Unable to login after 8.4.2 upgrade

maverickws · 16 November 2023 18:04

Hi @serhiisamko once again thank you for your reply.

You must comprehend that the change here was the SuiteCRM upgrade. The LDAP server is working as was and serving authentication for the same users to all other platforms.
But to make it perfectly clear, no, no changes have been made to LDAP.

`.env.local`

DATABASE_URL="mysql://dbusr_crm:somepassword@dbbalancer/db_crm"
AUTH_TYPE=ldap

###> LDAP CONFIG ###
LDAP_HOST='idserver.domain.tld'
LDAP_PORT=636
LDAP_ENCRYPTION=tls
LDAP_PROTOCOL_VERSION=3
LDAP_REFERRALS=false
LDAP_DN_STRING='dc=domain,dc=tld'
LDAP_QUERY_STRING=''
LDAP_SEARCH_DN='uid=bind-user,cn=sysaccounts,cn=etc,dc=domain,dc=tld'
LDAP_SEARCH_PASSWORD='bind-user-password'
###< LDAP CONFIG ###
###> LDAP AUTO CREATE CONFIG ###
LDAP_AUTO_CREATE=enabled
LDAP_PROVIDER_BASE_DN='cn=accounts,dc=domain,dc=tld'
LDAP_PROVIDER_SEARCH_DN='uid=bind-user,cn=sysaccounts,cn=etc,dc=domain,dc=tld'
LDAP_PROVIDER_SEARCH_PASSWORD='bind-user-password'
LDAP_PROVIDER_DEFAULT_ROLES=ROLE_USER
LDAP_PROVIDER_UID_KEY='(uid={username})'
LDAP_PROVIDER_FILTER='(memberOf=cn=sales,cn=groups,cn=accounts,dc=domain,dc=tld)'
###< LDAP AUTO CREATE CONFIG ###

Also, disabling LDAP does not overcome the issue: I moved .env.local to .env.off and only the timeout issues ceased. I am still getting the same Login Credentials Incorrect.

However, even without the LDAP config, I am unable to login with the admin user.

[2023-11-16 17:56:38] request.INFO: Matched route "app_login". {"route":"app_login","route_parameters":{"_route":"app_login","_controller":"App\\Authentication\\Controller\\SecurityController::login"},"request_uri":"https://sales.domain.tld/login","method":"POST"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Symfony/EventListener/AddFormatListener.php:53)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Symfony/EventListener/QueryParameterValidateListener.php:52)"} []
[2023-11-16 17:56:38] security.DEBUG: Checking for authenticator support. {"firewall_name":"main","authenticators":1} []
[2023-11-16 17:56:38] security.DEBUG: Checking support on authenticator. {"firewall_name":"main","authenticator":"Symfony\\Component\\Ldap\\Security\\LdapAuthenticator"} []
[2023-11-16 17:56:38] php.INFO: Deprecated: Return type of Symfony\Component\OptionsResolver\OptionsResolver::offsetExists($option) should either be compatible with ArrayAccess::offsetExists(mixed $offset): bool, or the #[\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice {"exception":"[object] (ErrorException(code: 0): Deprecated: Return type of Symfony\\Component\\OptionsResolver\\OptionsResolver::offsetExists($option) should either be compatible with ArrayAccess::offsetExists(mixed $offset): bool, or the #[\\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice at /var/www/html/suitecrm/sales/vendor/symfony/options-resolver/OptionsResolver.php:1149)"} []
[2023-11-16 17:56:38] php.INFO: Deprecated: Return type of Symfony\Component\OptionsResolver\OptionsResolver::offsetGet($option, bool $triggerDeprecation = true) should either be compatible with ArrayAccess::offsetGet(mixed $offset): mixed, or the #[\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice {"exception":"[object] (ErrorException(code: 0): Deprecated: Return type of Symfony\\Component\\OptionsResolver\\OptionsResolver::offsetGet($option, bool $triggerDeprecation = true) should either be compatible with ArrayAccess::offsetGet(mixed $offset): mixed, or the #[\\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice at /var/www/html/suitecrm/sales/vendor/symfony/options-resolver/OptionsResolver.php:908)"} []
[2023-11-16 17:56:38] php.INFO: Deprecated: Return type of Symfony\Component\OptionsResolver\OptionsResolver::offsetSet($option, $value) should either be compatible with ArrayAccess::offsetSet(mixed $offset, mixed $value): void, or the #[\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice {"exception":"[object] (ErrorException(code: 0): Deprecated: Return type of Symfony\\Component\\OptionsResolver\\OptionsResolver::offsetSet($option, $value) should either be compatible with ArrayAccess::offsetSet(mixed $offset, mixed $value): void, or the #[\\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice at /var/www/html/suitecrm/sales/vendor/symfony/options-resolver/OptionsResolver.php:1165)"} []
[2023-11-16 17:56:38] php.INFO: Deprecated: Return type of Symfony\Component\OptionsResolver\OptionsResolver::offsetUnset($option) should either be compatible with ArrayAccess::offsetUnset(mixed $offset): void, or the #[\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice {"exception":"[object] (ErrorException(code: 0): Deprecated: Return type of Symfony\\Component\\OptionsResolver\\OptionsResolver::offsetUnset($option) should either be compatible with ArrayAccess::offsetUnset(mixed $offset): void, or the #[\\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice at /var/www/html/suitecrm/sales/vendor/symfony/options-resolver/OptionsResolver.php:1177)"} []
[2023-11-16 17:56:38] php.INFO: Deprecated: Return type of Symfony\Component\OptionsResolver\OptionsResolver::count() should either be compatible with Countable::count(): int, or the #[\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice {"exception":"[object] (ErrorException(code: 0): Deprecated: Return type of Symfony\\Component\\OptionsResolver\\OptionsResolver::count() should either be compatible with Countable::count(): int, or the #[\\ReturnTypeWillChange] attribute should be used to temporarily suppress the notice at /var/www/html/suitecrm/sales/vendor/symfony/options-resolver/OptionsResolver.php:1193)"} []
[2023-11-16 17:56:38] lock.DEBUG: Successfully acquired the "ip_login-101.202.33.104" lock. {"resource":"[object] (Symfony\\Component\\Lock\\Key: ip_login-101.202.33.104)"} []
[2023-11-16 17:56:38] lock.DEBUG: Expiration defined for "ip_login-101.202.33.104" lock for "300" seconds. {"resource":"[object] (Symfony\\Component\\Lock\\Key: ip_login-101.202.33.104)","ttl":300} []
[2023-11-16 17:56:38] lock.DEBUG: Successfully acquired the "username_ip_login-administrator-101.202.33.104" lock. {"resource":"[object] (Symfony\\Component\\Lock\\Key: username_ip_login-administrator-101.202.33.104)"} []
[2023-11-16 17:56:38] lock.DEBUG: Expiration defined for "username_ip_login-administrator-101.202.33.104" lock for "300" seconds. {"resource":"[object] (Symfony\\Component\\Lock\\Key: username_ip_login-administrator-101.202.33.104)","ttl":300} []
[2023-11-16 17:56:38] php.INFO: Deprecated: Creation of dynamic property Symfony\Component\RateLimiter\Policy\TokenBucket::$stringRate is deprecated {"exception":"[object] (ErrorException(code: 0): Deprecated: Creation of dynamic property Symfony\\Component\\RateLimiter\\Policy\\TokenBucket::$stringRate is deprecated at /var/www/html/suitecrm/sales/vendor/symfony/cache/Marshaller/DefaultMarshaller.php:80)"} []
[2023-11-16 17:56:38] php.INFO: Deprecated: Creation of dynamic property Symfony\Component\RateLimiter\Policy\TokenBucket::$stringRate is deprecated {"exception":"[object] (ErrorException(code: 0): Deprecated: Creation of dynamic property Symfony\\Component\\RateLimiter\\Policy\\TokenBucket::$stringRate is deprecated at /var/www/html/suitecrm/sales/vendor/symfony/cache/Marshaller/DefaultMarshaller.php:80)"} []
[2023-11-16 17:56:38] php.INFO: Deprecated: Creation of dynamic property Symfony\Component\RateLimiter\Policy\TokenBucket::$stringRate is deprecated {"exception":"[object] (ErrorException(code: 0): Deprecated: Creation of dynamic property Symfony\\Component\\RateLimiter\\Policy\\TokenBucket::$stringRate is deprecated at /var/www/html/suitecrm/sales/vendor/symfony/rate-limiter/Policy/TokenBucket.php:97)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: The service "ApiPlatform\Core\Api\IdentifiersExtractor" is deprecated, use ApiPlatform\Api\IdentifiersExtractor instead. {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: The service \"ApiPlatform\\Core\\Api\\IdentifiersExtractor\" is deprecated, use ApiPlatform\\Api\\IdentifiersExtractor instead. at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Core/Api/IdentifiersExtractor.php:49)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Core/JsonSchema/SchemaFactory.php:70)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Core/Swagger/Serializer/DocumentationNormalizer.php:170)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: The service "ApiPlatform\Core\Bridge\Symfony\Routing\IriConverter" is deprecated, use ApiPlatform\Symfony\Routing\IriConverter instead. {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: The service \"ApiPlatform\\Core\\Bridge\\Symfony\\Routing\\IriConverter\" is deprecated, use ApiPlatform\\Symfony\\Routing\\IriConverter instead. at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Core/Bridge/Symfony/Routing/IriConverter.php:67)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/JsonLd/ContextBuilder.php:76)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: The $exceptionOnNoToken parameter in "ApiPlatform\Symfony\Security\ResourceAccessChecker::__construct()" is deprecated and will always be false in 3.0, you should stop using it. {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: The $exceptionOnNoToken parameter in \"ApiPlatform\\Symfony\\Security\\ResourceAccessChecker::__construct()\" is deprecated and will always be false in 3.0, you should stop using it. at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Symfony/Security/ResourceAccessChecker.php:49)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Hydra/Serializer/DocumentationNormalizer.php:77)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Hydra/Serializer/EntrypointNormalizer.php:46)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Hydra/Serializer/EntrypointNormalizer.php:51)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/AbstractItemNormalizer.php:105)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/AbstractItemNormalizer.php:130)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/JsonLd/Serializer/ItemNormalizer.php:55)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/AbstractItemNormalizer.php:105)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/AbstractItemNormalizer.php:130)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/AbstractItemNormalizer.php:105)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/AbstractItemNormalizer.php:130)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Hydra/Serializer/CollectionNormalizer.php:62)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Hydra/Serializer/PartialCollectionViewNormalizer.php:50)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Hydra/Serializer/CollectionFiltersNormalizer.php:53)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/JsonLd/Serializer/ObjectNormalizer.php:44)"} []
[2023-11-16 17:56:38] request.CRITICAL: Uncaught PHP Exception Symfony\Component\Ldap\Exception\LdapException: "Could not initiate TLS connection: Can't contact LDAP server" at /var/www/html/suitecrm/sales/vendor/symfony/ldap/Adapter/ExtLdap/Connection.php line 162 {"exception":"[object] (Symfony\\Component\\Ldap\\Exception\\LdapException(code: 0): Could not initiate TLS connection: Can't contact LDAP server at /var/www/html/suitecrm/sales/vendor/symfony/ldap/Adapter/ExtLdap/Connection.php:162)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/SerializerContextBuilder.php:41)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/SerializerFilterContextBuilder.php:40)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: The listener "ApiPlatform\Core\EventListener\ReadListener" is deprecated and will be replaced by "ApiPlatform\Symfony\EventListener\ReadListener" in 3.0. {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: The listener \"ApiPlatform\\Core\\EventListener\\ReadListener\" is deprecated and will be replaced by \"ApiPlatform\\Symfony\\EventListener\\ReadListener\" in 3.0. at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Core/EventListener/ReadListener.php:66)"} []
[2023-11-16 17:56:38] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Symfony/EventListener/DeserializeListener.php:63)"} []

maverickws · 16 November 2023 18:16

More findings:

Despite having the moved .env.local I’m still getting these
request.CRITICAL: Uncaught PHP Exception Symfony\Component\Ldap\Exception\LdapException: "Could not initiate TLS connection: Can't contact LDAP server" at /var/www/html/suitecrm/sales/vendor/symfony/ldap/Adapter/ExtLdap/Connection.php line 162 {"exception":"[object] (Symfony\\Component\\Ldap\\Exception\\LdapException(code: 0): Could not initiate TLS connection: Can't contact LDAP server at /var/www/html/suitecrm/sales/vendor/symfony/ldap/Adapter/ExtLdap/Connection.php:162)"} []

So about this:
This appears because the .env file has the whole LDAP section uncommented.
I commented it all, and when I do I get a 500 error from SuiteCRM.

So I moved back the local env file to .env.local without uncommenting the LDAP section on the .env

No more 500 error, only back to the initial error. Didn’t excpect a 500 error just for commenting the empty sample of LDAP on .env

[2023-11-16 18:13:56] request.INFO: Matched route "index". {"route":"index","route_parameters":{"_route":"index","_controller":"App\\Engine\\Controller\\IndexController::index"},"request_uri":"https://sales.domain.tld/","method":"GET"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Symfony/EventListener/AddFormatListener.php:53)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Symfony/EventListener/QueryParameterValidateListener.php:52)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: The service "ApiPlatform\Core\Api\IdentifiersExtractor" is deprecated, use ApiPlatform\Api\IdentifiersExtractor instead. {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: The service \"ApiPlatform\\Core\\Api\\IdentifiersExtractor\" is deprecated, use ApiPlatform\\Api\\IdentifiersExtractor instead. at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Core/Api/IdentifiersExtractor.php:49)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Core/JsonSchema/SchemaFactory.php:70)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Core/Swagger/Serializer/DocumentationNormalizer.php:170)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: The service "ApiPlatform\Core\Bridge\Symfony\Routing\IriConverter" is deprecated, use ApiPlatform\Symfony\Routing\IriConverter instead. {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: The service \"ApiPlatform\\Core\\Bridge\\Symfony\\Routing\\IriConverter\" is deprecated, use ApiPlatform\\Symfony\\Routing\\IriConverter instead. at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Core/Bridge/Symfony/Routing/IriConverter.php:67)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/JsonLd/ContextBuilder.php:76)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: The $exceptionOnNoToken parameter in "ApiPlatform\Symfony\Security\ResourceAccessChecker::__construct()" is deprecated and will always be false in 3.0, you should stop using it. {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: The $exceptionOnNoToken parameter in \"ApiPlatform\\Symfony\\Security\\ResourceAccessChecker::__construct()\" is deprecated and will always be false in 3.0, you should stop using it. at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Symfony/Security/ResourceAccessChecker.php:49)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Hydra/Serializer/DocumentationNormalizer.php:77)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Hydra/Serializer/EntrypointNormalizer.php:46)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Hydra/Serializer/EntrypointNormalizer.php:51)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/AbstractItemNormalizer.php:105)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/AbstractItemNormalizer.php:130)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/JsonLd/Serializer/ItemNormalizer.php:55)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/AbstractItemNormalizer.php:105)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/AbstractItemNormalizer.php:130)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/AbstractItemNormalizer.php:105)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/AbstractItemNormalizer.php:130)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Hydra/Serializer/CollectionNormalizer.php:62)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Hydra/Serializer/PartialCollectionViewNormalizer.php:50)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Hydra/Serializer/CollectionFiltersNormalizer.php:53)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use an implementation of "ApiPlatform\Api\IriConverterInterface" instead of "ApiPlatform\Core\Api\IriConverterInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use an implementation of \"ApiPlatform\\Api\\IriConverterInterface\" instead of \"ApiPlatform\\Core\\Api\\IriConverterInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/JsonLd/Serializer/ObjectNormalizer.php:44)"} []
[2023-11-16 18:13:56] request.CRITICAL: Uncaught PHP Exception Symfony\Component\DependencyInjection\Exception\EnvNotFoundException: "Environment variable not found: "LDAP_HOST"." at /var/www/html/suitecrm/sales/vendor/symfony/dependency-injection/EnvVarProcessor.php line 172 {"exception":"[object] (Symfony\\Component\\DependencyInjection\\Exception\\EnvNotFoundException(code: 0): Environment variable not found: \"LDAP_HOST\". at /var/www/html/suitecrm/sales/vendor/symfony/dependency-injection/EnvVarProcessor.php:172)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/SerializerContextBuilder.php:41)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Serializer/SerializerFilterContextBuilder.php:40)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: The listener "ApiPlatform\Core\EventListener\ReadListener" is deprecated and will be replaced by "ApiPlatform\Symfony\EventListener\ReadListener" in 3.0. {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: The listener \"ApiPlatform\\Core\\EventListener\\ReadListener\" is deprecated and will be replaced by \"ApiPlatform\\Symfony\\EventListener\\ReadListener\" in 3.0. at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Core/EventListener/ReadListener.php:66)"} []
[2023-11-16 18:13:56] php.INFO: User Deprecated: Since api-platform/core 2.7: Use "ApiPlatform\Metadata\Resource\Factory\ResourceMetadataCollectionFactoryInterface" instead of "ApiPlatform\Core\Metadata\Resource\Factory\ResourceMetadataFactoryInterface". {"exception":"[object] (ErrorException(code: 0): User Deprecated: Since api-platform/core 2.7: Use \"ApiPlatform\\Metadata\\Resource\\Factory\\ResourceMetadataCollectionFactoryInterface\" instead of \"ApiPlatform\\Core\\Metadata\\Resource\\Factory\\ResourceMetadataFactoryInterface\". at /var/www/html/suitecrm/sales/vendor/api-platform/core/src/Symfony/EventListener/DeserializeListener.php:63)"} []

There is no AUTH_TYPE=LDAP in .env, only AUTH_TYPE=native at line 26

pgr · 16 November 2023 18:21

A stack-trace on that CRITICAL LDAP error could be a useful bit of information to help diagnose. If you’re not using LDAP, then the question becomes, which part of the code is trying to initialize it with broken configs?

maverickws · 16 November 2023 18:26

@pgr

You understood it wrong.

I was using LDAP.
After update, auth fails
2.1 504 gateway timeout - timeout thresholds increased
2.2 Login credentials incorrect, please try again.
moved the .env.local config (posted above) somewhere else, so only .env is in effect (which has no LDAP config):
3.1 Fails authentication - Login credentials incorrect
Opened .env to analyse it, has the whole empty LDAP section UNCOMMENTED. So I comment it.
4.1 500 Error (posted above)

So I can’t login neither with my previous and working LDAP configuration, NOR without it.

pgr · 16 November 2023 18:30

Ok sorry, I get it now.

The stack trace should still be useful…

maverickws · 16 November 2023 18:33

I bet it would but I have other things to do, I am not a developer (as you know) I don’t have a development environment set up to be running stack traces. I’m sorry, really am.
Barely using SuiteCRM for a couple of basics, and can’t even do it properly because it looks like something hanging with scotch-tape. One upgrade to a minor (8.4.1 to 8.4.2) and I’m being asked about changes to the LDAP service … ok: there were none. Did some to SuiteCRM though. (said upgrade, right).

More importantly if you all don’t mind, what is the proper command to revert the upgrade? Or should I just go for a restore of the whole server?

maverickws · 16 November 2023 19:00

# openssl s_client -verify 5 -connect idserver.domain.tld:636
verify depth is 5
CONNECTED(00000003)
depth=1 O = DOMAIN.TLD, CN = Certificate Authority
verify return:1
depth=0 O = DOMAIN.TLD, CN = idserver.domain.tld
verify return:1
---
Certificate chain
 0 s:O = DOMAIN.TLD, CN = idserver.domain.tld
   i:O = DOMAIN.TLD, CN = Certificate Authority
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: May  5 20:02:43 2022 GMT; NotAfter: May  5 20:02:43 2024 GMT
 1 s:O = DOMAIN.TLD, CN = Certificate Authority
   i:O = DOMAIN.TLD, CN = Certificate Authority
   a:PKEY: rsaEncryption, 3072 (bit); sigalg: RSA-SHA256
   v:NotBefore: May  5 20:00:16 2022 GMT; NotAfter: May  5 20:00:16 2042 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
subject=O = DOMAIN.TLD, CN = idserver.domain.tld
issuer=O = DOMAIN.TLD, CN = Certificate Authority
---
Acceptable client certificate CA names
O = DOMAIN.TLD, CN = Certificate Authority
Requested Signature Algorithms: ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:0x03+0x02:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512:0x01+0x02
Shared Requested Signature Algorithms: ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 3116 bytes and written 416 bytes
Verification: OK
---
New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 0 (ok)
---
DONE

# openssl s_client -verify 5 -connect idserver.domain.tld:636  < /dev/null | awk '/BEGIN/,/END/{ if(/BEGIN/)    {a++}; out="suite-ldap-cert-check"a".pem"; print >out}' 
verify depth is 5
depth=1 O = DOMAIN.TLD, CN = Certificate Authority
verify return:1
depth=0 O = DOMAIN.TLD, CN = idserver.domain.tld
verify return:1
DONE

# for cert in *.pem; do openssl verify -show_chain $cert ; done 
suite-ldap-cert-check1.pem: OK
Chain:
depth=0: O = DOMAIN.TLD, CN = idserver.domain.tld
depth=1: O = DOMAIN.TLD, CN = Certificate Authority

maverickws · 16 November 2023 19:32

Restored server from backup, all working again.
Never forget them backups. I’ll check back in 8.4.3.

My only problem now is this. Thank you.

pgr · 16 November 2023 20:33

I don’t think there’s any way to revert the upgrade. The correct thing to do is revert to backups or snapshots.

The stack traces can be obtained from configuration settings, without any IDE set up.

I haven’t tried these myself in quite a while, I’ve made my own logging system, see this PR, but…

You can use a SuiteCRM config_override setting called $sugar_config[‘stack_trace_errors’] = true;, see this for details.

And I think there is also a generic PHP setting, but I couldn’t find it just now. There are also option in Symfony, regarding “dev” environment…

maverickws · 17 November 2023 09:46

Hi @pgr thank you for your reply and sorry if I was a bit blunt earlier, but this sort of problems should be checked out either by proper testing routines or a beta community that does not exist.

Unfortunately while SalesAgility maintains a wall between the community and themselves, less and less people take the risk of adopting and promoting SuiteCRM, much less be running beta test instances. What exactly SalesAgility presents to its community to encourage that?
I think it’s just a shame. It’s development could be years ahead. (and its not by lack of community trying and contributing).

But as we talked before, I’m not a developer, been looking at SuiteCRM as a candidate for potencial inclusion on projects. However, I’m still waiting for a very simple question my company addressed the SalesAgility Public Relations. In October 6th.

What is the trust on a company that acts this way?

I’m just waiting to see how long it will take to acknowledge the problems of the new release.

serhiisamko · 17 November 2023 11:04

Hello @maverickws.

Thank you one more time for the feedback,

our suggestion yesterday was more of a suggestion for a sanity check.

We understand your concerns and appreciate the feedback and more details given.

We’ve created the following GitHub issue: Enable Notifications Unable to login after 8.4.2 upgrade · Issue #398 · salesagility/SuiteCRM-Core · GitHub.

And we are going to assign a certain level of priority to the issue.

Yet many thanks again!

maverickws · 17 November 2023 11:10

Hi @serhiisamko thank you for your reply.

For sake of completion the Browser complete version is:

Safari - Version 17.0 (17616.1.27.111.22, 17616) - macOS Monterey 12.7

Cheers

serhiisamko · 17 November 2023 11:26

Great, updated.
Thank you very much @maverickws!

DJuser · 22 November 2023 10:49

@serhiisamko
well done, that was an impressively fast response.

Jack_Anderson · 15 December 2023 08:29

Hi @maverickws,

After further investigation we are unable to replicate your issue.

This is the configuration I am using:

AUTH_TYPE=ldap
###> LDAP CONFIG ###
LDAP_HOST='ldap.hostname'
LDAP_PORT=389
LDAP_ENCRYPTION=tls
LDAP_PROTOCOL_VERSION=3
LDAP_REFERRALS=false
LDAP_DN_STRING='cn=admin,dc=example,dc=it'
LDAP_QUERY_STRING='mail={username}'
LDAP_SEARCH_DN='cn=admin,dc=example,dc=it'
LDAP_SEARCH_PASSWORD='LDAP_SEARCH_PASSWORD'

PHP version: 8.2
Browsers tested: Chrome + Safari
SuiteCRM tested versions: 8.4.1 → 8.4.2, and 8.4.2 alone

Completed the upgrade following the docs: Upgrading :: SuiteCRM Documentation

I also see that you tried reverting back to native login and this was unsuccessful, when making this change it won’t take effect until you have cleared cache (using ./bin/console cache:clear).

Another factor which could be causing issues is your certificate, I would ensure that your certificate is not expired and that it is being loaded correctly

Thanks,

Jack

maverickws · 22 January 2024 12:55

Hi Jack,

Thank you for your reply and follow up and sorry for my delay.
Been out these last weeks so haven’t been able to follow up on all the situations, but I’ll address this as soon as possible.

I always update using the method you referenced, but I have a question regarding the LDAP config:
you’re showing a rather simple and minimalist version of the LDAP config.

My configuration though has three parts:

LDAP CONFIG at the .env file;
LDAP AUTO CREATE CONFIG at the .env file;
an ldap.yaml file at extensions/my-package/config/services/ldap/ldap.yaml as per the documentation.

This is a current working configuration. I wonder if all sections are still supported and/or if this is going to be simplified in the future.

I’ll let you know how it went as soon as I run the upgrade.

maverickws · 23 January 2024 15:44

After new upgrade to 8.5.0 the problem persists.

This is the error:

[2024-01-23 15:38:11] request.CRITICAL: Uncaught PHP Exception Symfony\Component\Ldap\Exception\LdapException: "Could not complete search with dn "", query "" and filters "*". LDAP error was [2] Protocol error." at /var/www/html/suitecrm/vendor/symfony/ldap/Adapter/ExtLdap/Query.php line 133 {"exception":"[object] (Symfony\\Component\\Ldap\\Exception\\LdapException(code: 0): Could not complete search with dn \"\", query \"\" and filters \"*\". LDAP error was [2] Protocol error. at /var/www/html/suitecrm/vendor/symfony/ldap/Adapter/ExtLdap/Query.php:133)"} []

The config at .env.local:

###> LDAP CONFIG ###
LDAP_HOST='idserver.domain.tld'
LDAP_PORT=389
LDAP_ENCRYPTION=tls
LDAP_PROTOCOL_VERSION=3
LDAP_REFERRALS=false
LDAP_DN_STRING='dc=domain,dc=tld'
LDAP_QUERY_STRING='uid={username}'
LDAP_SEARCH_DN='uid=bind-user,cn=sysaccounts,cn=etc,dc=domain,dc=tld'
LDAP_SEARCH_PASSWORD='bind-password'
###< LDAP CONFIG ###
###> LDAP AUTO CREATE CONFIG ###
LDAP_AUTO_CREATE=enabled
LDAP_PROVIDER_BASE_DN='cn=accounts,dc=domain,dc=tld'
LDAP_PROVIDER_SEARCH_DN='uid=bind-user,cn=sysaccounts,cn=etc,dc=domain,dc=tld'
LDAP_PROVIDER_SEARCH_PASSWORD='bind-password'
LDAP_PROVIDER_DEFAULT_ROLES=ROLE_USER
LDAP_PROVIDER_UID_KEY='(uid={username})'
LDAP_PROVIDER_FILTER='(memberOf=cn=sales,cn=groups,cn=accounts,dc=domain,dc=tld)'
###< LDAP AUTO CREATE CONFIG ###

maverickws · 23 January 2024 16:55

I’ve redacted the empty LDAP CONFIG at .env which I assume was conflicting with the one in .env.local

Now when I attempt to login I get wrong login details, and zero errors on the logs.

@Jack_Anderson

Error message:

Login credentials incorrect, please try again.

P.S. - they are not.

chris001 · 23 January 2024 21:20

Here’s that line 133 of the symfony LDAP version 5.2:

github.com

symfony/ldap/blob/7d947f93b1c6d59902c8e2db49ff9a1ea68c0fdf/Adapter/ExtLdap/Query.php#L133


      
          
          if (false === $search) {
              $ldapError = '';
              if ($errno = ldap_errno($con)) {
                  $ldapError = sprintf(' LDAP error was [%d] %s', $errno, ldap_error($con));
              }
              if ($pageControl) {
                  $this->resetPagination();
              }
          
              throw new LdapException(sprintf('Could not complete search with dn "%s", query "%s" and filters "%s".%s.', $this->dn, $this->query, implode(',', $this->options['filter']), $ldapError));
          }
          
          $this->results[] = $search;
          $itemsLeft -= min($itemsLeft, $pageSize);
          
          if (0 !== $maxItems && 0 === $itemsLeft) {
              break;
          }
          if ($pageControl) {
              $cookie = $this->controlPagedResultResponse($con, $search, $cookie);

The log message says it’s Error 2, because it’s getting an empty dn, empty Query String, and no search Filters.

What is “LDAP error [2] Protocol Error” ?

https://www.openldap.org/doc/admin24/appendix-ldap-result-codes.html

H.5. protocolError (2)

Indicates the server received data that is not well-formed.

For Bind operation only, this code is also used to indicate that the server does not support the requested protocol version.

For Extended operations only, this code is also used to indicate that the server does not support (by design or configuration) the Extended operation associated with the requestName.

For request operations specifying multiple controls, this may be used to indicate that the server cannot ignore the order of the controls as specified, or that the combination of the specified controls is invalid or unspecified.

Whcih version of OpenLDAP server are you running, 2.6.3? 2.6.6?

maverickws · 23 January 2024 21:51

Dear Chris,

Thank you for your time and your reply.
As I mentioned, reading the error it came to me that the issue was being provoked by an overlap between .env and .env.local.

While my LDAP CONFIG is at .env.local, I realised there was an empty and uncommented section of LDAP CONFIG at the .env file.
Naturally, it had no configuration. Hence the error. (although this didn’t happen in version 8.4.1)

Now, why the .env section is uncommented, and if should it be considered when there’s an override at .env.local, that’s a different story.

Also, I mentioned how I have commented those lines in the .env file. Since, that error stopped, and it’s now ingesting the .env.local configuration.

Still I am unable to login, as I get

Login credentials incorrect, please try again.

and absolutely no output in the logs.

I am not using OpenLDAP, I’m using Red Hat IDM, version 4.9.12. (LDAP based on 389 Directory Server)