Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

In this Discussion

osTicket v1.10 (stable) and Maintenance Release v1.9.15 are now available! Go get it now

V1.10-rc3 LDAP Authentication and Lookup

I know this has been seen before, but the LDAP Authentication and Lookup plugin is broken due to php5 security update.

I'm trying to set it up to authenticate to our Active Directory

This results  in a error 500 page.

The first problem was this error in the log files:
Access level to Net_LDAP2_Schema::__construct() must be public (as in class PEAR)  in phar:///<path to osticket install>/include/plugins/auth-ldap.phar/include/Net/LDAP2/Entry.php on line 0

I extracted the files from the phar, found the entries for __construct and made the 'protected' to be 'public'
I repacked the phar and tried to setup. 

This is the error that is shown in the logs now:
PHP Fatal error:  Call to undefined method Net_LDAP2::PEAR()

The error 500 page also shows up, along with the undefined method error above when trying to save the configuration of the plugin.

Local account authentication still works. 

It would be nice to have this plugin updated to reflect the new security of php5.


  • edited June 2016
    They need to upgrade the plugins to work with the core changes in Osticket RC3
  • I hope the time is taken to re-write the plugin to allow for a true LDAP auth & data pass-thru to take place. There are default fields in osTicket which are in AD/LDAP which would be great to be able to pass-thru to osTicket via this plugin. Currently as @eproudfit has stated the only way to accomplish this now is to unphar the plugin, mod it and then re-phar the plugin for osTicket configuration.

    In addition to the current LDAP auth I'd love to see the ability to associate LDAP groups and sync those for use as ACL within osTicket.

    In addition to the above some other nice to have features include:

    1. A click to show users current AD groups - I can see the use for this feature to better assist with tickets which a user may complain of access errors to folders or files. Having a small feature like this could allow for you support staff to visually look and check these groups from within osTIcket for faster issue resolution

    2. The ability to add/create additional dynamic AD sync fields in osTicket

  • edited June 2016
    I have the same error.
    The plugin has not yet been updated for the forth coming 1.10 release.
    Have you opened a report on github?

    post edited to add:
    Including this thread in my daily forum review to the Devs.
  • edited June 2016
    I have not reported this on github.  Since these are the official forums, this is the only place I feel I need to report issues.

    As to the issue at hand, my agents are unable to login with their AD credentials.  Since they can't seem to remember yet another password (local account), AD connectivity is highly needed.

    If anyone can help me with the 2nd error (in original topic), this might get fixed.  If it does work, I'll let ya'll know what exactly I did.

    Also, this is on a Debian 8.5 system.

    Disclaimer: I'm not a software developer and do not know much about php code, but can hack my way through as needed.  ;-)

  • WOOT!  I fixed it.

    Ok.  So the problem is that the Net_LDAP2 functions rely on Net_LDAP

    On a Debian 8 system this is what I did:
    I used apt-get install php-net-ldap2 php-net-ldap

    These files are in /usr/share/php/Net

    I copied the directory files from /usr/share/php/Net/* to my phar directory (where I had extracted the original auth-ldap.phar plugin)
    I repacked the phar and copied it to the osticket include/plugins directory.
    I was able to set the AD info and save without errors.
    Enabled the plugin and then tested authentication.  I was successful in logging in with my AD credentials.


    I hope this will help others with this same problem

  • So are you able to lookup users with the plugin? Authencation has never been an issue.
  • Upgrade to PHP 5.6 it fixes a few problems
  • edited June 2016
    Yes, I can authenticate again.

    I upgraded to 5.6.20 and osticket 1.10-rc3 and it broke the plugin.

    If you read the original post, you will see that the LDAP plugin for OSTicket was broken.
    Not only could you not authenticate, you receive an error 500 page and errors in /var/log/apache2

    The plugin was working fine before the php5 and osticket 1.10-rc3

  • So to confirm post upgrade to PHP 5.6 the fix of adding the plugin files to the PHAR no longer fix the issue?
  • No..that is not it.

    PRE-php upgrade & osticket 1.10-rc3 the plugin worked as is. 

    POST-php upgrade & osticket 1.10-rc3 the plugin did not work.

    I patched the auth-ldap.phar plugin.

    Now, it works again.  Post-php upgrade & osticket 1.10-rc3 + auth-ldap.phar modification (by me), it authenticates correctly.

  • Hmmmm soory I forgot I dont use their LDAP plugin I developed my own sorry about the mix up
  • hi, i have centos7..
    osticket 1.10 dosn't work... Error 500..

    come posso fixare il problema on centos?

  • @Furlani7 if you have having a problem I would highly recommend taht you read

    Please help us to help you by reading and following the posting guidelines located in this thread: Please read before requesting assistance.  The more information you give us the better we will be able to assist you. Thank you.

    And start your your own thread with your pertinent information.
  • The new plugin fixed our issue.
    We went from 1.8 to 1.10
    We run it on a vm - so we took a snapshot. If on a real machine, copy the contents of osticket somewhere.
    * Copy your ost-config.php somewhere outside of /var/www/osticket
    * copy the contents of the upload directory (new package download) to /var/www/osticket
    * download the newest ldap plugin and copy it to the plugin directory:
    cp auth-ldap.phar /var/www/osticket/include/plugins/

    The last step is what fixed our ldap issue after the upgrade.
    Hope it helps someone.

Sign In or Register to comment.