Can't login with Active Directory authentication since last update

Help
#1

Hello,
Since few days, I can’t log on my LibreNMS with account member of:
$config[‘auth_ad_groups’][‘GG_LibreNMS’][‘level’] = 10;
I have tried with FQDN same result.

When I use the test script:

./scripts/auth_test.php -l

Authentication Method: active_directory
Success
Could not bind to AD, you will not be able to use the API or alert AD users
Users:
Total users: 0
]# ./scripts/auth_test.php -u my_user
Authentication Method: active_directory
Success
Could not bind to AD, you will not be able to use the API or alert AD users
Password:
Authenticate user my_user:
Error: LibreNMS\Exceptions\AuthenticationException thrown!
Invalid credentials

In debug mode, I saw nothing that can help but the connector try various group like member of ‘admin’ etc…

If I set $config[‘auth_ad_require_groupmembership’] = true; // false: allow all users to auth level 0
–> to false I can log on with my_user account but only at level 0 so my AD configuration seems to be good.

For information:

./validate.php

====================================

Component Version
LibreNMS 1.56-41-g1501f43
DB Schema 2019_02_05_140857_remove_config_definition_from_db (145)
PHP 7.2.22
MySQL 10.2.27-MariaDB
RRDTool 1.4.8
SNMP NET-SNMP 5.7.2

====================================

[OK] Composer Version: 1.9.0
[OK] Dependencies up-to-date.
[OK] Database connection successful
[OK] Database schema correct

Thx for your help.

#2

Did you already run daily to get the latest source? Yesterday a couple of critical bugs were fixed and I had AD auth also broken in between.

#3

Hello Elias,

Yes daily run and I am on the latest version:

./validate.php

====================================

Component Version
LibreNMS 1.56-75-gbd8cb82
DB Schema 2019_02_05_140857_remove_config_definition_from_db (145)
PHP 7.2.22
MySQL 10.2.27-MariaDB
RRDTool 1.4.8
SNMP NET-SNMP 5.7.2

====================================

[OK] Composer Version: 1.9.0
[OK] Dependencies up-to-date.
[OK] Database connection successful
[OK] Database schema correct

Thx.

#4

I have a very similar issue. I can authenticate and pull users just fine, but I still get the below error when running ./scripts/auth_test.php

Could not bind to AD, you will not be able to use the API or alert AD users

====================================

Component Version
LibreNMS 1.56-76-gfe0506c
DB Schema 2019_10_03_211702_serialize_config (145)
PHP 7.2.22
MySQL 5.5.56-MariaDB
RRDTool 1.4.8
SNMP NET-SNMP 5.7.2

====================================

[OK] Composer Version: 1.9.0
[OK] Dependencies up-to-date.
[OK] Database connection successful
[OK] Database schema correct

#5

Hello,
I think I have done a mistake on my configuration:
$config[‘auth_ad_domain’] with wrong old UPN…
Or since the daily update of this night, it works again.
Thx for your help.

#6