Hello,
I encounter a problem while login in with an ldap authentication and basic user provisioning enable to get lastname and firstname.
The authentication process works when only authentication is enabled and the provisioning disabled.
When I enable the provsioning , the php memory is exhausted with the error (in apache log):

PHP Fatal error: Allowed memory size of 629145600 bytes exhausted (tried to allocate 352 bytes) in /zz/includes/database/database.inc on line 464

and
The drupal log sais "Session opened for userzz"
The user have a white screen.

the configuration was working well with previous verisons (LDAP 7.1x and Drupal 7.14) and I cannot identify exactly when this occurs. I have try to downgrade the LDAP module but with no success.

The LDAP Bind methode is : "Bind with Users Credentials", remote authentication server is an OpenLDAP

Any idea

Request via https thru an apache virtual host with gnutls configured with a valid signed certificate to a ldaps server with a valid signed certificate

Ubuntu 10.04.4 LTS
PHP 5.3.2-1ubuntu4.18, Apache/2.2.14, Drupal 7.18 (also on 7.16 and 7.17), LDAP 7.x-2.0-beta3,
gnutls-bin 2.8.5-2ubuntu0.1, libapache2-mod-gnutls/lucid 0.5.5-1, libgnutls26/lucid 2.8.5-2ubuntu0.2

Comments

trumanru’s picture

trumanru CreditAttribution: trumanru commented
Category: bug » support
Priority: Normal » Minor
Status: Active » Closed (works as designed)

It's well known (for Google :) ) problem with php memory limitation (in php.ini).

Cure for it: http://drupal.org/node/76156

gwj’s picture

gwj CreditAttribution: gwj commented

Hello,
Thanks for the link but the problem is still there and now it is the Token module on line 381.
If I set the memory limit to 128M, 320M, 600M or 1000M nothing change and I memory value is taken into account in the report status.
I thinks it is an infinite loop that occurs when trying to retreive the sn and givenName form the LDAP Server.
Does it binds again to the server with the same account properties than the authentication ( bind with the username whom try to login) or does it try the bind with an admin account for the LDAP(I don't have one).
Does someone knows about that
Thanks
regards