Uploaded image for project: 'Observium'
  1. Observium
  2. OBS-4403

Observium Hangs at Authentication when using LDAP

Details

    • Paid Support
    • Resolution: Unresolved
    • Major
    • None
    • Professional Edition
    • Authentication
    • None

    Description

      We have Observium configured to use LDAP authentication against our Active Directory instance.  This has been working properly for over a year. 

       

      Beginning this week, the web interface hangs at authentication when LDAP is enabled.  I can revert it to local (mysql) authentication, and it works properly.  However, I can also successfully run an ldapsearch using the same parameters from config.php.  There have been no recent configuration changes on either Observium, or the LDAP server.  

       

      With debugging enabled, I get this message:  

       

      Error binding to LDAP server: ldaps.openfiberky.com: Can't contact LDAP server

       

      Can you assist with further troubleshooting?

       

       

      Attachments

        Activity

          [OBS-4403] Observium Hangs at Authentication when using LDAP
          cvanbogaert Carl Van Bogaert added a comment -

          Thanks for the response.  The suggestion about certificates was helpful; the problem was an expired certificate on the LDAP server side.  You can close this ticket.

          cvanbogaert Carl Van Bogaert added a comment - Thanks for the response.  The suggestion about certificates was helpful; the problem was an expired certificate on the LDAP server side.  You can close this ticket.
          adama Adam Armstrong added a comment -

          We aren't really able to help with the giant cacophony of voodoo that is LDAP, but if you have upgraded PHP and not upgrade Observium, that would cause this. We had to fix some PHP8.1-introduced changes last year.

          Almost nothing has changed with the LDAP code other than that. Mostly because we don't really understand how it works.

          "Can't contact LDAP server" is an error from the LDAP module. It's either old code with new php, or perhaps certificates.

          adama Adam Armstrong added a comment - We aren't really able to help with the giant cacophony of voodoo that is LDAP, but if you have upgraded PHP and not upgrade Observium, that would cause this. We had to fix some PHP8.1-introduced changes last year. Almost nothing has changed with the LDAP code other than that. Mostly because we don't really understand how it works. "Can't contact LDAP server" is an error from the LDAP module. It's either old code with new php, or perhaps certificates.

          People

            landy Mike Stupalov
            cvanbogaert Carl Van Bogaert
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: