Active Directory authentication broken

Help
1

After last night updates, our Active Directory integration has broken:

[ERROR] Typed property LibreNMS\Authentication\ActiveDirectoryAuthorizer::$ldap_connection must not be accessed before initialization {“exception”:“[object] (Error(code: 0): Typed property LibreNMS\Authentication\ActiveDirectoryAuthorizer::$ldap_connection must not be accessed before initialization at /opt/librenms/LibreNMS/Authentication/ActiveDirectoryAuthorizer.php:231)”}

Tried to run daily.sh manually with no success.

Can you please have a look ?

1 Like
2

Same error here.

3

I have the same issue

4

Yes, same for me. But the last version was out 3 weeks, no?

5

Same issue here

6

Having the exact same issue here. I have 3 instances and only one was affected.

7

If you get this error, you are not on the monthly release, but the daily.

8

Does this help?

9

It fixed the problem for us.

1 Like
10

Thank you !

11

Thanks for reporting the issue.

12

I am still facing an issue as the cn is now showing up twice within a full DN?
'(&(objectClass=group)(cn=CN=

===========================================

Component Version
LibreNMS 25.3.0-13-g921e2f142 (2025-03-19T16:24:58+01:00)
DB Schema 2025_03_11_031114_drop_ospfv3ifinstid (321)
PHP 8.3.19
Python 3.11.2
Database MariaDB 10.11.11-MariaDB
RRDTool 1.7.2
SNMP 5.9.3
===========================================

[OK] Composer Version: 2.8.6
[OK] Dependencies up-to-date.
[OK] Database connection successful
[OK] Database connection successful
[OK] Database Schema is current
[OK] SQL Server meets minimum requirements
[OK] lower_case_table_names is enabled
[OK] MySQL engine is optimal
[OK] Database and column collations are correct
[OK] Database schema correct
[OK] MySQL and PHP time match
[OK] Active pollers found
[OK] Dispatcher Service is enabled
[OK] Locks are functional
[OK] No active python wrapper pollers found
[WARN] Using database for locking, you should set CACHE_DRIVER=redis
[OK] rrdtool version ok
[OK] Connected to rrdcached

sudo -u librenms lnms config:get auth_mechanism
active_directory

adding response ld 0x56515a7476b0 msgid 5 type 101:
ldap_parse_result
ldap_msgfree
Error: LibreNMS\Exceptions\AuthenticationException thrown!
Failed to find group matching ‘CN=grp.librenms.adm,OU=librenms,OU=Applications,DC=mydomain,DC=net’ using filter ‘(&(objectClass=group)(cn=CN=grp.librenms.adm,OU=librenms,OU=Applications,DC=mydomain,DC=net))’
ldap_free_connection 1 1
ldap_send_unbind
ldap_free_connection: actually freed

grep ldap /opt/librenms/logs/librenms.log
[2025-03-19T17:02:13][ERROR] ldap_start_tls(): Unable to start TLS: Operations error {“exception”:“[object] (ErrorException(code: 0): ldap_start_tls(): Unable to start TLS: Operations error at /opt/librenms/LibreNMS/Authentication/ActiveDirectoryAuthorizer.php:222)”}

The same goes for LDAP authentication

ldap_search_ext
put_filter: “(&(objectClass=group)(cn=CN=grp.librenms.adm,OU=librenms,OU=Applications,DC=mydomain,DC=net))”
put_filter: AND
put_filter_list “(objectClass=group)(cn=CN=grp.librenms.adm,OU=librenms,OU=Applications,DC=mydomain,DC=net)”
put_filter: “(objectClass=group)”
put_filter: simple
put_simple_filter: “objectClass=group”
put_filter: “(cn=CN=grp.librenms.adm,OU=librenms,OU=Applications,DC=mydomain,DC=net)”
put_filter: simple
put_simple_filter: “cn=CN=grp.librenms.adm,OU=librenms,OU=Applications,DC=mydomain,DC=net”