Hi,

I updated to 7.x-2.0-beta11 from 7.x-2.0-beta8+14-dev, and now it is throwing a notice for the non-ldap user:

LDAP bind failure for user userdn=, pass=.

Which was not an issue in the past.

I have used "Bind with Users Credentials" in the server setting.
Any fix?

CommentFileSizeAuthor
#8 ldap-bind_failure-2780393-8.patch716 bytesPascalAnimateur
#6 ldap-bind_failure-2780393-6-D7.patch806 bytesmmarler
#5 ldap_servers.install.patch806 bytesmmarler

Comments

LeafLin created an issue. See original summary.

LeafLin’s picture

LeafLin commented

Sorry,

Just want to clarify it was not a problem in 7.x-2.0-beta8, but has been throwing the message since 7.x-2.0-beta8+14-dev.

jwillard’s picture

jwillard commented

Yes, I can also confirm this issue. I also have the same setting of "bind with users credentials" checked. I tried beta9 and beta11 and they both appeared to be throwing this error message in the system log. I did not have this issue as of beta8.

mmarler’s picture

mmarler commented

I can confirm this too. Also, after updating from beta8 the status report is saying, "Connection: Failed, check logs for details."

mmarler’s picture

mmarler commented
StatusFileSize
new ldap_servers.install.patch806 bytes

Here's a patch. The issue only seems to be with the status report trying to bind user credentials. Since the report is generated after the user has logged in there is no user dn or password to bind with since ldap doesn't store passwords. A work around is to do an anonymous bind.

mmarler’s picture

mmarler commented
StatusFileSize
new ldap-bind_failure-2780393-6-D7.patch806 bytes

Renaming patch

gaëlg’s picture

gaëlg
he/him
Primary language French
Location Lille, France
commented
Status: Active » Reviewed & tested by the community

The last patch works. Thank you!

PascalAnimateur’s picture

PascalAnimateur commented
StatusFileSize
new ldap-bind_failure-2780393-8.patch716 bytes

Re-roll patch from #6 so it applies cleanly in drush make file

grahl’s picture

grahl
he/him
Location Zürich
commented

Right, well, isn't the anonymous bind conditional on the specific server configuration? I think it doesn't make sense to set to anonymous for service account bind, is it?

grahl’s picture

grahl
he/him
Location Zürich
commented
Status: Reviewed & tested by the community » Closed (duplicate)
Related issues: +#2838389: ldap_servers_requirements will always fail to bind when using Bind with Users Credentials option

I'm marking this as a duplicate of https://www.drupal.org/node/2838389, let's fix it over there.