Mailing List Archive

Hello all,

I am trying to get LDAP authentication (Open directory) going with a catalyst application.

I can connect to LDAP and run a query through NET::LDAP like so:

--------------------------------------------------------------------------------------------
my $domain = "ldap://od.someplace.edu";

my $ldap = Net::LDAP->new( $domain ) or die print "$@\n";

$mesg = $ldap->bind();

$mesg = $ldap->search( base => "cn=users,dc=someplace,dc=edu",
filter=>"(uid=auser)",
) or die print "$@\n";

---------------------------------------------------------------------------------------------

However, if I try to bind with a particular username and password

$ldap->bind("user", "password");

I get an error message: "No AUTH supplied".

I can also run a query using ldapsearch

----------------------------------------------------------------------------------------
ldapsearch -H ldap://od.someplacel.edu -x -b "cn=groupname,cn=groups,dc=someplace,dc=edu"
----------------------------------------------------------------------------------------

Here's is the MyApp.yml

-----------------------------------------------------------------------------------------

authentication:
default_realm: ldap
realms:
ldap:
credential:
class: Password
password_field: userPassword
store:
binddn: anonymous
bindpw: dontcarehow
class: LDAP
ldap_server: od.someplace.edu
ldap_server_options:
onerror: warn
timeout: 30
start_tls: 0
user_basedn: cn=users,dc=someplace,dc=edu
user_field: uid
user_filter: (&(objectClass=posixAccount)(uid=%s))
user_scope: sub
user_search_options:
deref: always
use_roles: 0
#role_basedn: cn=groups,dc=qatar-med,dc=cornell,dc=edu
#role_filter: (&(objectClass=inetOrgPerson)(memberUid=%s))
#role_scope: one
#role_field: uid
#role_value: dn
#role_search_options:
#deref: always

--------------------------------------------------------------------------------------

The password field is defined userPassword.

I have tried having the ldap_server be ldap://od.someplace.edu
Also instead binddn/bindpw being anonymous/dontcarehow I have tried setting them to a valid username/password

I would like to get roles going as well, but for right now I would like to just authenticate a single user.

My controller Login.pm looks like this:
-----------------------------------------------------------------------------------

sub index :Path :Args(0) {
my ( $self, $c ) = @_;

if ( my $user = $c->req->params->{username} and my $password = $c->req->params->{password} ){

if ( $c->authenticate( { id => $user, password => $password } ) ) {
$c->res->body( "hello " . $c->user->get("name") );
}
else{
# login incorrect
$c->stash(error => "Login is incorrect. Please try again");
$c->stash(template => 'login/login.tt2');
}
}
else {
$c->stash(error => "Invalid form input");
$c->stash(template => 'login/login.tt2');
}

$c->stash(template => 'login/login.tt2');
}

------------------------------------------------------------------------------

In the catalyst debug menu I get the correct form submission, but each time it fails the authentication step and displaying the "login is incorrect" message. There is no other output in the debugger.

I believe it is connecting. I can do something to put in a typo so I get an error stating 'Invalid credentials' or else an SSL timeout error. This doesn't get me any error messages, but its not authenticating a valid user either.

Any ideas for me?

Best,
Jillian
_______________________________________________
Catalyst-dev mailing list
Catalyst-dev@lists.scsys.co.uk
http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst-dev