Adam,

Since PLA only asks for authentication creditials once (from a user), it
needs to be able to "cache/store" them for subsequent queries (or know
where to get them). setLogin() will store the details, so when they are
needed again getLogin() will return them. When auth_type is 'cookie',
these details are stored in a cookie, when 'session', its stored in a
session, etc...

Normally getLogin() and getPassword() will return the stored DN and
password, so that PLA can "re-authenticate" to the LDAP server for
subsequent queries (on a subsequent get/post request). (Even when users
login with an attribute value (eg: email), PLA will query the LDAP
server first to get the DN, and remember that DN, if the password is valid).

Now, you should be able to do all your logic in startSASL(), since it
should be called again for a get/post. You should also make sure that
the logic in connect() gets to the startSASL() call to enable the
ldap_connect() to occur (and the subsequent ldap_sasl_bind()). You might
be failing at the test of $bind['id'] (in connect() line 146) - ie: its
NULL - try making it '' to get you through that part.

If you can give me some pointers on how to setup a SASL environment for
a RHEL/CentOS environment (and its quick for me to do), i'll be able to
have a look at the work you've done.

...deon


On 18/06/11 02:41, Adam Allred wrote:
> But, any subsequent action that requires another LDAP query causes an
> infinite redirect, and the debug output indicates that the
> successfully bound connection is not located in the cache, and it
> tries to build a new connection with an invalid DN of 'user'.
>
> It seems like the application has a dependence on a bind_dn existing,
> and if it doesn't then it starts to behave erratically. I've dug
> through the code trying to find and correct any areas where a bind_dn
> being null leads to undesired behaviour, and have found a few cases in
> the connect function in ds_ldap.php, but the problem still persists.


------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
_______________________________________________
phpldapadmin-users mailing list
phpldapadmin-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/phpldapadmin-users

Reply via email to