Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LDAP integration is broken #166

Open
dragondaddy opened this issue Jan 29, 2024 · 1 comment
Open

LDAP integration is broken #166

dragondaddy opened this issue Jan 29, 2024 · 1 comment

Comments

@dragondaddy
Copy link
Contributor

Describe the bug

After installing Hubzilla, YunoHost users cannot connect using their YunoHost credentials. Even the admin chosen during install cannot connect.
Creating an account is possible as long as you don't use the main email adress of a YunoHost user. The first user created gets admin rights.

Context

  • Hardware: Mini PC @ home
  • YunoHost version: 11.2.9.1
  • I have access to my server: Through SSH & through the webadmin
  • Using, or trying to install package version/branch: 8.8.6~ynh1 (master)

Steps to reproduce

  • Install Hubzilla though webabmin or CLI, choosing one of the YunoHost as the Hubzilla pod admin
  • Go to the freshly installed Hubzilla pod login page and try to connect the YunoHost user chosen to be the admin, using their YunoHost ID & password.
  • Try to connect the same way with any other YunoHost credentials

Expected behavior

The admin's first channel is created and has admin rights.
Any YunoHost user can connect using his YunoHost credentials

Logs

Found in /var/www/hubzilla/php.log (logging enabled the Hubzilla admin interface) just after tryinh to connect an already existing YunoHost user:
2024-01-29T12:58:40Z:LOG_INFO:27db8048f2:ldapauth.php:135:ldapauth_authenticate: ldapauth: Searching user johndoe.
2024-01-29T12:58:40Z:LOG_INFO:27db8048f2:ldapauth.php:151:ldapauth_authenticate: ldapauth: PHP-LDAP fail or no server set.
2024-01-29T12:58:40Z:LOG_INFO:27db8048f2:auth.php:329:require: authenticate: failed login attempt: johndoe from IP XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX

@dragondaddy
Copy link
Contributor Author

I'd suggest removing LDAP integration, just as I did in the Streams package, as it only complicates things. You can see here the explanation that was given to me while I was struggling to make LDAP integration work in the Streams package. Turns out it is not a good idea, as it would, among other problems, break nomadic identity, which is one of Streams & Hubzilla killer features.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant