"No bind successfull" if LDAP search returns no result

[fraenki]

I'm testing version 2.0.3, but my attempt to authenticate/register always fails with:

[AuthLDAP] User 'test' logging in
[AuthLDAP] about to do LDAP authentication
[AuthLDAP] connect to LDAP server
[AuthLDAP] No bind successfull

To further debug this I've added some debug messages to src/LdapList.php. This revealed that $this->items is empty in the bind() function:

authLdap/src/LdapList.php

Lines 57 to 65 in 797b32e

	foreach ($this->items as $key => $item) {
	try {
	$item->bind();
	} catch (\Exception $e) {
	unset($this->items[$key]);
	continue;
	}
	$allFailed = false;
	}

What could be the reason? I've notices that it gets properly filled in addLdap() function and in the authenticate() function $this->items still contains data. No idea why it's empty when bind() is called.

FWIW, I'm using PHP 7.2.7 in my test environment.

My LDAP server requires a binduser/bindpw, so my connection string looks like this:
ldap://user:password@ldap.example.com/dc=example,dc=com

[heiglandreas]

$this->items contains an array of possible LDAP-Servers. When the bind is not successful the corresponding entry is removed and therefore at one point the array is empty when there was no way to connect to an LDAP-Server.

As you are only using one and there seems to be a connection problem that one server is removed from the possible servers and none is left…

And as the authenticate-method first tries to bind with the binduser (to find the logging in user) that might be the failing bind.

What do you use as user? Are you using an URI-Encoded DN? Like ldap://uid=ldapadmin,dc=example,dc=com:P%40s$w0rd@ldap.example.com/dc=example,dc=com? Otherwise it might not work.

And what is your LDAP-Backend? Are you authenticating against an AD? Or an Openldap? Or anything else? As AD might offer other options as most of the others…

[fraenki]

Thanks, found it. In my case the LDAP search returned no result. I'd suggest to add a debug message for this case:
https://github.com/fraenki/authLdap/commit/6cfa37ad0f0d6bf150136b78812e7cadcd8c4295

[heiglandreas]

Thanks for raising this issue! That case should not cause the Item-Array to become empty! I need to fix that ASAP.