LDAP Server Settings - Port Value

[shon]

I'm trying to change the Port Value, under the LDAP Server Settings from 389.

I change the "Port Value" from 389, to 1389, hit save, and then reload the page to still see port 389 selected.

What am I doing wrong here?

Thanks!

[jimp]

Looks like it's just cosmetic. The right value is put into the config it's just not reflected in the GUI.

quick fix here:
https://github.com/bsdperimeter/pfsense/commit/230b3b1b6564063834d132d788484509c86eb39f

[shon]

Thanks but it breaks the GUI.  I've tried the configuration twice on two new rebuilds to confirm.

To see the LDAP fields I have to hit the drop box and go down to RADIUS, and then backup to LDAP again.

After you enter in all of the information you cannot edit it again as the fields and drop boxes (RADIUS/LDAP) are inaccessible thereafter.

Thanks!

[jimp]

I'm not seeing that here. Are you sure you added the right code in the right place? I get all of the ldap values as expected and do not have to change anything.

[shon]

All aboard the failboat

I was actually adding the "+" signs

dough!

All is well now after I removed the + signs

Thanks!

[jimp]

That would do it. :-)

[shon]

Ahh spoke to soon.

The LDAP Server Setting Port value is holding at 1389, but the "authentication testing" under diagnostics is still trying to use port 389.

Any ideas?

Thanks!

[jimp]

The auth test doesn't specifically reference anything, it just calls the same auth function as it would if someone were logging in, and that code references the port used in the config specifically so long as it exists.

What is leading you to believe that it's still using the wrong port at that point?

[shon]

I ran tcpdump on my LDAP Server with the following commands:

e.g.

tcpdump -i eth0 host PFSENSEIP and port 389

tcpdump -i eth0 host PFSENSEIP and port 1389

When I hit "Test" from Diagnostics > Authentication with my LDAP Description name selected I only see traffic hitting on port 389 and never on 1389 as previously defined in Port value.

[jimp]

aha, it appears PHP's ldap_connect() ignores the port we pass because we pass a URL in the first parameter. So we need to add the port onto the URL.

Like so:
https://github.com/bsdperimeter/pfsense/commit/4d89e4d7818610aba44dceb3644cb2bb720bca30

[shon]

I grabbed the git repository and then copied the auth.inc file over to the pfsense server.

Now when I go to Section besides the main page I get the following error:

"Fatal error: Call to undefined function get_configured_ipv6_addresses() in /etc/inc/auth.inc on line 143

Thanks!

[jimp]

You want the file from the RELENG_2_0 branch, not the master branch.

[jimp]

https://raw.github.com/bsdperimeter/pfsense/4d89e4d7818610aba44dceb3644cb2bb720bca30/etc/inc/auth.inc

[shon]

Thanks

I get the same error I previously stated when going down to "Authentication".  Everything else is working as expected.

[jimp]

Which error is that now?

[shon]

After applying your latest change outside of the main repository I restarted the server, went for a walk, and came back and now I get no errors.

When I go to Diagnostics > Authentication

I can now see the pfsense box trying to communicate on the right port now!

My LDAP authentication passed with my users that I had setup!

Thanks!

[jimp]

Good news then :-)