After mucking about with a test server (on which LDAP auth works with the default settings) I installed Cacti on our management server and began configuring it. At first LDAP auth worked, but then I began to tinker with it, experimenting with different settings in Configuration -> Settings -> Authentication -> LDAP General Settings, using different types of encryption and TLS cert requirements. None of them worked, although they should have. Finally, in frustration, I set them back to the default so that they matched the working test server, but unfortunately the act of trying these difference settings borked something because now I can't get it working at all. I have LDAP Debug Mode enabled, but there isn't anything meaningful in the logs to help troubleshoot. At least to me:
2023-09-22 15:26:37 - AUTH LOGIN FAILED: LDAP Login Failed for user 'joeblow' from IP Address 'xx.xx.xx.xx'.
2023-09-22 15:26:37 - AUTH LOGIN FAILED: LDAP Error: Authentication Failure
2023-09-22 15:26:37 - AUTH LDAP: (C:\inetpub\wwwroot\cacti\index.php[25]:include(), C:\inetpub\wwwroot\cacti\include\auth.php[158]:require_once(), C:\inetpub\wwwroot\cacti\auth_login.php[99]:ldap_login_process(), C:\inetpub\wwwroot\cacti\lib\auth.php[3743]:cacti_ldap_auth(), C:\inetpub\wwwroot\cacti\lib\ldap.php[95]:Ldap->Authenticate(), C:\inetpub\wwwroot\cacti\lib\ldap.php[704]:LdapError::GetErrorDetails(), C:\inetpub\wwwroot\cacti\lib\ldap.php[367]:cacti_debug_backtrace())
2023-09-22 15:26:37 - AUTH LDAP: Authentication Failure
2023-09-22 15:26:36 - AUTH LDAP: Binding with "admin"
2023-09-22 15:26:36 - AUTH NOTE: Setting Bind Timeout to 5 seconds
2023-09-22 15:26:36 - AUTH NOTE: Setting Network Timeout to 2 seconds
2023-09-22 15:26:36 - AUTH LDAP: Connect using ldap://mydc.mydomain.com:389
One thing that's a little wacky is that it appears to be attempting to bind to the directory with user 'admin' (on the fourth to last line). The working server has my user name in there. I've tried changing it but no dice. The error that's given at the login dialog is just 'Access Denied! Authentication Failure':
- auth failure.png (3.23 KiB) Viewed 7883 times
