LDAP Authentication failed

[paul.tcbc]

Hi,

Can you give a solution why I'm getting Authentication failed : user not found error? I already setup the Base DN, system user and espo user on my Open LDAP server then configured it on my espo installation. The connection was successful between the two.

But when I tried to login using the ldap user I created on my ldap server I got the error.

Please advise.

Thanks,
paul.tcbc

[tarasm]

Please follow this instruction to setup LDAP authorization, https://www.espocrm.com/documentatio...authorization/.

[paul.tcbc]

I setup 5 ldap users on LDAP Server then I setup 5 portals on my espo website. Assigned 1 ldap user for each of the espo portals with custom URL. At first it is working but after a while I cant login using ldap users on those portals. Why is that? The error was "Wrong Username/Password" even though I put the correct credentials.

Please advise.

Thanks,
paul.tcbc

[tarasm]

In the next release you can use local login for portal users, more detail is describe here: https://github.com/espocrm/espocrm/issues/1047. You can wait for this release or apply changes manually, https://github.com/espocrm/espocrm/c...78e9d84aa780ab.

[paul.tcbc]

I think the changes made were for Local Espo User Portal Login while the LDAP Authentication is enabled. Yes, with the code modifications the Local Espo User Portal Login works.

But my issue is for LDAP User Portal Login. Sometimes I can't login in Portal using the LDAP User I assigned. Without code modifications, I had to edit the Portal and unchecked and checked the "is default" checkbox, for it to work. With code modifications, I can no longer login using the LDAP user in Portal.

Please advise.
Thanks,
paul.tcbc

[tarasm]

Try to enable a debug mode, https://www.espocrm.com/documentatio...debugging-mode and check log files, https://www.espocrm.com/documentatio...ent-check-logs.

[paul.tcbc]

There's no useful information on the logs of Espo and Apache. The only thing I noticed was on Auth Log of Espo that the LDAP user that tries to login in Portal, its Auth Token was not generated. That's why its giving Invalid credential error even though I put the correct credentials based on LDAP server.

But if the LDAP user was assigned to Admin, it can login and the Auth Token was generated.

Please advise.
Thanks,
paul.tcbc

[tarasm]

I reproduced this bug. I will let you know a fix in a few days.

[tarasm]

The bug is fixed, the commit https://github.com/espocrm/espocrm/c...91e94cd07d05ea.

[tarasm]

New version 5.4.4 is available with this fix.

[paul.tcbc]

Thanks, Its already working. Although there's a little bit of inconsistency. I'm getting 404 not found page when the Portal with Custom URL "Is default" checkbox is not checked. So I had to checked that checkbox but when I reload the page, the checkbox is no longer checked. Plus the assigned LDAP user cant login.

Please advise.
Thanks,
paul.tcbc

[tanya]

If you checked "is default" you can don't set portal id in url. If you don't have any default portal, portal id has to be set. Or you need to fix portal .htaccess

[paul.tcbc]

What I mean is that, after I checked the "Is Default" checkbox then I reload the page. The result is, the checkbox is no longer checked without editing the portal. It just shows "..." under "Is Default".

If the checkbox is not checked the ldap user can't login and sometimes I'm getting 404 not found page for portal with custom url.

[tanya]

Will be fixed in the next version, Thanks

https://github.com/espocrm/espocrm/commit/ba76ea086cc9a4b93797961e9e0def1f4c859975

[paul.tcbc]

Hi,

I applied the code modification on my espocrm version 5.4.4. And it seems that I'm still getting the same issue, I don't think its already resolve. Or maybe I missed something.

Please advise.
paul.tcbc