I have it working now. I downgraded the webui code from 1.38 to 1.37 and it magically started working.
Cameron Robitaille Network Administrator Waypoint Centre for Mental Health Care Advancing Understanding. Improving Lives. 500 Church Street Penetanguishene ON L9M 1G3 (705) 549-3181 ext. 2834 crobitai...@waypointcentre.ca This electronic transmission and accompanying attachments may contain privileged or confidential information intended only for the use of the individual or organization named above. Any distribution, copy or action taken in reliance of the contents of this communication by anyone other than the intended recipient(s) is Strictly Prohibited. If you have received this communication in error, please notify the sender at the above email address and delete this email. -----Original Message----- From: s...@acts.hu <s...@acts.hu> Sent: April 17, 2020 12:45 PM To: Piler User <piler-user@list.acts.hu> Subject: Re: SSO Issues CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. If you are unsure, please delete the message. Hello, look at the mail log file. Piler syslogs all events. For starters, check config-site.php, and verify that you have enabled ldap authentication. Then check the ldap server, port, ldap helper user account settings. Also check if there's any traffic from the archive to the ldap server. Janos On 2020-04-17 18:10, Robitaille, Cameron wrote: > Hi: > > So I reinstalled everything according to documentation and again, I > can login as admin@local with no issue but I can't get any LDAP users > logged in even though the logs say they are authenticated. Is there > any other logging I should be checking or turning on? > > Thanks, > > Cameron Robitaille > Network Administrator > Waypoint Centre for Mental Health Care Advancing Understanding. > Improving Lives. > > 500 Church Street > Penetanguishene ON L9M 1G3 > (705) 549-3181 ext. 2834 > crobitai...@waypointcentre.ca > > This electronic transmission and accompanying attachments may contain > privileged or confidential information intended only for the use of > the individual or organization named above. Any distribution, copy or > action taken in reliance of the contents of this communication by > anyone other than the intended recipient(s) is Strictly Prohibited. > If you have received this communication in error, please notify the > sender at the above email address and delete this email. > > > -----Original Message----- > From: s...@acts.hu <s...@acts.hu> > Sent: April 16, 2020 4:40 PM > To: Piler User <piler-user@list.acts.hu> > Cc: Robitaille, Cameron <crobitai...@waypointcentre.ca> > Subject: Re: SSO Issues > > CAUTION: This email originated from outside of the organization. Do > not click links or open attachments unless you recognize the sender > and know the content is safe. If you are unsure, please delete the > message. > > Hello Cameron, > > based on the ntlm logs the authentication is successful, and apache > also says granted. Please check out the mail log as well as apache's > error log for additional clues. > > Also check if you can login by using ldap authentication, ie. not > using sso.php but rather the usual login.php. > > Janos > > > On 2020-04-16 21:49, Robitaille, Cameron wrote: >> >> I am hoping there is an easy answer to this as I am about to pull my >> hair out. I am installing to a new server in the hopes of migrating >> from an existing install. >> >> I have everything installed and I can log in as the admin@local user. >> I configured the LDAP auth with the SSO configuration and I can run >> and get good results from manually running ntlm_auth with a valid >> user. I copied the working config from the other server into my >> config-site.php. When I try to SSO it just spins although the log >> says: >> >> [Thu Apr 16 15:40:47.512194 2020] [:debug] [pid 4441] >> mod_auth_ntlm_winbind.c(1041): [client 10.10.95.2:31200] doing ntlm >> auth dance [Thu Apr 16 15:40:47.512209 2020] [:debug] [pid 4441] >> mod_auth_ntlm_winbind.c(484): [client 10.10.95.2:31200] Using >> existing auth helper 4591 [Thu Apr 16 15:40:47.512238 2020] [:debug] >> [pid 4441] >> mod_auth_ntlm_winbind.c(703): [client 10.10.95.2:31200] parsing reply >> from helper to KK >> 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\n >> [Thu Apr 16 15:40:47.519444 2020] [:debug] [pid 4441] >> mod_auth_ntlm_winbind.c(741): [client 10.10.95.2:31200] got response: >> AF MHCP.ON.CA\\user >> [Thu Apr 16 15:40:47.519499 2020] [:debug] [pid 4441] >> mod_auth_ntlm_winbind.c(787): [client 10.10.95.2:31200] authenticated >> MHCP.ON.CA\\user [Thu Apr 16 15:40:47.519522 2020] [authz_core:debug] >> [pid 4441] >> mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: >> authorization result of Require valid-user : granted [Thu Apr 16 >> 15:40:47.519535 2020] [authz_core:debug] [pid 4441] >> mod_authz_core.c(809): [client 10.10.95.2:31200] AH01626: >> authorization result of <RequireAny>: granted >> >> I would read this that it was successful but the page just spins and >> nothing ever happens, the search never comes up. >> >> I am using version 1.38. Thanks, >> >> Cameron Robitaille >> Network Administrator >> Waypoint Centre for Mental Health Care Advancing Understanding. >> Improving Lives. >> >> 500 Church Street >> Penetanguishene ON L9M 1G3 >> (705) 549-3181 ext. 2834 >> crobitai...@waypointcentre.ca >> >> This electronic transmission and accompanying attachments may contain >> privileged or confidential information intended only for the use of >> the individual or organization named above. Any distribution, copy >> or action taken in reliance of the contents of this communication by >> anyone other than the intended recipient(s) is Strictly Prohibited. >> If you have received this communication in error, please notify the >> sender at the above email address and delete this email.
