9.2 - LDAP stopped working

[mattianuk]

Just upgraded to 9.2 - now no one can logon, an error did come up saying LDAP wasnt working, I can still load the logon screen, and the setup page - but cant login.

 

Any ideas? Only error message I can now get it to do is incorrect logon details, and then it blocks me for bloomin half an hour.

[nickbro]

Try restarting the server, also check, v9.3 is out as well

[mattianuk]

Restarting now, must have been 9.3 that I installed, it was the latest download from codeplex.

 

It must be the connection to the ldap server, ebcause when I went into setup, and double checked the admin logon for the domain, it tried to reconnect and couldnt.

 

 

 

Thanks

[Paul-K]

@mattianuk

 

Did the restart of the server resolve your login issues as I had the same issue when upgrading to 9.3 but didn't test it any further, I just put it straight back to 9.2 due to work being so busy at the end of term. Will try upgrading again if the restart fixes the issue.

[nickbro]

Ok, bug found in HAP.AD, fixed, v9.3 re-released: https://hap.codeplex.com/releases/view/109831

[mattianuk]

Hasn't fixed it (restart or update) - do I need to do another restart?

[nickbro]

Have you configured AD to allow encrypted data: How to enable LDAP signing in Windows Server 2008

[nickbro]

You can try the HAP.AD dll from the v9.2 release if needed

[mattianuk]

Have you configured AD to allow encrypted data: How to enable LDAP signing in Windows Server 2008

 

No, I take it I need to?

[nickbro]

You can use the v9.2 HAP.AD dll if needed. LDAP signing can help secure your AD. But it's optional.

[mattianuk]

The Hap 9.2 DLL has allowed it to work again

[Paul-K]

@nickbro

 

I have enabled LDAP signing on my default domain controllers policy so both DCs require encrypted data but HAP+ still doesn't allow anyone to log in using version 9.3. I put the 9.2 HAP.AD.dll file in place and removed LDAP Signing and was able to log into HAP+ but when I go to config and type my admin password it tells me there was a problem connecting to the AD structure. I have currently turned off LDAP signing and have gone back to v9.2 and all these issues go away. I do love the idea of AD being more secure though, any ideas?

 

Also is HAP+ supposed to remember my AD credentials or should I have to type them in every time I go to the config screen?

[nickbro]

I will have to look into this issue.

 

HAP+ isn't meant to display the admin password on the config screen (security)

[Paul-K]

@nickbro

 

Hi Nick,

 

I realize it's been a while since this one but after upgrading to HAP+ 9.4, I decided to try the secure LDAP queries again, I have enabled LDAP signing on my two DCs again and HAP+ is working and allowing me to login which it didn't allow before when I upgraded to 9.2. I noticed on the codplex site you mentioned a couple of fixes and the option to disable secure LDAP queries. Do I need to enable this in HAP+ or is it already enabled and now fixed?

 

Many thanks

[Paul-K]

Sorry Nick,

 

Just looked in the hapconfig.xml file and noticed secureldap on the end saying "false", I've now changed that to "true" and HAP+ is still working and logging in correctly so I presume that secure LDAP is now working. Should have checked there first, apologies.