Success with Drupal 8? [#2782941]

I'm seeing the Drupal 8 version of this module listed as green (tested and reviewed), but then also see a notice above that says the Drupal 8 module isn't usable yet. Can anyone confirm this module is working on Drupal 8?

We're having a heck of a time implementing this module into D8.

When I test the AD server we've added to Drupal 8, we're getting these results:

Binding with DN for non-anonymous search (). Using password stored in configuration.

Failed to bind to server. ldap error #82 Success FAIL

Thanks for any information anyone might have to offer up.

cheers,
ev

Comment	File	Size	Author
#6	sample_openldap_server.txt	966 bytes	tenken

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

Comment #1

11 August 2016 at 22:48

design_ev created an issue. See original summary.

Comment #2

grahl

he/him

Zürich

CreditAttribution: grahl as a volunteer commented 13 August 2016 at 11:14

Category:

Bug report

» Support request

Hi ev

Alpha1 can in general be used, but not all components work flawlessly yet. Also, the code isn't really covered by tests yet. For example, nested groups, provisioning to LDAP or the UI for the user field assignment are buggy but if you just need to authenticate users and have plain group mappings, you can make it work.

Your particular issue seems to stem from an incorrect service account setup and debugging that from afar is not trivial. You might want to install a test site with Drupal 7, that way you can exclude the 8 branch from being the cause of your problems but again, I doubt that the error you see is an actual bug.

Have you also enabled the ldap_help module and detailed watchdog logging? It can help narrow down configuration issues.

Comment #3

queenvictoria CreditAttribution: queenvictoria at Holly commented 17 August 2016 at 00:54

Assigned:

akafitty

» Unassigned

Hi design_ev. I'm happy to workshop with you to resolve the issues you are seeing. I have been using this module with an AD server in production for most of the year. Also I've removed your self assignment in order that this issue receive more attention. Regards.

Comment #4

tenken CreditAttribution: tenken commented 29 August 2016 at 17:21

Hi --

I'm trying to setup an OpenLdap server with alpha1 from a drush install which fetched alpha1. I have a D7 site on LDAP 7.x-2.x and it connects fine and functions with the ldap module and our campus ldap service. The same exact configuration yields the following from the "Test" option of the Servers tab (works in D7):

Failed to bind to server. ldap error #49 Invalid credentials

But the Server configurations are identical in 7.x and 8.x and the service account bind dn and password are identical. Is OpenLdap working/tested yet? Is there any information I can provide to help?

Comment #5

queenvictoria CreditAttribution: queenvictoria at Holly commented 30 August 2016 at 01:56

OpenLDAP should be fine with D8. I'm running it in a Docker environment. Please could you share your config files without passwords? You can export them using the Development > Configuration > export single tool in D8.

Comment #6

tenken CreditAttribution: tenken commented 30 August 2016 at 15:04

File	Size
sample_openldap_server.txt	966 bytes

Sure. I have redacted the password and uid fields for Bind. All other values are what's exported from Admin > Configuration > Config Syncronization > Single Item:

Config Type: Ldap Server
Config Name: my campus service

In looking through the db log for errors I see the following regarding ldap:

Warning: mcrypt_generic_init(): Key size is 0 in _ldap_servers_encrypt() (line 103 of /var/www/.../sites/instructional_development/modules/ldap/ldap_servers/ldap_servers.encryption.inc)

Warning: mcrypt_generic_init(): Key length incorrect in _ldap_servers_encrypt() (line 103 of /var/www/.../sites/instructional_development/modules/ldap/ldap_servers/ldap_servers.encryption.inc)

Warning: mcrypt_generic(): 5 is not a valid MCrypt resource in _ldap_servers_encrypt() (line 104 of /var/www.../sites/instructional_development/modules/ldap/ldap_servers/ldap_servers.encryption.inc)

Warning: mcrypt_generic_deinit(): 5 is not a valid MCrypt resource in _ldap_servers_encrypt() (line 105 of /var/www/.../sites/instructional_development/modules/ldap/ldap_servers/ldap_servers.encryption.inc)