You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Summary
On RHEL 7.6 we have encountered an authentication bug upon Cacti package upgrade from version 1.1.38 -> 1.2.2
On navigating to the web installer and attempting to log in with an LDAP account, the authentication page crashes (HTML 500).
To Reproduce
Upgrade the Cacti package from EPEL from version 1.1.38 -> 1.2.2 using yum package manager.
Navigate to the Web Installer in a web browser in order to complete the upgrade
Attempt to authenticate with an LDAP account when prompted
Expected behavior
The LDAP account is authenticated and the user is redirected to the web installer
Suspected Cause
It appears that auth_login.php is invoked with working directory <CACTI_PATH>/install/ which causes path resolution in the statement include_once('./lib/ldap.php'); to fail.
In particular, it looks like the path './lib/ldap.php' is resolved to '<CACTI_PATH>/install/lib/ldap.php', a nonexistent file path. Temporarily changing the include statement to read include_once(‘lib/ldap.php’); allowed us to successfully login and complete the upgrade.
Desktop:
OS: RHEL 7.6
Browser: Firefox
Version: 66
Additional context
For reference, <CACTI_PATH> is /usr/share/cacti/ on RHEL from the EPEL RPM package.
Summary
On RHEL 7.6 we have encountered an authentication bug upon Cacti package upgrade from version 1.1.38 -> 1.2.2
On navigating to the web installer and attempting to log in with an LDAP account, the authentication page crashes (HTML 500).
To Reproduce
Expected behavior
The LDAP account is authenticated and the user is redirected to the web installer
Suspected Cause
It appears that auth_login.php is invoked with working directory
<CACTI_PATH>/install/
which causes path resolution in the statementinclude_once('./lib/ldap.php');
to fail.cacti/auth_login.php
Line 122 in 6ea486a
In particular, it looks like the path
'./lib/ldap.php'
is resolved to'<CACTI_PATH>/install/lib/ldap.php'
, a nonexistent file path. Temporarily changing the include statement to readinclude_once(‘lib/ldap.php’);
allowed us to successfully login and complete the upgrade.Desktop:
Additional context
The text was updated successfully, but these errors were encountered: