splittingred / modactivedirectory Goto Github PK

Good afternoon Shaun.
I use modActiveDirectory + MODX and I came across a situation where you can log in using the group name, not the user (the group name and any password are indicated). After authorization, a user is created with the group name and empty email field.

Could you tell me how to make it forbidden to login (create after first login) to users whose email field is empty?
Thanks

log in console:

[2020-04-08 14:39:14] (ERROR @ /var/www/site/core/components/activedirectory/model/activedirectory/modactivedirectorydriver.class.php : 536) PHP warning: ldap_search(): Search: Operations error
[2020-04-08 14:39:14] (ERROR @ /var/www/site/core/components/activedirectory/model/activedirectory/modactivedirectorydriver.class.php : 537) PHP warning: ldap_get_entries() expects parameter 2 to be resource, boolean given
[2020-04-08 14:46:28] (ERROR @ /var/www/site/core/xpdo/xpdo.class.php : 1320) Could not get table class for class: modAccess
[2020-04-08 14:46:28] (ERROR @ /var/www/site/core/xpdo/xpdo.class.php : 1289) Could not get table name for class: modAccess
[2020-04-08 14:46:28] (ERROR @ /var/www/site/core/xpdo/om/xpdoobject.class.php : 240) Error 42000 executing statement:
Array
(
[0] => 42000
[1] => 1064
[2] => You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AS modAccess WHERE modAccess.principal = 201' at line 1
)

Tell me how to ban authorization by group name. Otherwise, erroneous users are created in the system without mail.

Hello,

the plugin is working as expected. However I am relying on the usual events that are fired when a user is created manually. (e.g. OnUserFormSave) Is it possible to fire these events when the user is created via the modActiveDirectory plugin?

Thanks in advance

When logging in with an AD account that has not been used on a given MODx install, the first time that user logs in they just get a white screen. If they reload the page and try to log in again everything works correctly.

Having punctuation in the password returns the error "That account could not be located. Check the username and re-type the password to try again."

I'm guessing something isn't escaped? Revo 2.2.8

After installing modActive directory in 2.2, I removed it.

I was still getting error message in log file about failure to find model file in path.

through config.cache.php I found that the activedirectory json object was still found under the exta_packages key.

Temporary Solution: Search "System Settings" for the key and remove the activedirectory block.

Perm Solution: Remove it during uninstall

On the package page on http://modxcms.com/extras/package/711 it says: This version has been marked as deprecated. Please use a newer version.

But I cann't find a newer version. Are there problems with the current one? Is there any activity on this project? We would really like to use this package.

Hi!
I've had some truble with new user login. First submit for login form i've had result a blank page and not authorized session. But, first submit to create new user's account in modx, without user's e-mail. Second time, login form submit successfully.

I check error.log:

PHP Fatal error: Cannot assign by reference to overloaded object in /www/core/components/activedirectory/elements/events/onusernotfound.php on line 57

if edit string 57, from:
$user->Profile =& $profile;
to:
$user->Profile = $profile;
it was fix for my.

Thanks.
Sorry for my English.

I've noticed that class.adldap.php and modactivedirectorydriver.class both set LDAP_OPT_REFERRALS differently... to 0 and 1, respectively.

https://github.com/splittingred/modActiveDirectory/blob/develop/core/components/activedirectory/model/activedirectory/class.adldap.php#L345

https://github.com/splittingred/modActiveDirectory/blob/develop/core/components/activedirectory/model/activedirectory/modactivedirectorydriver.class.php#L162

A particular problem arises, with an intuitive/minimal modActiveDirectory configuration, when searching against a Windows 2003 Domain Controller in that ldap_search() will error out unless LDAP_OPT_REFERRALS is set to 0, e.g. modactivedirectorydriver.class.php : 529 - PHP warning: ldap_search(): Search: Operations error. This issue is also explained in more detail here: http://www.php.net/manual/en/function.ldap-search.php#45388

As a result, the Auto-Add User Groups functionality may not work as expected for certain setups.

I can think of two suggestions:

1.) Consistently set LDAP_OPT_REFERRALS to 0 in this mod.
2.) Make LDAP_OPT_REFERRALS a System Setting option, with a safe default.

I have verified that suggestion 1 corrects the issue, and is an easy fix, but I understand that suggestion 2 may be more desirable.

Please advise.

Thanks. -Keith

after installing and setting up the AD info, now the manager login page shows a 500 error.

Hi Shawn;

please take a look here: http://forums.modx.com/thread/92453/extending-moduser#dis-post-505224

trying to use the AD extra when modUser is already extended required a couple of work arounds that might be easily solved ?

• remove the check for the user's class_key being modActiveDirectoryUser before authentication
• add ability [config setting] to set the new AD users class_key to custom setting [i.e. extUser] after AD authentication.

-thanks!