[Lizmap] More verbose logging for LDAP

[Laurent Jouanneau]

Le 13/12/2019 à 14:00, Paolo Cavallini a écrit :
> Hi all,
> some LDAP users cannot authenticate on our system.

What it does exactly? Is there a message ? something else?


> Apparently everything
> is fine, as LDAP server records the access and returns the
> authentication, therefore auth.log does not report an error (it does
> when an user insert wrong credentials).
> We cannot find a reason for this: would it be possible to enable fully
> verbose auth logging, to search for the issue?). Any other suggestion?
> Thanks a lot.

You can enable logs. see : 
https://docs.lizmap.com/current/en/install/ldap.html#debugging

See also your file var/log/errors.log

If you synchronize lizmap user groups with groups given by your ldap, be 
sure corresponding lizmap groups exist.

Be sure the account of users who cannot authenticate, have the status 
"enabled".

Check that the LDAP queries you configured allow to retrieve ldap 
attributes of the users who cannot authenticate.

Laurent