The LDAP package has not significantly changed since 2018 https://github.com/joomla-framework/ldap/commits/2.0-dev

We are not using the Framework LDAP package but symfony/ldap in 4.0

I cannot replicate this.

I can login with any LDAP user.

Running LDAP in docker (Documentation)

docker run --rm -p 10389:10389 -p 10636:10636 rroemhild/test-openldap

and then with my configuration

Login with Username: amy Password: amy

After logging back in to the backend,

Promoted amy to a super admin, then attempted to login to admin - and that worked too.

Translation

After I made it from 3.10 to Joomla 4.0 yesterday, everything went almost smoothly. However, I was shown the following when I wanted to go to the posts, categories and main entries: the following error message: Class 'JPlatform' not found
After that, I gradually deactivated plugins and components, but the error message persisted.
At some point I logged out and when I wanted to log in again, this error message came up: An error occurred. 0 The option "host" with value null is expected to be of type "string", but is of type "null".

So maybe an upgrade issue, but certainly not an issue out of the box.

As you cannot login you will need to access the db directly and check the settings for the LDAP. (Or enable the Joomla Authentication plugin and login with a known good joomla user/pass)

You need to check the settings in the db #__extensions table, look for plg_authentication_ldap in the name and look at the params, for reference mine are:

{"host":"host.docker.internal","port":10389,"use_ldapV3":1,"negotiate_tls":0,"ignore_reqcert_tls":1,"no_referrals":1,"auth_method":"search","base_dn":"ou=people,dc=planetexpress,dc=com","search_string":"uid=[search]","users_dn":"cn=[username],dc=planetexpress,dc=com","username":"admin","password":"GoodNewsEveryone","ldap_fullname":"displayName","ldap_email":"mail","ldap_uid":"uid","ldap_debug":1}

made pretty for viewing:

{
  "host": "host.docker.internal",
  "port": 10389,
  "use_ldapV3": 1,
  "negotiate_tls": 0,
  "ignore_reqcert_tls": 1,
  "no_referrals": 1,
  "auth_method": "search",
  "base_dn": "ou=people,dc=planetexpress,dc=com",
  "search_string": "uid=[search]",
  "users_dn": "cn=[username],dc=planetexpress,dc=com",
  "username": "admin",
  "password": "GoodNewsEveryone",
  "ldap_fullname": "displayName",
  "ldap_email": "mail",
  "ldap_uid": "uid",
  "ldap_debug": 1
}

Thanks for checking @PhilETaylor will report your findings back to him when I'm back at my desk later today. So it might be solved by going to the settings and check and save the configurations again.

as we have no details other than it was an upgrade, I can only assume.

What I have proved is that the feature - when correctly configured (to a known LDAP server) correctly works as advertised.

..... and that @wilsonge probably did not need to tag the framework ldap package 2 days ago :)

We decided removing the package at the last minute would probably annoy someone in an extension somewhere even if it wasn't used by core. It was a discussion in the last 24 hours.

Hallo @PhilETaylor

do you mean the file? Sorry, I'm only a user and don't really know about databases etc..

			<field
				name="port"
				type="number"
				label="PLG_LDAP_FIELD_PORT_LABEL"
				min="1"
				max="65535"
				default="389"
				hint="389"
				validate="number"
				filter="integer"
				size="5"
			/>

			<field
				name="use_ldapV3"
				type="radio"
				layout="joomla.form.field.radio.switcher"
				label="PLG_LDAP_FIELD_V3_LABEL"
				default="0"
				filter="integer"
				>
				<option value="0">JNO</option>
				<option value="1">JYES</option>
			</field>

			<field
				name="negotiate_tls"
				type="radio"
				label="PLG_LDAP_FIELD_NEGOCIATE_LABEL"
				default="0"
				filter="integer"
				layout="joomla.form.field.radio.switcher"
				>
				<option value="0">JNO</option>
				<option value="1">JYES</option>
			</field>

			<field
				name="ignore_reqcert_tls"
				type="radio"
				label="PLG_LDAP_FIELD_IGNORE_REQCERT_TLS_LABEL"
				description="PLG_LDAP_FIELD_IGNORE_REQCERT_TLS_DESC"
				default="0"
				filter="integer"
				layout="joomla.form.field.radio.switcher"
				>
				<option value="0">JNO</option>
				<option value="1">JYES</option>
			</field>

			<field
				name="no_referrals"
				type="radio"
				label="PLG_LDAP_FIELD_REFERRALS_LABEL"
				default="0"
				filter="integer"
				layout="joomla.form.field.radio.switcher"
				>
				<option value="0">JNO</option>
				<option value="1">JYES</option>
			</field>

			<field
				name="auth_method"
				type="list"
				label="PLG_LDAP_FIELD_AUTHMETHOD_LABEL"
				default="bind"
				validate="options"
				>
				<option value="search">PLG_LDAP_FIELD_VALUE_BINDSEARCH</option>
				<option value="bind">PLG_LDAP_FIELD_VALUE_BINDUSER</option>
			</field>

			<field
				name="base_dn"
				type="text"
				label="PLG_LDAP_FIELD_BASEDN_LABEL"
				size="20"
			/>

			<field
				name="search_string"
				type="text"
				label="PLG_LDAP_FIELD_SEARCHSTRING_LABEL"
				description="PLG_LDAP_FIELD_SEARCHSTRING_DESC"
				size="20"
			/>

			<field
				name="users_dn"
				type="text"
				label="PLG_LDAP_FIELD_USERSDN_LABEL"
				description="PLG_LDAP_FIELD_USERSDN_DESC"
				size="20"
			/>

			<field
				name="username"
				type="text"
				label="PLG_LDAP_FIELD_USERNAME_LABEL"
				description="PLG_LDAP_FIELD_USERNAME_DESC"
				size="20"
			/>

			<field
				name="password"
				type="password"
				label="PLG_LDAP_FIELD_PASSWORD_LABEL"
				description="PLG_LDAP_FIELD_PASSWORD_DESC"
				size="20"
			/>

			<field
				name="ldap_fullname"
				type="text"
				label="PLG_LDAP_FIELD_FULLNAME_LABEL"
				description="PLG_LDAP_FIELD_FULLNAME_DESC"
				default="fullName"
				size="20"
			/>

			<field
				name="ldap_email"
				type="text"
				label="PLG_LDAP_FIELD_EMAIL_LABEL"
				description="PLG_LDAP_FIELD_EMAIL_DESC"
				default="mail"
				size="20"
			/>

			<field
				name="ldap_uid"
				type="text"
				label="PLG_LDAP_FIELD_UID_LABEL"
				description="PLG_LDAP_FIELD_UID_DESC"
				default="uid"
				size="20"
			/>
			<field
				name="ldap_debug"
				type="radio"
				label="PLG_LDAP_FIELD_LDAPDEBUG_LABEL"
				description="PLG_LDAP_FIELD_LDAPDEBUG_DESC"
				default="0"
				filter="integer"
				layout="joomla.form.field.radio.switcher"
				>
				<option value="0">JNO</option>
				<option value="1">JYES</option>
			</field>
		</fieldset>
	</fields>
</config>

meinst du die Datei? Sorry, ich bin nur Anwender und kenne mich nicht wirklich mit Datenbanken etc. aus.

Please run the following on the database (phpmyadmin) to get what @PhilETaylor requested (please replace #__ with your database prefix you can find in the configuration.php.

select params from `#__extensions` where `element` = 'ldap' and `type` = 'plugin';

i entered it exactly like this, but can't find it.

Where did you enter it? You have to replace #__ with your database prefix ;-)

yes I have also done so:

select params from *****_extensions where element = 'ldap' and type = 'plugin';

and where did you entered that command? It should be in phpmyadmin on the database that your joomla 3.10 site runs

I entered the command in the phpmyadmin on the database. And it is the Joomla 4.0

Hmm please send me a database dump to tobias.zulauf@community.joomla.org and I can take a look into it to extract the data Phil is looking for,

Thanks for your help!
This is all a bit much for me right now. I can't really follow the requirements or I have to read up first.
I'll give up for now.

Regards,
Linus.

I can replicate this only when LDAP Plugin is enabled AND if I dont provide a value for the LDAP server address. Therefore I believe this is the root issue - maybe Joomla should validate it, maybe it could be put down to user error?

#35233 will prevent people locking themselves out of Joomla and will allow other authentication methods to run even if LDAP is unconfigured.

Thnaks @PhilETaylor