Hi, I am developing a site that relies on the LDAP Integration module and HTTP authentication to an LDAP server to provide access for our private Drupal site. I am very interested in using the Secure Site module to unify the sign on process, but have hit a snag. The two modules work well if the user exists on the site, either because they are native to Drupal or have previously logged in with LDAP Integration. If the user has never logged in, the Secure Site sign in fails, listing the user as Anonymous in the logs.

It does not seem the Secure Sign in is talking to the LDAP server via LDAP Integration. I'm using LDAP Int. 6.x-1.0-beta1. Is there some special step that is required to make Secure Site and LDAP Int. talk to each other or is this a bug? Thank you for your help.

CommentFileSizeAuthor
#14 securesite6.x-2.4-ldapfix.patch1.08 KBstacysimpson
#8 securesite-6.x-2.4-ldap-6.x-1.0-beta1.diff2.81 KBptaff
#4 securesite_ldapfix.diff3.94 KBstacysimpson

Comments

stacysimpson’s picture

stacysimpson commented

We were able to get the SecureSite and LDAP modules to work together; however, in our setup, automatically creating accounts for new LDAP-based users takes several log-in attempts.

#1-3 Usually, after three failed authentication attempts, SecureSite will stop prompting for HTTP_Auth
#4 LDAP Auth then presents a form-based authentication prompt; looks like this one will handle the auto account creation correctly
#5 Then, SecureSite takes back over and prompts one more time

Very ugly indeed. Yes, we are actually looking for a resolution as well. If anyone has any pointers, we are open.

stacysimpson’s picture

stacysimpson commented
Component: Documentation » Code
Category: support » bug
stacysimpson’s picture

stacysimpson commented
Title: Details on LDAP Setup » Secure Site / LDAP Auth module integration issues
stacysimpson’s picture

stacysimpson commented
Status: Active » Needs review
StatusFileSize
new securesite_ldapfix.diff3.94 KB

Here is a patch that resolves the integration of the SecureSite (6.x-2.3) and LDAP_Integration (6.x-1.0-alpha2) modules. I just noticed a new version of the LDAP module, but haven't downloaded it yet.

stacysimpson’s picture

stacysimpson commented

Opened an issue against the LDAP Integration module as well: http://drupal.org/node/553482

ptaff’s picture

ptaff commented

Applied the patch, the user is created (thanks stacysimpson), but unfortunately it seems the LDAP Group is not translated to its drupal role.

Takaratiki’s picture

Takaratiki commented

Thanks for the work! I was away and hadn't checked on the progress of this issue. I will roll the patch on my test site this week and report back.

ptaff’s picture

ptaff commented
StatusFileSize
new securesite-6.x-2.4-ldap-6.x-1.0-beta1.diff2.81 KB

stacysimpson's patch (comment #5) won't apply cleanly to ldap_integration-6.x-1.0-beta1; I reshuffled the patch for that version.

crabcakes’s picture

crabcakes commented

Confirmed role mapping is working also. Thanks for the great patch!

Takaratiki’s picture

Takaratiki commented

My apologies for the delay. Tested the .diff patch and it worked nicely, new account accessed and brought in with correct permissions. Thank you for the work, I'll be dragging it into my site development after our testing is complete.

larskleiner’s picture

larskleiner commented

Thanks for the patch, it works great. It would be good to get it committed to both securesite and ldap_integration.

crabcakes’s picture

crabcakes commented

Patch worked great, however now there is ldap_integration 6.x-1.0-beta2 out which has some security fixes. Anyone willing to submit a patch for this new version? I would if I knew how..

crabcakes’s picture

crabcakes commented

2 months? Anyone? I would help if I knew how!

stacysimpson’s picture

stacysimpson commented
Version: 6.x-2.3 » 6.x-2.4
StatusFileSize
new securesite6.x-2.4-ldapfix.patch1.08 KB

We upgraded over the holidays, so I've uploaded the latest patches. The securesite one is attached to this thread and the LDAP one here: http://drupal.org/node/553482. Please review and update the status.

Stewx’s picture

Stewx commented

Thanks stacysimpson! Works perfectly.

stacysimpson’s picture

stacysimpson commented
Status: Needs review » Reviewed & tested by the community
youlikeicecream’s picture

youlikeicecream commented

Stacy, I applied the patches and the authentication works (I am using the HTML forms) , the problem is that the groups are not being mapped when an LDAP user logs in for the first time (or any subsequent log in).

If I log into my site using the form on '/user' the LDAP user is given their groups. Can you suggest where I should look to get this working.

Thanks,
Mike :)

johnbarclay’s picture

johnbarclay commented

I pushed this to head on ldap_integration 6.x-1.x.

darren oh’s picture

darren oh
Primary language English
Location Lakeland, Florida
commented
Status: Reviewed & tested by the community » Fixed

Fixed in commit e37049d. Thanks to Stewx for reviewing this patch.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

  • Commit e37049d on 6.x-2.x, 7.x-2.x, 8.x-1.x by Darren Oh: 
    Issue #551738 by stacysimpson: Fixed LDAP Auth integration.