Authentication with "Active directory" no longer works

Hello,
while it worked under Joomla 3 with the same configuration, the authentication with "Active directory" does not work anymore under Joomla 4.0.3

Steps to reproduce the issue

Here is my configuration:

Expected result

that it works as before.

Actual result

error message : ldapfailure The login does not match the password, or you do not have an account yet.

System information (as much as possible)

Joomla 4.0.3

Additional comments

I did some debugging and found that the users_dn field is not used for "direct binds" when it should be.
To make this work, I modified the joomla/plugins/authentication/ldap/ldap.php file as follows:
//$ldap->bind($ldap->escape($credentials['username'], '', LDAP_ESCAPE_DN), $credentials['password']);
$dn = str_replace('[username]', $credentials['username'], $this->params->get('users_dn', ''));
$ldap->bind($dn, $credentials['password']);

[PhilETaylor]

The LDAP in Joomla 4 is so bad as to be totally unusable. It needs a complete rewrite by someone who understands LDAP.

• [4] misleading descriptions of LDAP plugin configuration form fileds #35571

• [4] LDAP authenticate without domain in username #35573

• [4.0] Merge conflict from LDAP #25434

• [4] LDAP -Could not set value "60" for option "network_timeout". #35316

• [4.0.0] Core LADP Plugin - The option "host" with value null is expected to be of type "string", but is of type "null". #35216

• [4] Remove all references to LDAP ignore_reqcert_tls #35323

• Search by ldap_uid when binding as user (#32399) #32400

• [4] LDAP test #35768

[nickdring]

I find it amazing that J4 shipped without a working LDAP plugin

[CPLT-C1]

Where's the best place to check for an update on this one? This is a show-stopper for me; I've rolled back to 3.10.3 for now...

[dallenk]

working LDAP is a must-have for several of the organizations I support. Previously I used jmapmyldap (https://shmanic.com/tools/jmapmyldap/download.htm) which works fantastic on a Joomla 3 site. I am not a coder by any stretch so perhaps this project can be revived with a new fork and updates for Joomla4 ?

[gopalji]

I have this LDAP error since php8, the reason I found in isConnected() function of ldapclient.php:

public function isConnected()
{
return $this->resource && \is_resource($this->resource);
}

the "\is_resource($this->resource" expression causes the error. Uncomment it and it works

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/35829.}

[PhilETaylor]

The LDAP in Joomla 4 is so broken it should be removed as a feature completely

[gopalji]

Forgot to mention: using Joomla 3.10.
LDAP authentication essentially for us

[zero-24]

@gopalji can you please send a PR against 3.10 with the details to reproduce and the detailed error messages this here is about the J4 LDAP Plugin. Interessting to know would be a detailed error message and maybe with an var_dump on $this->resource to understand why it fails on PHP 8.1

[richard67]

Closing as having a pull request. It claims to solve this issue. Anything else which came up in comments here should be handled with separate issues. Please test #37959 . Thanks in advance.

[FPC-RamonHerrera]

I pulled down a copy of 4.2.3 today. The aforementioned fix is in place, my LDAP was broken in spite of that, using the same configuration as many of my other 3.X sites.

I tried dvince38's fix.

To make this work, I modified the joomla/plugins/authentication/ldap/ldap.php file as follows:
//$ldap->bind($ldap->escape($credentials['username'], '', LDAP_ESCAPE_DN), $credentials['password']);
$dn = str_replace('[username]', $credentials['username'], $this->params->get('users_dn', ''));
$ldap->bind($dn, $credentials['password']);

This absolutely WORKS, thank you dvince38 very much.

[FPC-RamonHerrera]

Here is a screen pic of my LDAP plugin configuration.

[DoctorDeatch]

unfortunately, it didn't help me :(