View Issue Details

This bug affects 1 person(s).
 4
IDProjectCategoryView StatusLast Update
20030Bug reportsSurvey participants (Tokens)public2025-03-28 11:37
Reporterccoupeau Assigned Togabrieljenik  
PrioritynoneSeverityblock 
Status ready for code reviewResolutionopen 
Product Version6.6.x 
Summary20030: Import LDAP - Can't connect LDAP Server with ldapv3 and ldaps
Description

Hello,

Since the patch Fixed in Release 6.10.3+250203 I am still forced to modify the ldap_getCnx function like this (helpers/ldap_helper.php)

    $ds = ldap_connect("ldap://" . "{$ldap_server[$server_id]['server']}:{$ldap_server[$server_id]['port']}");

by

    $ds = ldap_connect("ldaps://" " . "{$ldap_server[$server_id]['server']}:{$ldap_server[$server_id]['port']}");

cordially

Steps To Reproduce

Steps to reproduce

(Replace this text with detailed step-by-step instructions on how to reproduce the issue)

Expected result

(Write here what you expected to happen)

Actual result

(Write here what happened instead)

TagsNo tags attached.
Bug heat4
Complete LimeSurvey version number (& build)6.12.0
I will donate to the project if issue is resolvedNo
BrowserChrome, Firefox, Opera
Database type & versionMySQL8
Server OS (if known)Rocky Linux 9
Webserver software & version (if known)Apache/2.4.62
PHP Version8.2.28

Relationships

related to 19856 closedDenisChenu Import LDAP - error 500 - ldap_set_option 

Users monitoring this issue

There are no users monitoring this issue.

Activities

DenisChenu

DenisChenu

2025-03-21 11:58

developer   ~82304

Please : your exact settings

ccoupeau

ccoupeau

2025-03-21 13:54

reporter   ~82305

This follows the bug: 19856

$serverId=0;
$ldap_server[$serverId]['server'] = "ldap.domain.fr";
$ldap_server[$serverId]['port'] = "636";
$ldap_server[$serverId]['protoversion'] = "ldapv3";
$ldap_server[$serverId]['encrypt'] = "ldap";
$ldap_server[$serverId]['referrals'] = false;
$ldap_server[$serverId]['binddn'] = "cn=user,ou=applications,dc=XXXXX,dc=fr";
$ldap_server[$serverId]['bindpw'] = "password";

DenisChenu

DenisChenu

2025-03-21 15:07

developer   ~82307

Can you test with
$ldap_server[$serverId]['encrypt'] = 'ldaps';

It's the way to do, looking at code : i think it don't work, but please : test and return the issue.

ccoupeau

ccoupeau

2025-03-21 16:04

reporter   ~82308

absolutely, after testing with ['encrypt'] = 'ldaps' it doesn't work

DenisChenu

DenisChenu

2025-03-26 12:18

developer   ~82330

@ccoupeau : can you test https://github.com/LimeSurvey/LimeSurvey/pull/4217

with $ldap_server[$serverId]['encrypt'] = 'ldaps';

What's happen; no condition met for encrypt == ldaps and protoversion == ldapv3

ccoupeau

ccoupeau

2025-03-28 11:30

reporter   ~82341

With $ldap_server[$serverId]['encrypt'] = 'ldaps'; and protoversion == ldapv3 I have this error : Erreur: Ne peut se connecter à l’annuaire LDAP

The only solution for me is :

$ds = ldap_connect("ldaps://" " . "{$ldap_server[$server_id]['server']}:{$ldap_server[$server_id]['port']}");

$ldap_server[$serverId]['server'] = "ldap.domain";
$ldap_server[$serverId]['protoversion'] = "ldapv3";
$ldap_server[$serverId]['encrypt'] = "ldap";

DenisChenu

DenisChenu

2025-03-28 11:35

developer   ~82342

But ?
Do you apply the patch ?

See https://github.com/LimeSurvey/LimeSurvey/pull/4217/files#diff-8eb167bd60eeb3f630dbf81a56c1fb816bfe1fd7ad0b26b4b01834441ad1aeabR32

Then if you set $ldap_server[$serverId]['encrypt'] = "ldaps";
$ds = ldap_connect("ldaps://" . "{$ldap_server[$server_id]['server']}:{$ldap_server[$server_id]['port']}");
is set

Why it don't happen for you ?

DenisChenu

DenisChenu

2025-03-28 11:37

developer   ~82343

You need to apply patch manually : just replace whole function
https://github.com/LimeSurvey/LimeSurvey/blob/dd03213a24b51747ba553817bcfc263c415d2a54/application/helpers/ldap_helper.php#L26

With $ldap_server[$serverId]['encrypt'] = "ldap";

There are no reason this part don't happen
https://github.com/LimeSurvey/LimeSurvey/blob/dd03213a24b51747ba553817bcfc263c415d2a54/application/helpers/ldap_helper.php#L33

Issue History

Date Modified Username Field Change
2025-03-21 11:42 ccoupeau New Issue
2025-03-21 11:57 DenisChenu Assigned To => DenisChenu
2025-03-21 11:57 DenisChenu Status new => assigned
2025-03-21 11:58 DenisChenu Note Added: 82304
2025-03-21 11:58 DenisChenu Bug heat 0 => 2
2025-03-21 13:54 ccoupeau Note Added: 82305
2025-03-21 13:54 ccoupeau Bug heat 2 => 4
2025-03-21 15:07 DenisChenu Note Added: 82307
2025-03-21 16:04 ccoupeau Note Added: 82308
2025-03-26 09:56 DenisChenu Relationship added related to 19856
2025-03-26 12:14 DenisChenu Summary Import LDAP - Can't connect LDAP Server => Import LDAP - Can't connect LDAP Server with ldapv3 and ldaps
2025-03-26 12:18 DenisChenu Note Added: 82330
2025-03-27 19:58 DenisChenu Assigned To DenisChenu => gabrieljenik
2025-03-27 19:58 DenisChenu Status assigned => ready for code review
2025-03-28 11:30 ccoupeau Note Added: 82341
2025-03-28 11:35 DenisChenu Note Added: 82342
2025-03-28 11:37 DenisChenu Note Added: 82343