[ZendTo] AD Authentication Issue

[Karl Bundy]

Here is the config that we use for AD authentication:

  'authenticator'             => 'AD',
  'authLDAPBaseDN1'           => 'OU=Users,DC=corp,DC=atf,DC=local',
  'authLDAPServers1'          => array('192.xxx.xxx.xxx'),
  'authLDAPAccountSuffix1'    => '@corp.atf.local',
  'authLDAPUseSSL1'           => false,
  'authLDAPBindUser1'         => 'svc-zento-ad at corp.atf.local,
  'authLDAPBindPass1'         => 'xxxxxxxxxxxxxxxxxxxxxxxx',
  'authLDAPOrganization1'     => 'ATF',


From: ZendTo [mailto:zendto-bounces at zend.to] On Behalf Of RICARDO ARAÚJO POPOIRE WANDERLEY via ZendTo
Sent: Wednesday, January 09, 2019 12:32 PM
To: 'ZendTo Users' <zendto at zend.to>
Cc: RICARDO ARAÚJO POPOIRE WANDERLEY <ricardo.araujo at modal.com.br>
Subject: Re: [ZendTo] AD Authentication Issue

Guys,

Any update on this?

At.te
Ricardo Araujo
21 3223 7944

From: RICARDO ARAÚJO POPOIRE WANDERLEY
Sent: terça-feira, 8 de janeiro de 2019 15:46
To: ZendTo Users <zendto at zend.to<mailto:zendto at zend.to>>
Subject: AD Authentication Issue

Hi Folks

We are facing an issue with AD authentication. When I set AD mode I can logged in even if I try to do this with an user that doesn't exists in my AD environment.

It seems to Zendto is bypassing and accepting users to login with any account and password.

Preferences.php is configured as bellow:

  'authenticator'             => 'AD',
    'authLDAPServers1'          => array('xxx.xxx.xxx.xxx'),
    'authLDAPBaseDN1'           => array('CN=XXX,DC=XXXX,DC=XXX,DC=XXX'),
    'authLDAPAccountSuffix1'    => '@xxxx.xxx.xxx',
    'authLDAPUseSSL1'           => false,
  //'authLDAPUseTLS1'           => false,
    'authLDAPBindUser1'         => 'org\svc_zendto',
    'authLDAPBindPass1'         => 'password',
  //'authLDAPMemberKey'         => '',
  //'authLDAPMemberRole'        => '',
    'authLDAPOrganization1'     => 'org',

Ldapsearch Works fine.

Could you help me with this?

Zendto Version: 5.15-1
Php Version: PHP 7.2.13 (cli) (built: Dec  6 2018 15:54:38) ( NTS )


Thanks in advance

[http://www.modal.com.br/emailmkt/marca-assinatura.jpg]<https://modal.com.br/html/index.php>



RICARDO ARAUJO POPOIRE WANDERLEY







Tels. 55 21 3223 7944 | 7700
Cel.  55 21 99477 6779
Fax   55 21 3223 7738









[http://www.modal.com.br/images/rec.png]

A impressão consciente gera economia e responsabilidade com o meio ambiente


Atenção: Esta comunicação deve ser lida apenas pelo seu destinatário e não pode ser retransmitida sem autorização formal. Se esta mensagem tiver sido recebida indevidamente, por favor destrua-a e retire-a de seu computador.
Qualquer reprodução, disseminação, alteração, distribuição e/ou publicação deste e-mail é estritamente proibida.



Notice of Confidentiality: This document should only be read by those persons to whom it is addressed and is not intended to be relied upon by any person without subsequent written confirmation of its contents. If you have received this e-mail message in error, please destroy it and delete it from your computer.
Any form of reproduction, dissemination, copying, disclosure, modification, distribution and/or publication of this e-mail message is strictly prohibited.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://jul.es/pipermail/zendto/attachments/20190109/5b008fff/attachment.html>