Hi,

I set up and configured an openLDAP server on CentOS 5 and I'm running mojoportal-2-2-8-1-pgsqlreleasefiles-for-mono. If I try to use LDAP authentication I cannot log in to mojoPortal: Invalid Credentials exception. I can see that everything is rightly configured, because ldap.log says

conn=12 op=0 SRCH base="cn=users,dc=my-domain,dc=com" scope=2 deref=0 filter="(uid=admin)"
...
conn=12 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=

So, mojoPortal can find user admin in ldap server, but when trying to authenticate:

=> access_allowed: auth access to "cn=LB,cn=users,dc=my-domain,dc=com" "userPassword" requested
=> access_allowed: backend default auth access granted to "(anonymous)"
conn=13 op=0 RESULT tag=97 err=49 text=

and 49 is LDAP_INVALID_CREDENTIALS, so Data/currentlog.config says

ERROR mojoPortal.Business.LdapHelper - login failure
LdapException: (49) Invalid Credentials
LdapException: Matched DN:

I am sure of giving the right password in mojoPortal login form. Maybe something wrong on how mojoPortal is passing password to openLDAP server?

Thanks,

LB

I sniffed comunication between mojoPortal and openLDAP server during authentication request, and saw different hashed passwords. The one requested from openLDAP is MD5 hashed (it can even be hashed through sha, blowfish and others), but I can't recognize how is hashed the one provided by mojoPortal (both with "encrypted in db" and "hashed in db"), so the same textual password does not match due to different hashes. Which hash algorithm does mojoPortal use?

Furthermore, if I set a clear text password for the openLDAP user and set "clear text in db" in MojoPortal settings, login to mojoPortal using openLDAP authentication succeeds.

Regards,

LB

Thanks,

I have another question :

what should happen checking "Automatically Add LDAP users on first login" ? I thought new users registering to mojoPortal would have been added to LDAP users. But if new user tries to register, mojoPortal does not connect to LDAP server (to create user) even if "Your account has been created" is returned. At first login of this new user, mojoPortal searches this user in LDAP server and does not find anything, so login fails.

So, how should new user register to mojoPortal when LDAP authentication is enabled?

Thanks,

LB

Uhm, so, when LDAP authentication is activated, new users can't automatically register to portal. I think it would be great if admin received notification when new user tries to register to mojoPortal while LDAP auth is enabled; hence admin could add new user in LDAP server too and thus allow new user to login. Isn't this possible now?

Thanks,

LB