoHost, are there any quirks that I should know about? And about LDAP Login?

Tue, 23 Feb 2021 09:52:52 +0000

Hello,

I'm creating a package to allow easy installation of Q2A on YunoHost , I plan to add ldap integration to it, is the LDAP Login plugin maintained? Where can I find its stable versions? How stable is that plugin?

My current version of the package can be found at github.com/nils-van-zuijlen/question2answer_ynh

How to fix Error: External login mapped to more than one user ?

Mon, 12 Mar 2018 14:04:42 +0000

Please

Out of the blue my application starts to send this message at login :

Question2Answer fatal error:

External login mapped to more than one user

Stack trace:

require() in index.php:27
require() in qa-index.php:183
qa_check_login_modules() in qa-page.php:829
check_login() in qa-page.php:101
qa_log_in_external_user() in ldap-login.php:33

Version 1.7.2

1.7 LDAP plugin

Wed, 15 Apr 2015 16:10:45 +0000

I am trying to use the LDAP plugin here:

https://github.com/zakkak/qa-ldap-login

However, the instructions are for pre:1.7 implementations and they reference placing some code into the qa-page-login.php file which is deprecated.

Can someone tell me how to enable this plugin for version 1.7?

Thanks in advance.

Rick

How do I disable the forgot password link?

Thu, 09 Apr 2015 18:27:42 +0000

Right now, I use the QA LDAP Plugin to manage user access (vs. using the built in user database).

As a result, passwords are not managed by Q2A itself.

For this reason, I'd like to disable the forgot my password link, or instead perhaps change it to say something like "User accounts are controlled externally. Please use blah blah LDAP to change your password."

How do I do this?

(I haven't yet seen what happens when I try to reset my password with the plugin installed, but I am not trying to screw up the app).

LDAP plugin turns all page view counting to 1

Sun, 25 Jan 2015 05:36:05 +0000

After successfully install LDAP plugin from Zakkak, the view counts of my questions become all to be 1 (one). The IP of the viewers are all to be the LDAP server IP.

How can I get view couting work normally with LDAP login?

How to prevent users from changing their username or email

Fri, 23 Jan 2015 16:34:58 +0000

I am using the qa-ldap-plugin to do user management. If a user exists in the LDAP directory, then they can log in with their credentials. All new users etc. are managed through that LDAP directory.

The qa-ldap-plugin creates a user in the MySQL database if they exist in the LDAP directory but have never logged in before. This way, all user credentials etc are totally managed by LDAP.

However, a user could still go in to their profile and edit their username or email address. This may cause issues from an administration standpoint, because I need this information to always stay consistent with the LDAP directory. How do I prevent a user from modifying this info?

After using QA-LDAP-Plugin, I get a redirect loop after logging in. How do I fix?

Fri, 23 Jan 2015 12:49:50 +0000

I recently installed the qa-ldap-plugin to my question2answer instance, and I went to test it out, and after logging in, I got a redirect loop on my browser. I did some diagnostics to check that my LDAP configuration was working correctly, and did not find that to be an issue. Has anyone faced a similar issue?

Special characters in users' names displayed incorrectly

Fri, 10 Oct 2014 08:25:05 +0000

Hi,

my problem is that names of users (as displayed next to questions etc.) containing special characters such as "ö" (German) are displayed with cryptic character codes in Q2A. For example, my own name, which should be "lukas_könig" is shown as "lukas_k%c3%b6nig".

My Q2A platform is set up within wordpress. Q2A receives user data from wordpress which in turn gets the users over an LDAP interface, so the names Q2A gets are given from outside. (lukas_könig is not the user name in word press, but given as first and surname, so Q2A seems to construct the name to display by putting a "_" in between.)

I tried to fix the problem by changing the "public name" in wordpress to one without special characters, but it didn't work (although wordpress itself displays special characters correctly). Also, as I am expecting several hundreds of users, I am looking for a more general solution to the problem.

Is there a way to solve this once and for all?

Thanks

Lukas

Who can provide a working LDAP integration Plugin?

Fri, 20 Jun 2014 15:02:49 +0000

Who can provide a working LDAP integration Plugin for q2a v1.6.3?

The only one I found is for 1.5 maybe and it's out of date and can not be used for 1.6.3.

I have problems with both login and logout even after a lot of change to the code.

Any one can share a working plugin for LDAP that can be used on 1.6.3?

Have you detailed instructions anywhere

Thu, 22 May 2014 02:26:32 +0000

Can you provide more complete instructions - it is not clear.

Insert the following line of code above the if statement near line 59 of qa-include/qa-page-login.php

require_once QA_INCLUDE_DIR.'../qa-plugin/qa-ldap-login/qa-ldap-process.php';

Please indicate exactly what line of code this should be before (blank login php page when this line is added to this file)?

Also, see below for the details of two users I have added in LDAP:

Distinguished Name: cn=User Foo,ou=Users,dc=example,dc=org

Distinguished Name: cn=User Bar,ou=Users,dc=example,dc=org

Their uid's would be userfoo and userbar respectively.

What Generic LDAP search strings and Generic LDAP search authenticate attribute should be entered.

Thanks.

working ldap

Thu, 19 Dec 2013 09:49:59 +0000

hello

Please help me with the plugin "ldap login."

Download, install, in prescribing settings ldap writes that can not be found.

Give what you can do?

PS system centos + apache + php + mysql

Q2A LDAP login not working

Wed, 07 Aug 2013 15:07:47 +0000

Hello,

I am attempting to setup LDAP Authentication for an internal company Q2A site. I found and installed this plugin: https://github.com/robkub/qa-ldap-login. I added the following line to qa-include/qa-page-login.php. Hopefully its in the right spot... The instructions said around line 59

if (qa_clicked('dologin') && (strlen($inemailhandle) || strlen($inpassword)) ) {

require_once QA_INCLUDE_DIR.'qa-app-limits.php';

require_once QA_INCLUDE_DIR.'../qa-plugin/qa-ldap-login/qa-ldap-process.php';

if (qa_user_limits_remaining(QA_LIMIT_LOGINS)) {

require_once QA_INCLUDE_DIR.'qa-db-users.php';

require_once QA_INCLUDE_DIR.'qa-db-selects.php';

If i start up tshark and attempt a login, i can actually see the ldap authenticaiton succeed, but the q2a page just takes me to the login page agian (/?qa=login).

Any ideas what the problem might be? Are any assitance in how to troubleshoot it? I know very little php.

Page Not Found on Logout after custom Login Module

Tue, 26 Mar 2013 02:03:20 +0000

Hi all,

I have created a small plugin module (based on this ldap_plugin) for auto login via NTLM results for my intranet. It logs users in under the supplied credentials but when the user clicks logout I get a 400 Bad Request error.

Can anyone shed some light?

I have included my plugin code below:

ntlm_login.php{

<?php

class ntlm_login {

function load_module($directory, $urltoroot)

{

$this->directory=$directory;

$this->urltoroot=$urltoroot;

} // end function load_module

// check_login checks to see if user is already logged in by looking for

// a cookie or session variable (dependent on 'remember me' setting

function check_login()

{

if(!isset($_COOKIE["qa-login_fname"]) && !isset($_SESSION["qa-login_fname"])) {

require_once QA_INCLUDE_DIR."../qa-plugin/qa-ldap-login/qa-ntlm-func.php";

if($user_data = get_user_data())

{

$fname = $user_data[0];

$lname = $user_data[1];

$email = $user_data[2];

$username = $user_data[3];

if(isset($inremember)) {

if($inremember == 'true') {

setcookie("qa-login_lname", $lname, time() + $expire, '/');

setcookie("qa-login_fname", $fname, time() + $expire, '/');

setcookie("qa-login_email", $email, time() + $expire, '/');

setcookie("qa-login_user", $user, time() + $expire, '/');

} else {

$_SESSION["qa-login_lname"] = $lname;

$_SESSION["qa-login_fname"] = $fname;

$_SESSION["qa-login_email"] = $email;

$_SESSION["qa-login_user"] = $user;

}

} else {

}

} else {

if(isset($_COOKIE["bdops-login_fname"])){

$fname = $_COOKIE["qa-login_fname"];

$lname = $_COOKIE["qa-login_lname"];

$email = $_COOKIE["qa-login_email"];

$username = $_COOKIE["qa-login_user"];

} else {

$fname = $_SESSION["qa-login_fname"];

$lname = $_SESSION["qa-login_lname"];

$email = $_SESSION["qa-login_email"];

$username = $_SESSION["qa-login_user"];

}

$source = 'ldap';

$identifier = $email;

$fields['email'] = $email;

$fields['confirmed'] = true;

$fields['handle'] = $username;

$fields['name'] = $fname . " " . $lname;

qa_log_in_external_user($source,$identifier,$fields);

}

} // end function check_login

function match_source($source)

{

return $source=='ldap';

} // end function match_source

function login_html($tourl, $context)

{

} // end function login_html

function logout_html ($tourl)

{

require_once QA_INCLUDE_DIR."qa-base.php";

$_SESSION['logout_url'] = $tourl;

$logout_url = qa_path('auth/logout', null, qa_path_to_root());

echo('<a href="'.$logout_url.'">'.qa_lang_html('main/nav_logout').'</a>');

} // end function logout_html

} // end class ldap_login

Please create simple LDAP plugin

Mon, 25 Mar 2013 17:38:52 +0000

I would pay a small fee to have a simple way to setup/install an LDAP plugin. I have tried that one that is in the plugins, but no luck. If there was a way to get it work by plugging in the various settings needs, that would be ideal.

Any help would be appreciated.

Thanks,

Ray

How do I increase the user handle size?

Fri, 15 Mar 2013 16:12:33 +0000

I have a site set up with LDAP. It works great for most North American names.

Unfortunately, we have several staff with names longer than 20 characters. Besides widening the qa_users.handle field, any suggestions for what else I should be looking at to get the Q2A core to work with a wider handle (say 64 chars)?

Who has a working LDAP plugin working?

Sun, 03 Mar 2013 15:29:04 +0000

Could really use some help getting the LDAP plugin working.

Please help.

Thanks,

Getting "User not found" error

Sat, 16 Feb 2013 00:58:45 +0000

I have the ldap plugin setup as described and now I am getting user not found erors.

Does anyone know how to fix this?

Does anyone have LDAP authentication working?

Sat, 09 Feb 2013 12:17:35 +0000

Does anyone have it working? If so, would you mind helping me with my setup? I have my environment setup but I am getting a couple of errors that I can't seem to fix.

Fatal error: Call to undefined function ldap_connect() in C:\UniServer\www\qa-lab\qa-plugin\qa-ldap-login\qa-ldap-process.php on line 20

Line 20 from qa-ldap-process.php is:

// Establish link with LDAP server

$con = ldap_connect($ldap_hostname,$ldap_port) or die ("Could not connect to ldap host.");

if (!is_resource($con)) trigger_error("Unable to connect to $hostname",E_USER_WARNING);

ldap_set_option($con, LDAP_OPT_PROTOCOL_VERSION, 3);

ldap_set_option($con, LDAP_OPT_REFERRALS, 0);

Here is my ldap config:

<?php

$ldap_search_strings = array( 'uid=username,dc=domain,dc=net' );

$ldap_hostname = 'ldap://ldap.domain.net/';

$ldap_port = 389;

Is there a better way to handle the LDAP login for the Q2A site? I really need some help.

Thanks!