…could anybody help me please with using multiple authentifications providers? I need authenticate users first from local user database (App\Entity\User) and then from LDAP. When the user is not found in local database, then check from LDAP.
I have this security.yml
`security…
Thank you for your response. It was definitely helpful to see the approach to configure and debug LDAP. Keep up the amazing work you're doing and I look forward to the next tutorial.
Hello,
Thank you for another excellent tutorial! One thing that I was looking for in a security tutorial that was not covered was how to use LDAP/Active Directory for authentication. I have read through the documentation, but as a new Symfony user, it seems…
…Ha! Yes, nice job all around - including debugging :). Your setup makes sense to me - including the part of inserting a User if it's found in LDAP but not (yet) in your local database. That is the proper way to do it (not registration).
Cheers!
…in LDAP facilities so I could trap the invalid credentials myself and return false.
Another thing I did was have the UserBadge callback code create a new symfony user in the database if one didn't exist but the username DOES exist in LDAP so…
…it's a bit too specific, and nobody can follow along with it unless they have a handy LDAP server :/. But I know from experience that it can be confusing! There is a built-in LDAP authentication mechanism in Symfony, and one of the cool…
…sure I'm doing something wrong now.
I will say that I changed the user ID field from email to username since this is ldap and I'm grabbing the username from login to create a new user record. I did a search/replace for…
…front end and back-end are all on the same box and the domain is contiguous throughout. The LDAP isn't of course, but I wouldn't think that would be an issue.
Going to create a local version and test with the symfony web…
…read property 'substr' of undefined" error? I have now successfully got LDAP backend auth working with a custom authenticator using the course code and the only other modifications being to the structure of the User entity. On login the ajax doesn't update to show…
Hey @Aaron Kincer!
You got it! If you're using the built-in LDAP support in Symfony... at least in the current version, I'm not sure there's an easy way to "hook in" and replace with your own User... which is unfortunate, because…
…but I'm trying to adapt this login to using LDAP as the back-end and I think I have everything working but I'm getting this error:
`No resource class found for object of type "Symfony\Component\Ldap\Security\LdapUser".`
This is the code…
…
> So far, submitting the 'employee' login form doesn't submit any form data to anywhere that I can tell.
I would probably create a custom authenticator for the Ldap authentication. Here's the idea:
* /login is your normal login form. It submits to /login…
… So far, submitting the 'employee' login form doesn't submit any form data to anywhere that I can tell. Tried using http_basic_ldap and there seemed to be session conflicts between the two types of users, not exactly sure? Am I going about this…
…But the function ldap_bind in LdapBindAuthenticationProvider.php is somehow different?
in play.php:
`ldap_bind($ds, $dn, $password) `
in LdapBindAuthenticationProvider.php:
`ldap_bind($dn, $password)`
As you can guess, the connection works, the ldap bind works in play.php, but ldap_bind does not…
…
arguments: {▶}
}
}
}
`
And this is the dump of the ldap parameter in the same class.
`Symfony\Component\Ldap\Ldap {#174 ▼
-adapter: Symfony\Component\Ldap\Adapter\ExtLdap\Adapter {#175 ▼
-config: array:3 [▼
"host" => "xxxl"
"port" => 389
"options" => array:1 [▼…
…a ConnectionException. I would add `dd($e)` right before the exception is thrown so that you can actually *see* the error. It may be that there are multiple possible reasons for this error (maybe the LDAP server can't even be reached!) and that, for…
…may not be anything, but I'm trying to be sure. Also, completely remove the LDAP stuff from Apache. Does the HTTP basic popup still happen? Im trying to determine if the HTTP basic popup is coming from Apache or Symfony.
Finally, you may need…
…best.
The die('executed') is being reached. On Apache I don't have to do any configuration at all? Only make sure the ldap modules are installed?
All the ldap configuration needs to be done in Symfonies service.yaml and security.yaml?
Many many thanks !…
…account information in LDAP
2. third party users who can register and account information stored in database
What we want to achieve is following:
1. User try to login with their username and password
2. The system will first connect to LDAP server to check…
…perfect* use-case for Guard authentication :). Ok, about your question. For LDAP, you probably *already* sent the credentials to LDAP inside getUser() in order to authenticate and get the user information, correct? If that's true, then you've effectively already checked the user's…
x
85