Can I login as administrator and check all users records?

[abhitheawesomecoder]

Can I login as administrator and check all users records? Like we are able to do in phpmyadmin?

[williamdes]

Can I login as administrator and check all users records? Like we are able to do in phpmyadmin?

Yes, with the admin access

[abhitheawesomecoder]

But LDAP doesn't have any email property and other properties are not working for administrator When I am using for other user, I am able to login

…

On Fri, Aug 4, 2023, 2:16 AM William Desportes ***@***.***> wrote: Can I login as administrator and check all users records? Like we are able to do in phpmyadmin? Yes, with the admin access — Reply to this email directly, view it on GitHub <#216 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AA6DATW5FRUGKE7JBIY3E6LXTQE3TANCNFSM6AAAAAA3DJT5UI> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[abhitheawesomecoder]

Administrator creds are working in .env and connection is successfull On Fri, Aug 4, 2023, 3:05 AM Abhishek Kumar ***@***.***> wrote:

…

But LDAP doesn't have any email property and other properties are not working for administrator When I am using for other user, I am able to login On Fri, Aug 4, 2023, 2:16 AM William Desportes ***@***.***> wrote: > Can I login as administrator and check all users records? Like we are > able to do in phpmyadmin? > > Yes, with the admin access > > — > Reply to this email directly, view it on GitHub > <#216 (comment)>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AA6DATW5FRUGKE7JBIY3E6LXTQE3TANCNFSM6AAAAAA3DJT5UI> > . > You are receiving this because you authored the thread.Message ID: > ***@***.***> >

[Dark3clipse]

I am facing the same issue. I don't understand how to login with my admin account. It has no e-mail.

[williamdes]

LDAP logins are not email based
They look like
dc=admin,cn=example,cn=com

[Dark3clipse]

But when i go to the phpldapadmin login screen it only allows me to enter an email. The field goes red when i enter the cn=admin,dc=... name

[williamdes]

Who configured the LDAP sever you are connecting to?
Can you share a screenshot?

[Dark3clipse]

[Dark3clipse]

I am connecting to a fresh clean openldap deployment (bitnami helm chart, kubernetes)

[williamdes]

@leenooks can you have a look?
this is on v2/dev channel

@SophiaHadash most probably 1.2.x versions would work

[leenooks]

This is v2 - currently still in development. I committed a change yesterday that will enable you to change the attribute used to login - I havent yet tested that "DN" will actually work yet.

[maru-sama]

Hello,
i tried logging in with the root admin user.. cn=admin,dc=example,dc=com with the V2 docker image but it does not work.

Looking at the logs i see

ldap        | 65a82fca.1a4c897d 0x7f64fa01e700 conn=1005 op=3 SRCH base="dc=example,dc=com" scope=2 deref=0 filter="(uid=cn=admin,dc=example,dc=com)"
ldap        | 65a82fca.1a4d2f8f 0x7f64fa01e700 conn=1005 op=3 SRCH attr=entryuuid *
ldap        | 65a82fca.1a4ee53c 0x7f64fa01e700 conn=1005 op=3 SEARCH RESULT tag=101 err=0 qtime=0.000012 etime=0.000185 nentries=0 text=

Shouldnt this work now with the commit?

[maru-sama]

What I also found out that to be able to login the account must be a posixaccount, an inetOrgPerson account alone is not enough.

[leenooks]

Did you set your variables as per Configuration Variables to support a DN login and which objectClass must be present (if any)?

[maru-sama]

Hi,

for the moment I have APP_KEY, LDAP_HOST and LDAP_PORT set. So it looks like I indeed did not set one. Could you tell me which one it is? Right now I try logging in with the admin account of my ldap installation which apparently does not have a uid or similar.

[maru-sama]

Oh I guess I found it....

For testing purposes I tried setting LDAP_LOGIN_ATTR BUT I did not set LDAP_LOGIN_OBJECTCLASS which defaults to posixclass.

So of course this does not work. Let me try again later today with these two settings set.

[maru-sama]

Thinking about this some more,

what objectsclass does the default admin account have?

[leenooks]

Thinking about this some more,
what objectsclass does the default admin account have?

There is no standard answer to this - it depends on your setup.

[maru-sama]

I guess in the end it is bad practice to use the rootdn for any administration at all. I will try and set up a separate admin account for that, but need to understand ACLs first.