"Wrong Username and password combination" on second login

[carrgilson]

I have successfully managed to login as a LDAP user, but when I attempt to login with that user a second time, I get the error message: Wrong Username and password combination, at the password screen.

I am running Piwik 2.9.1 and LoginLdap 3.0.0

[diosmosis]

@carrgilson Could you post your [LoginLdap] INI config (w/ sensitive information redacted of course)?

[carrgilson]

@diosmosis My configuration is as follows:

[LoginLdap]
enable_random_token_auth_generation = ""
new_user_default_sites_view_access = ""
user_email_suffix = "@abc.de.fg"
ldap_user_id_field = "userPrincipalName"
ldap_last_name_field = "sn"
ldap_first_name_field = "givenName"
ldap_alias_field = "cn"
ldap_mail_field = "mail"
ldap_password_field = "userPassword"
servers[] = "server"
use_ldap_for_authentication = 1
synchronize_users_after_login = ""
required_member_of = "CN=piwik,OU=groups,DC=abc,DC=de,DC=fg"
ldap_user_filter = "(&(!(userAccountControl:1.2.840.113556.1.4.803:=2))(objectCategory=person)(objectClass=user))"
use_webserver_auth = ""
ldap_network_timeout = 15

[LoginLdap_server]
hostname = "ldap://addc.abc.de.fg"
port = 389
base_dn = "dc=abc,dc=de,dc=fg"
admin_user = "cn=ldap,ou=users,dc=abc,dc=de,dc=fg"
admin_pass = "xxxxxxxx"

[carrgilson]

@diosmosis I think the most interesting part of the logs is this:

DEBUG LoginLdap[2014-11-28 08:53:40] Model\LdapUsers: end authenticate() with ["objectclass","cn","sn","telephonenumber","facsimiletelephonenumber","usercertificate","givenname","distinguishedname","instancetype","whencreated","whenchang ed","displayname","usncreated","memberof","usnchanged","department","company","proxyaddresses","garbagecollperiod","employeenumber","name","objectguid","useraccountcontrol","badpwdcount","codepage","countrycode","homedirectory","badpassw ordtime","lastlogoff","lastlogon","scriptpath","pwdlastset","primarygroupid","objectsid","accountexpires","logoncount","samaccountname","samaccounttype","showinaddressbook","legacyexchangedn","userprincipalname","lockouttime","objectcate gory","dscorepropagationdata","lastlogontimestamp","msds-authenticatedatdc","msds-supportedencryptiontypes","mstsexpiredate","mstslicenseversion","mstsmanagingls","mstslicenseversion2","mstslicenseversion3","uid","mail","manager","mssfu3 0name","mssfu30nisdomain","uidnumber","gidnumber","unixhomedirectory","loginshell","msexchmoderationflags","msexchmobilemailboxflags","msexchmailboxauditlogagelimit","msexchprovisioningflags","msexchwhenmailboxcreated","msexchrecipientty pedetails","msexchrecipientdisplaytype","msexcharchivequota","msexchumdtmfmap","msexchpoliciesincluded","protocolsettings","sshpublickey","mailnickname","msexchmailboxguid","msexchtextmessagingstate","publicdelegatesbl","msexchcomanagedo bjectsbl","msexchblockedsendershash","msexchelcmailboxflags","msexcharchivewarnquota","internetencoding","msexchumenabledflags2","msexchmailboxauditenable","msexchuseraccountcontrol","msexchdelegatelistbl","targetaddress","msexchtranspor trecipientsettingsflags","msexchmdbrulesquota","msexchremoterecipienttype","msexchaddressbookflags","msexchversion","msexchbypassaudit","dn"]
WARN LoginLdap[2014-11-28 08:53:40] UserMapper::getPiwikPasswordForLdapUser: Could not find LDAP password for user 'carrgilson@abc.de.fg', generating random one.

[diosmosis]

Ah Ok, there's currently a bug w/ user_email_suffix that causes this behaviour. It's fixed in master and there should be a new release soon, stay tuned.

(See issue: #75)

[linwenzhi1314]

hi friend, i have some questions, last night,i have been updated the piwik version to 3.0 ,but,when i was log in the error: "Wrong Username and password combination",but my usename (superadmin) and password is correct,could you help me?