Zend Framework

Auto-bind

Details

  • Type: Improvement Improvement
  • Status: Resolved Resolved
  • Priority: Minor Minor
  • Resolution: Fixed
  • Affects Version/s: 1.9.5
  • Fix Version/s: 1.9.6
  • Component/s: Zend_Auth_Adapter_Ldap
  • Labels:
    None

Description

After authenticated on Active Directory using Zend_Auth_Adapter_Ldap as my adapter, i can call getLdap(), returning the Zend_Ldap object used to authenticated.

The problem is when I do searches: everytime it's necessary to bind. I don't if this is default or not, but it's so boring.

Wouldn't be nice if there was a "auto-bind" function inside search function? Afterall, The options are already set there, including username and password posted by user.

Please, thanks and sorry in advance if I said something wrong. Im new here and a eternal apprentice. :}

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Stefan Gehrig added a comment -

Should rather be an Zend_Auth_Adapter_Ldap issue.

Show
Stefan Gehrig added a comment - Should rather be an Zend_Auth_Adapter_Ldap issue.
Hide
Permalink
Stefan Gehrig added a comment -

Are you using the membership-feature (using the group-setting not being null)?
If so the auth-adapter must rebind with the user given in the adapter options to prevent access restriction problems.

Show
Stefan Gehrig added a comment - Are you using the membership-feature (using the group-setting not being null)? If so the auth-adapter must rebind with the user given in the adapter options to prevent access restriction problems.
Hide
Permalink
Rodrigo Novelo Primolan added a comment -

Would be these options?

Zend_Auth_Adapter_Ldap (line 380)

        $adapterOptions = array(
            'group'       => null,
            'groupDn'     => $ldap->getBaseDn(),
            'groupScope'  => Zend_Ldap::SEARCH_SCOPE_SUB,
            'groupAttr'   => 'cn',
            'groupFilter' => 'objectClass=groupOfUniqueNames',
            'memberAttr'  => 'uniqueMember',
            'memberIsDn'  => true
        );

I didn't know about those options. So I guess group may still 

null
.

My login is working perfectly, as my searches. The only "problem" is that before every search I must bind again.

Show
Rodrigo Novelo Primolan added a comment - Would be these options? 
Zend_Auth_Adapter_Ldap (line 380)

        $adapterOptions = array(
            'group'       => null,
            'groupDn'     => $ldap->getBaseDn(),
            'groupScope'  => Zend_Ldap::SEARCH_SCOPE_SUB,
            'groupAttr'   => 'cn',
            'groupFilter' => 'objectClass=groupOfUniqueNames',
            'memberAttr'  => 'uniqueMember',
            'memberIsDn'  => true
        );
I didn't know about those options. So I guess group may still 
null
. My login is working perfectly, as my searches. The only "problem" is that before every search I must bind again.
Hide
Permalink
Stefan Gehrig added a comment -

The options should be fine. Could you please provide some sample code of what you're doing so that I can build a test-case to replicate your issue?

Show
Stefan Gehrig added a comment - The options should be fine. Could you please provide some sample code of what you're doing so that I can build a test-case to replicate your issue?
Hide
Permalink
Stefan Gehrig added a comment -

The options should be fine. Could you please provide some sample code of what you're doing so that I can build a test-case to replicate your issue?

Show
Stefan Gehrig added a comment - The options should be fine. Could you please provide some sample code of what you're doing so that I can build a test-case to replicate your issue?
Hide
Permalink
Rodrigo Novelo Primolan added a comment -

Options

ldap.default.host = "primolan.primolan.com.br"
ldap.default.accountDomainName = "primolan.com.br"
ldap.default.accountDomainNameShort = "primolan"
ldap.default.accountCanonicalForm = 3
ldap.default.baseDn = "DC=primolan, DC=primolan, DC=com, DC=br"

Login

$auth = Zend_Auth::getInstance()->setStorage(new Zend_Auth_Storage_Session($this->getRequest()->getModuleName()));
$adapter = new Zend_Auth_Adapter_Ldap($options, $params['username'], $params['password']);
$result = $auth->authenticate($adapter);
$ldap = $adapter->getLdap();

Search

$ldap->bind($username, $password);
$result = $ldap->searchEntries($filters, $ldap->getBaseDn(), Zend_Ldap::SEARCH_SCOPE_SUB);

Without that $ldap->bind(), searchEntries doesn't work.

Show
Rodrigo Novelo Primolan added a comment - Options 
ldap.default.host = "primolan.primolan.com.br"
ldap.default.accountDomainName = "primolan.com.br"
ldap.default.accountDomainNameShort = "primolan"
ldap.default.accountCanonicalForm = 3
ldap.default.baseDn = "DC=primolan, DC=primolan, DC=com, DC=br"
Login 
$auth = Zend_Auth::getInstance()->setStorage(new Zend_Auth_Storage_Session($this->getRequest()->getModuleName()));
$adapter = new Zend_Auth_Adapter_Ldap($options, $params['username'], $params['password']);
$result = $auth->authenticate($adapter);
$ldap = $adapter->getLdap();
Search 
$ldap->bind($username, $password);
$result = $ldap->searchEntries($filters, $ldap->getBaseDn(), Zend_Ldap::SEARCH_SCOPE_SUB);
Without that $ldap->bind(), searchEntries doesn't work.
Hide
Permalink
Stefan Gehrig added a comment -

OK - thanks for your efforts.

Currently I can't think of a reason why this would not work - but let me check this. I'll have a look into this tomorrow.

Show
Stefan Gehrig added a comment - OK - thanks for your efforts. Currently I can't think of a reason why this would not work - but let me check this. I'll have a look into this tomorrow.
Hide
Permalink
Rodrigo Novelo Primolan added a comment -

Thanks for your patience and attention. See you tomorrow. Have a good night!

Show
Rodrigo Novelo Primolan added a comment - Thanks for your patience and attention. See you tomorrow. Have a good night!
Hide
Permalink
Stefan Gehrig added a comment -

Should be fixed in trunk (r18878) and 1.9-release branch (r18882)

Show
Stefan Gehrig added a comment - Should be fixed in trunk (r18878) and 1.9-release branch (r18882)

People

Vote (0)
Watch (1)

Dates

  • Created:
    Updated:
    Resolved:
Atlassian JIRA (v4.4.3#663-r165197) | Report a problem
Powered by a free Atlassian JIRA open source license for Zend Framework. Try JIRA - bug tracking software for your team.