Authentication failed when LDAP server is off

[billydekid]

Hi,
I'm currently integrating FilamentPHP with LDAP and trying to test when the LDAP server is unreachable.
I set the sync_passwords' => true, inside the database key but the authentication will fail when the LDAP server is off.

Are there any steps I might have missed? or am I missunderstanding about this sync_passwords?
Following my auth.php:

    'ldap' => [
        'driver' => 'ldap',
        'model' => LdapRecord\Models\OpenLDAP\User::class,
        'rules' => [],
        'scopes' => [],
        'database' => [
            'model' => App\Models\User::class,
            'sync_passwords' => true,
            'sync_attributes' => [
                'name' => 'cn',
                'email' => 'mail',
            ],
            'sync_existing' => [
                'email' => [
                    'attribute' => 'mail',
                    'operator' => 'ilike',
                ],
            ],
        ],
    ],

Or maybe I misunderstood that I thought the system would automatically switch when the ldap server is unreachable, hence I should switch the auth guard driver manually (?)

Thanks in advance.

[stevebauman]

Hi @billydekid,

You need to enable Fallback Authentication, which is basically just providing a fallback array key in the credentials array that is sent through Auth::attempt():

$credentials = [
    'mail' => $this->email,
    'password' => $this->password,
    'fallback' => [
        'email' => $this->email,
        'password' => $this->password,
    ],
];

if (Auth::attempt($credentials)) {
    // ...
}

I don't use Filament, so I can't instruct you how to insert this or modify its authentication behaviour.

[billydekid]

Hi @stevebauman thanks for the hints - Fallback Authentication.
I will try the code.

Thank you,

[billydekid]

Hi,
Following are how I implemented the fallback authentication in FilamentPHP.
I extend the original Login class from the Filament by creating app/Filament/Auth/Login.php and override the getCredentialsFromFormData method:

<?php
namespace App\Filament\Auth;

use Filament\Pages\Auth\Login as BaseAuth;

class Login extends BaseAuth
{
    /**
     * bw ~ override
     * Override to set the mail key which is passed to the LdapRecord authentication provider
     */
    protected function getCredentialsFromFormData(array $data): array
    {
        return [
            'mail' => $data['email'],
            'password'  => $data['password'],
            'fallback' => [
                'email' => $data['email'],
                'password' => $data['password'],
            ],
        ];
    }
}

Many thanks!

[stevebauman]

Awesome, glad you're up and running! And thanks for posting your solution here 🙏