One||Zero queries

[Gatt]

Started setting this up but i'm stuck at 2 points

 

1) How do you configure it to send E-Mail via exchange? The 3 options are PHP Config, sendmail or OFF = which one do i need?

 

2) AD integration - Tried configuring this but just keep getting a fatal error about LDAP_Connect();

 

Using WinXP, Apache 2.0.58, PHP 5, MySQL5

[Geoff]

1) Use PHP Config. Set the email settings in the php.ini. Find the section called [mail function]. Should be fairly obvious.

 

2) what are your settings currently?

[Gatt]

1) Exellent its working now cheers

 

2) LDAP settings I have are :

auth_method = "AD"
ldap_host = "civ****35"
ldap_domain = "salford.gov.uk"
ldap_binddn = "CN=******,OU=Users&Groups,OU=Mors Moorside,OU=Secondary,OU=Schools,OU=Education Arts and Leisure Services,OU=Accounts,DC=salford,DC=org,DC=uk"
ldap_bindpwd = "*******"
ldap_rootdn = "OU=MORS Moorside,OU=Secondary,OU=Schools,OU=Education Arts and Leisure Services,OU=Accounts,DC=salford,DC=gov,DC=uk"
ldap_searchattr = "samaccountname"
ldap_fname = "givenname"
ldap_lname = "sn"
ldap_uname = "samaccountname"
ldap_email_add = "mail"
ldap_office = "physicaldeliveryofficename"
ldap_phone = "telephonenumber"
ldap_context = "samaccountname"

I've removed the servername, username & password (obviously)

The error i get is :

Fatal error: Call to undefined function ldap_connect() in C:\Program Files\Apache Group\Apache2\htdocs\helpdesk\common\common.php on line 171

[DMcCoy]

is the ldap module enabled in php?

[Gatt]

Yep - got past that message now getting

 

Cannot bind to the LDAP server! ... Check the 'LDAP Hostname or IP', 'LDAP Bind user and Context', or 'LDAP Password' in the Moorside High School Help Desk System Server Settings!




Warning: Cannot modify header information - headers already sent by (output started at C:\Program Files\Apache Group\Apache2\htdocs\helpdesk\common\style.php:41) in C:\Program Files\Apache Group\Apache2\htdocs\helpdesk\common\login.php on line 162

 

when i remove the user info bit for the binddn & pindpwd i get:

Warning: ldap_search() [function.ldap-search]: Search: Operations error in C:\Program Files\Apache Group\Apache2\htdocs\helpdesk\common\common.php on line 196

Warning: ldap_get_entries(): supplied argument is not a valid ldap result resource in C:\Program Files\Apache Group\Apache2\htdocs\helpdesk\common\common.php on line 207
Error 

LDAP server did not return any users for the specified Username! ... Check the 'LDAP User Search Attribute' in the Moorside High School Help Desk System Server Settings!




Warning: Cannot modify header information - headers already sent by (output started at C:\Program Files\Apache Group\Apache2\htdocs\helpdesk\common\common.php:196) in C:\Program Files\Apache Group\Apache2\htdocs\helpdesk\common\login.php on line 162

[DMcCoy]

Here is the config I used, I stopped using ldap when I was unable to get secure ldap working as I wasn't too thrilled about passing passwords around in plain text!

 

 

ldap_host = "zeus.sitename.school"
ldap_domain = "sitename.school"
ldap_binddn = "cn=ldap user,ou=Special,dc=sitename,dc=school"
ldap_bindpwd = "ldapuserpasswordhere"
ldap_rootdn = "OU=subou,dc=sitename,dc=school"
ldap_searchattr = "sAMAccountName"
ldap_fname = "givenname"
ldap_lname = "sn"
ldap_uname = "samaccountname"
ldap_email_add = "mail"
ldap_office = "physicaldeliveryofficename"
ldap_phone = "telephonenumber"
ldap_context = "dn"

 

 

edit - swapped an ou and sitename by accident

[Gatt]

Still no joy

 

auth_method = "AD"
ldap_host = "******.salford.gov.uk"
ldap_domain = "salford.gov.uk"
ldap_binddn = "CN=Wilson, Craig,OU=MORS Moorside,OU=Secondary,OU=Schools,OU=Education Arts and Leisure Services,OU=Accounts,DC=salford,DC=gov,DC=uk"
ldap_bindpwd = "********"
ldap_rootdn = "OU=MORS Moorside,OU=Secondary,OU=Schools,OU=Education Arts and Leisure Services,OU=Accounts,DC=salford,DC=gov,DC=uk"
ldap_searchattr = "sAMAccountName"
ldap_fname = "givenname"
ldap_lname = "sn"
ldap_uname = "sAMAccountName"
ldap_email_add = "mail"
ldap_office = "physicaldeliveryofficename"
ldap_phone = "telephonenumber"
ldap_context = "dn"

 

with error

 

Cannot bind to the LDAP server! ... Check the 'LDAP Hostname or IP', 'LDAP Bind user and Context', or 'LDAP Password' in the Moorside High School Help Desk System Server Settings!

 

 

 

 

Warning: Cannot modify header information - headers already sent by (output started at C:\Program Files\Apache Group\Apache2\htdocs\helpdesk\common\style.php:41) in C:\Program Files\Apache Group\Apache2\htdocs\helpdesk\common\login.php on line 162

[Geoff]

Disclaimer: its a LAMP server rather than Windows/IIS.

 

ldap_host = "apollo.carrhill.lancs.sch.uk"
ldap_binddn = "CN=ldapuser,CN=users,DC=carrhill,DC=lancs,DC=sch,DC=uk"
ldap_bindpwd = "ldappassword"
ldap_rootdn = "DC=carrhill,DC=lancs,DC=sch,DC=uk"
ldap_searchattr = "sAMAccountName"
ldap_fname = "givenName"
ldap_lname = "sn"
ldap_uname = "sAMAccountName"
ldap_email_add = "mail"
ldap_office = "department"
ldap_phone = "telephoneNumber"
ldap_context = "distinguishedName"

 

1. Simplfy your root dn. You don't need to get that specific.

2. Set up a new unpriverledged user for ldap queries.

[CyberNerd]

Disclaimer: its a LAMP server rather than Windows/IIS.

 

Surely the LDAP relies on OpenLDAP? will this even work on windows?

[Gatt]

Ok getting there i think - now just getting this error:

 

Warning: Cannot modify header information - headers already sent by (output started at C:\Program Files\Apache Group\Apache2\htdocs\helpdesk\common\style.php:41) in C:\Program Files\Apache Group\Apache2\htdocs\helpdesk\common\login.php on line 162

[Geoff]

No. It talks directly to the LDAP running on the AD DC. One||Zero is multiplatform.

[Geoff]

Ok getting there i think - now just getting this error:

 

Warning: Cannot modify header information - headers already sent by (output started at C:\Program Files\Apache Group\Apache2\htdocs\helpdesk\common\style.php:41) in C:\Program Files\Apache Group\Apache2\htdocs\helpdesk\common\login.php on line 162

 

You have some spurious blank lines at the end of your configuration files.

[CyberNerd]

No. It talks directly to the LDAP running on the AD DC. One||Zero is multiplatform.

 

ok, so has 'inbuilt' ldap support - cool

[Geoff]

PHP has inbuilt LDAP support itself. Assuming you enable the module in php.ini.

 

http://uk.php.net/ldap

[Geoff]

You might find this thread helpful too.

 

http://oneorzero.com/smforum/index.php?topic=3799.0

[Gatt]

got past it - turned on Output buffering in PHP.INI

 

now when i enter my username & password it keeps telling me its incorrect

Yet this is the right info cos i log onto the domain with it!

[DMcCoy]

Try Softerra ldap browser to help you find the exact ldap details to login to the server with, I found that ldap appeared to be case sensitive for Names, ou's etc. Thats how I fould the right details - took ages as it all seemed to be ok.

[Gatt]

Ok I can log in now

 

but...

 

when others try they get this error:

 

Invalid query: Column count doesn't match value count at row 1

[Gatt]

D'Oh - didnt realise they would still need to register

It's working now though

 

Thanks guys