Setting user registration to 'admin only' doesn't allow the creation of new ldap user profile; login is obviously denied.
With user registration allowed to visitors, ldap users can authenticate.

in attachment my settings

Comments

johnbarclay’s picture

johnbarclay commented
Assigned: Unassigned » johnbarclay
Maxter’s picture

Maxter commented
Assigned: johnbarclay » Unassigned

Server and LDAP Module

OK
 Apache Apache/2.2.16 (Ubuntu)
OK
 PHP version 5.3.3-1ubuntu9.3
OK
 PHP ldap extension data
LDAP Support: enabled
RCS Version: $Id: ldap.c 299434 2010-05-17 20:09:42Z pajoye $
Total Links: 0/unlimited
API Version: 3001
Vendor Name: OpenLDAP
Vendor Version: 20423
SASL Support: Enabled
Directive: Array
ldap.max_links: Array
OK
 mcrypt extension loaded yes
OK
 open ssl extension loaded yes
OK
 Drupal 7.0
OK
 ldap_servers status: 1, schema_version: 0, v: 7.x-1.0-unstable5
OK
 ldap_authentication status: 1, schema_version: 0, v: 7.x-1.0-unstable5
OK
 ldap_authorization status: 1, schema_version: 0, v: 7.x-1.0-unstable5

User Settings

OK
 Who can register accounts? Visitatori

General Settings

OK
 ssl required 0
OK
 encryption No Encyption

Server: CSC Active Directory

OK
 sid CSC_AD
OK
 name CSC Active Directory
OK
 status 1
OK
 type ad
OK
 port 389
OK
 tls 0
OK
 user_attr sAMAccountName
OK
 mail_attr mail
OK
 ldaps in address n
OK
 binddn present yes
OK
 basedn count 5

LDAP Authentication Settings

OK
 authenticationMode Only LDAP Authentication is allowed except for user 1.
If selected, (1) reset password links will be replaced with links to ldap end user documentation below.
(2) The reset password form will be left available at user/password for user 1; but no links to it
will be provided to anonymous users.
(3) Password fields in user profile form will be removed except for user 1.
OK
 allowOnlyIfTextInDn empty
OK
 excludeIfTextInDn empty
OK
 allowTestPhp empty
OK
 loginConflictResolve Associate local account with the LDAP entry. This option
is useful for creating accounts and assigning roles before an ldap user authenticates.
OK
 acctCreation Create accounts automatically for ldap authenticated users.
Account creation settings at /admin/config/people/accounts/settings will only affect non-ldap authenticated accounts.
profix898’s picture

profix898 commented

- Same here -
Authentication test succeeds for given user, but any login attempt is denied.

krak’s picture

krak commented

+1 subscribe

johnbarclay’s picture

johnbarclay commented
Priority: Normal » Major
rconstantine’s picture

rconstantine commented

subscribe

johnbarclay’s picture

johnbarclay commented

I think this is the same issue as #1101422: Does not do any LDAP query when a user tries to log in. Can someone who has this problem, see if that fix works for this issue? That fix will be in unstable6.

micahw156’s picture

micahw156
he/him/his
commented

From the original issue:

Setting user registration to 'admin only' doesn't allow the creation of new ldap user profile; login is obviously denied. With user registration allowed to visitors, ldap users can authenticate.

I'm pretty sure this worked for me, I'm not sure I had it set 'admin only' at that point. I will verify when I get to that part of the test grid to make sure this is now working.

johnbarclay’s picture

johnbarclay commented
Version: 7.x-1.0-unstable5 » 7.x-1.x-dev
Assigned: Unassigned » johnbarclay
Status: Active » Needs review
johnbarclay’s picture

johnbarclay commented
Status: Needs review » Closed (fixed)