https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43497
Bug ID: 43497
Summary: LDAP auth by bind failing to fetch all LDAP attributes
Initiative type: ---
Sponsorship ---
status:
Product: Koha
Version: 26.05
Hardware: All
OS: Linux
Status: NEW
Severity: normal
Priority: P5 - low
Component: Authentication
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected]
Target Milestone: ---
The LDAP binds and successfully logs in pulling the cn, uid, and uidNumber
fields, however, it is not able to access the mail field which is only
accessible to the authenticated user. Looking at the flow of the authentication
code, the LDAP server is bound to using the provided principal name and
password, before searching for the uid using that binding, so it should be able
to find the mail field, but it seems to be able to access everything but. I
also tested with a perl script using the same Net::LDAP interface which was
able to get all attributes without issue, and ldapsearch command line tool
confirmed the same.
LDAP section of koha-conf.xml:
<ldapserver id="ldapserver">
<hostname>ldaps://pool.ldap.my.domain</hostname>
<base>dc=my,dc=domain</base>
<auth_by_bind>1</auth_by_bind>
<replicate>1</replicate>
<welcome>0</welcome>
<update>1</update>
<principal_name>uid=%s,ou=Accounts,ou=People,dc=my,dc=domain</principal_name>
<mapping>
<!-- match koha SQL field names to your LDAP record field names -->
<surname is="cn"/>
<userid is="uid"/>
<email is="mail"/>
<cardnumber is="uidNumber"/>
<categorycode is="1">M</categorycode>
<branchcode is="1">LIB</branchcode>
</mapping>
</ldapserver>
--
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list -- [email protected]
To unsubscribe send an email to [email protected]
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/
