YunoHost-Apps / hubzilla_ynh

Hubzilla Hub package for YunoHost
https://zotlabs.org/page/hubzilla/hubzilla-project
GNU General Public License v3.0
14 stars 9 forks source link

LDAP integration is broken #166

Open dragondaddy opened 7 months ago

dragondaddy commented 7 months ago

Describe the bug

After installing Hubzilla, YunoHost users cannot connect using their YunoHost credentials. Even the admin chosen during install cannot connect. Creating an account is possible as long as you don't use the main email adress of a YunoHost user. The first user created gets admin rights.

Context

Steps to reproduce

Expected behavior

The admin's first channel is created and has admin rights. Any YunoHost user can connect using his YunoHost credentials

Logs

Found in /var/www/hubzilla/php.log (logging enabled the Hubzilla admin interface) just after tryinh to connect an already existing YunoHost user: 2024-01-29T12:58:40Z:LOG_INFO:27db8048f2:ldapauth.php:135:ldapauth_authenticate: ldapauth: Searching user johndoe. 2024-01-29T12:58:40Z:LOG_INFO:27db8048f2:ldapauth.php:151:ldapauth_authenticate: ldapauth: PHP-LDAP fail or no server set. 2024-01-29T12:58:40Z:LOG_INFO:27db8048f2:auth.php:329:require: authenticate: failed login attempt: johndoe from IP XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX:XXXX

dragondaddy commented 7 months ago

I'd suggest removing LDAP integration, just as I did in the Streams package, as it only complicates things. You can see here the explanation that was given to me while I was struggling to make LDAP integration work in the Streams package. Turns out it is not a good idea, as it would, among other problems, break nomadic identity, which is one of Streams & Hubzilla killer features.