blackbitdigitalcommerce / pimcore-ldap-bundle Goto Github PK

i just follow these steps, but i didnt got the results. can you please help me

Default folder for LDAP users would be handy to separate LDAP users from accounts which got created manually or via application code. Configuration via config.yml.

When disabling the plugin, LDAP created users continue to work. When LDAP is no longer working, those users should not be able to authenticate.

With the new Symfony authenticator system it is no longer possible to login via LDAP (https://pimcore.com/docs/pimcore/current/Development_Documentation/Development_Tools_and_Details/Security_Authentication/Authenticator_Based_Security.html)

The problem is that

1. The event "pimcore.admin.login.credentials" is no longer used therefore the listener only triggers on the "pimcore.admin.login.failed" event
2. When the user does not exist an exception is thrown and the "pimcore.admin.login.failed" is never reached. This happens in the UserBadge (https://github.com/pimcore/pimcore/blob/11.x/bundles/AdminBundle/Security/Authenticator/AdminLoginAuthenticator.php#L78)

I tried to work around that by changing the user provider to a chained user provider with a normal pimcore user provider and a new ldap user provider, unfortunately, this leads to an error in the AdminAbstractAuthenticator as the LDAP User Provider returns LDAPUser which has no getUser function.

My current solution is to have a cronjob running that adds new and deletes old admin users each night, so the User Badge gets a user and then the pimcore.admin.login.failed Event is triggered which authenticates the user with the ldap

Users aren't stored as LDAP users in the users table. There's no way to differentiate which users were created in Pimcore vs LDAP.

Hi Alex, does your bundle work with secure ldap as well? I got "Could not initiate TLS connection: Can't contact LDAP server." error when I used secure ldap. It works fine for non-secure one.
Btw, I use the latest Pimcore(v6.5), if it helps.
Thanks.

Currently this bundle conflicts with Pimcore 10.1, because it requires "symfony/symfony" and Pimcore 10.1 conflicts with "symfony/symfony: *"

For the new pimcore version, pimcore is using "pimcore/pimcore" for composer. Currently the console gives following information "Package pimcore/core-version is abandoned, you should avoid using it. Use "pimcore/pimcore" instead.

please fix this in your composer.json

Hi 👋
I have a question to the use-case of this bundle.
Does this explicitly log in users via LDAP? Meaning if a user is not in LDAP (like the local admin user) he can not log in?
Or does it also check local users?

Thx. 🙏

Can the functionality be extended, such that if a user is found to be in a particular LDAP group, they are automatically assigned to a matching role in Pimcore?

Hello,
Last year I changed my job and I don't get to use Pimcore anymore.
As this project is actively used by different companies/developers it would be a shame to let it die because of the reason above.

Please reply to this issue if you are interested in maintaining the project!