mahara-contributors team mailing list archive

Thread
Date
[Bug 1537908] Re: Warnings when LDAP server is not available

To: mahara-contributors@xxxxxxxxxxxxxxxxxxx
From: Aaron Wells <1537908@xxxxxxxxxxxxxxxxxx>
Date: Fri, 29 Jan 2016 00:35:00 -0000
Reply-to: Bug 1537908 <1537908@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
Correction, on further analysis of the code, you don't have to have
enabled user auto-creation or sync in order to be affected by this bug.
Before the LDAP auth plugin tries to authenticate a username and
password, it connects to the server using the Mahara bind DN & password
(or anonymously) and runs an LDAP search to try to find out the DN for
the user's record.

At first this seems like an unnecessary step. Why not just construct the
user's DN using the user context, the username attribute, and the
username value? But, users may be stored in multiple contexts (there is
a "recurse into subcontexts" setting), and the username attribute may
not be part of the user's DN. So this actually is a necessary step.
(Although potentially we could cache the DN somewhere in Mahara's
database to save on this extra connection step.)

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1537908

Title:
  Warnings when LDAP server is not available

Status in Mahara:
  Confirmed
Status in Mahara 1.10 series:
  Confirmed
Status in Mahara 15.10 series:
  Confirmed

Bug description:
  Version: master (16.04), 15.10
  Platform: any
  Browser: any

  When logging in using LDAP authentication, I get the following error message if the LDAP server is not available.
  and the password for the ldap special user does appear.
  (I changed it to 'visiblepassword')

  [Mon Jan 25 21:00:44.324225 2016] [:error] [pid 11] [client 172.17.0.1:37746] [WAR] a2 (auth/ldap/lib.php:271) ldap_bind(): Unable to bind to server: Can't contact LDAP server, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.324262 2016] [:error] [pid 11] [client 172.17.0.1:37746] Call stack (most recent first):, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.324272 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * log_message("ldap_bind(): Unable to bind to server: Can't conta...", 8, true, true, "/var/www/html/mahara-clients/docroot/htdocs/auth/l...", 271) at /var/www/html/mahara-clients/docroot/htdocs/lib/errors.php:441, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.324281 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * error(2, "ldap_bind(): Unable to bind to server: Can't conta...", "/var/www/html/mahara-clients/docroot/htdocs/auth/l...", 271, array(size 5)) at Unknown:0, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.324288 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * ldap_bind(resource(#106), "cn=ldap proxy,ou=special users,ou=school,DC=eggs,D...", "visiblepassword") at /var/www/html/mahara-clients/docroot/htdocs/auth/ldap/lib.php:271, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.324296 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * AuthLdap->ldap_connect() at /var/www/html/mahara-clients/docroot/htdocs/auth/ldap/lib.php:139, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.324303 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * AuthLdap->authenticate_user_account(object(LiveUser), "********") at /var/www/html/mahara-clients/docroot/htdocs/auth/lib.php:1500, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.324310 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * login_submit(object(Pieform), array(size 6)) at Unknown:0, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.324316 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * call_user_func_array("login_submit", array(size 2)) at /var/www/html/mahara-clients/docroot/htdocs/lib/pieforms/pieform.php:537, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.324323 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * Pieform->__construct(array(size 9)) at /var/www/html/mahara-clients/docroot/htdocs/auth/lib.php:505, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.324331 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * auth_setup() at /var/www/html/mahara-clients/docroot/htdocs/init.php:408, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.324338 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * require("/var/www/html/mahara-clients/docroot/htdocs/init.p...") at /var/www/html/mahara-clients/docroot/htdocs/index.php:16, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.324345 2016] [:error] [pid 11] [client 172.17.0.1:37746] , referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.326490 2016] [:error] [pid 11] [client 172.17.0.1:37746] [WAR] a2 (auth/ldap/lib.php:200) LDAP connection failed: ldaps://rodc1.eggs.school.nz/ou=school,DC=eggs,DC=school,DC=nz, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.326518 2016] [:error] [pid 11] [client 172.17.0.1:37746] Call stack (most recent first):, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.326544 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * log_message("LDAP connection failed: ldaps://rodc1.eggs.school....", 8, true, true) at /var/www/html/mahara-clients/docroot/htdocs/lib/errors.php:97, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.326553 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * log_warn("LDAP connection failed: ldaps://rodc1.eggs.school....") at /var/www/html/mahara-clients/docroot/htdocs/auth/ldap/lib.php:200, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.326562 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * AuthLdap->authenticate_user_account(object(LiveUser), "********") at /var/www/html/mahara-clients/docroot/htdocs/auth/lib.php:1500, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.326569 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * login_submit(object(Pieform), array(size 6)) at Unknown:0, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.326576 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * call_user_func_array("login_submit", array(size 2)) at /var/www/html/mahara-clients/docroot/htdocs/lib/pieforms/pieform.php:537, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.326585 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * Pieform->__construct(array(size 9)) at /var/www/html/mahara-clients/docroot/htdocs/auth/lib.php:505, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.326593 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * auth_setup() at /var/www/html/mahara-clients/docroot/htdocs/init.php:408, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.326600 2016] [:error] [pid 11] [client 172.17.0.1:37746]   * require("/var/www/html/mahara-clients/docroot/htdocs/init.p...") at /var/www/html/mahara-clients/docroot/htdocs/index.php:16, referer: http://localhost/mahara-clients/docroot/htdocs/
  [Mon Jan 25 21:00:44.326608 2016] [:error] [pid 11] [client 172.17.0.1:37746] , referer: http://localhost/mahara-clients/docroot/htdocs/

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1537908/+subscriptions
References

[Bug 1537908] [NEW] Warnings when LDAP server is not available
From: Son Nguyen, 2016-01-25