Provider [ldap] does not exist.

[luis-gmonkey]

Hello again

I'm having trouble executing php artisan ldap:import I get returned Provider [ldap] does not exist.
I have already implemented the authentication and works like a charm,

I don't know if I can post this here as well but I how can I execute some code after the user is first being imported/syncronized from the login? In my situation I'm using spatie Laravel-Permission and I want to give some permissions/roles to that user after the first login or when it gets imported.

[stevebauman]

Hi @luis-gmonkey,

When calling php artisan ldap:import, you must supply the authentication provider's key if it is not named ldap. For example, in the below config/auth.php file, I have a provider named users:

// config/auth.php

'users' => [
    'driver' => 'ldap',
    'model' => \LdapRecord\Models\ActiveDirectory\User::class,
    'database' => [
        // ...
    ],
],

Then to run the import on this authentication provider, I would execute the below command:

php artisan ldap:import users

Hope this helps!

[stevebauman]

In regards to your second question, I would register a listener on one of the events here:

https://github.com/DirectoryTree/LdapRecord-Laravel/tree/master/src/Events/Import

In your case, you would register a listener in the EventServiceProvider on the LdapRecord Imported event, which gives you access to both the LDAP user who was imported for the first time (or is logging in for the first time and is being imported), along with their saved and synchronized model instance.

The Imported event will have the $object property to access the LDAP object, and the $eloquent property to access the Eloquent model instance:

public function handle(Imported $event)
{
    // Instance of LdapRecord\Models\Model
    $event->object;
    
    // Instance of Illuminate\Database\Eloquent\Model
    $event->eloquent;
}

[luis-gmonkey]

Hi @stevebauman bother you again ain't I? hehehe

Oh damm, I was missing users. -.-'

Can you help me with my second question? Or point me in the right way?

I'll be trying with the boot method of the model, but I'm just asking in case theres already some solution or i could do it better with any method from LdapRecord.

Edit: Thx, @stevebauman you were faster than me. You are the best. =)

[stevebauman]

Always happy to help @luis-gmonkey! Appreciate it 😄

[acharseth]

@stevebauman : I run into the same problem. Since your example auth.php, in Running the command uses provider ldapand you then say:

php artisan ldap:import users

This seems inconsistent som may be you should change the documentation to:

php artisan ldap:import ldap

Agree?

[stevebauman]

Thanks @acharseth, I agree. I've just patched the documentation to all reference the same users provider everywhere 👍

The docs now no longer show any reference to an ldap auth provider.

[bloodykheeng]

@luis-gmonkey ensure to use the right provider and that provider should have ldap

eg see mine am having to providers one for ldap and one for eloquent
config/auth.php

<?php

return [

    /*
    |--------------------------------------------------------------------------
    | Authentication Defaults
    |--------------------------------------------------------------------------
    |
    | This option defines the default authentication "guard" and password
    | reset "broker" for your application. You may change these values
    | as required, but they're a perfect start for most applications.
    |
     */

    'defaults' => [
        'guard' => env('AUTH_GUARD', 'web'),
        'passwords' => env('AUTH_PASSWORD_BROKER', 'users'),
    ],

    /*
    |--------------------------------------------------------------------------
    | Authentication Guards
    |--------------------------------------------------------------------------
    |
    | Next, you may define every authentication guard for your application.
    | Of course, a great default configuration has been defined for you
    | which utilizes session storage plus the Eloquent user provider.
    |
    | All authentication guards have a user provider, which defines how the
    | users are actually retrieved out of your database or other storage
    | system used by the application. Typically, Eloquent is utilized.
    |
    | Supported: "session"
    |
     */

    'guards' => [
        'web' => [
            'driver' => 'session',
            'provider' => 'users',
        ],
        'ldap' => [
            'driver' => 'session',
            'provider' => 'ldap_users', // Separate LDAP provider
        ],
    ],

    /*
    |--------------------------------------------------------------------------
    | User Providers
    |--------------------------------------------------------------------------
    |
    | All authentication guards have a user provider, which defines how the
    | users are actually retrieved out of your database or other storage
    | system used by the application. Typically, Eloquent is utilized.
    |
    | If you have multiple user tables or models you may configure multiple
    | providers to represent the model / table. These providers may then
    | be assigned to any extra authentication guards you have defined.
    |
    | Supported: "database", "eloquent"
    |
     */

    'providers' => [
        'users' => [
            'driver' => 'eloquent',
            'model' => env('AUTH_MODEL', App\Models\User::class),
        ],
        'ldap_users' => [
            'driver' => 'ldap',
            'model' => LdapRecord\Models\OpenLDAP\User::class,
            'rules' => [],
            'scopes' => [],
            'database' => [
                'model' => App\Models\User::class,
                'sync_passwords' => false,
                'sync_attributes' => [
                    'name' => 'cn',
                    'email' => 'mail',
                ],
            ],
        ],

        // 'users' => [
        //     'driver' => 'eloquent',
        //     'model' => env('AUTH_MODEL', App\Models\User::class),
        // ],

        // 'users' => [
        //     'driver' => 'database',
        //     'table' => 'users',
        // ],
    ],

so if i want to login i do this
login controller

public function login(Request $request)
    {

        // Validate the login request
        // $request->validate([
        //     'email' => 'required|string|email',
        //     'password' => 'required|string',
        // ]);

        // Attempt to authenticate via LDAP first
        $ldapCredentials = [
            'mail' => $request->input('email'), // Assuming the email field maps to 'uid' in LDAP
            'password' => $request->input('password'),
        ];

        // normal credentials
        $credentials = $request->only('email', 'password');

        // Use the LDAP guard to attempt login
        try {
            // First, attempt LDAP authentication using the `ldap` guard
            if (!Auth::guard('ldap')->attempt($ldapCredentials)) {
                // If LDAP fails, attempt local database login with the default guard
                if (!Auth::attempt($credentials)) {
                    return response()->json(['message' => 'Invalid Email or Password'], 401);
                }
            }
        } catch (\Exception $e) {
            // Handle LDAP-specific errors in JSON format
            return $this->handleLdapBindError($e->getMessage(), $e->getCode());
        }

see my users modal just in case

namespace App\Models;

// use Illuminate\Contracts\Auth\MustVerifyEmail;
use Illuminate\Database\Eloquent\Factories\HasFactory;
use Illuminate\Foundation\Auth\User as Authenticatable;
use Illuminate\Notifications\Notifiable;
use Illuminate\Support\Str;
use Laravel\Sanctum\HasApiTokens;
use LdapRecord\Laravel\Auth\AuthenticatesWithLdap;
use LdapRecord\Laravel\Auth\HasLdapUser;
use LdapRecord\Laravel\Auth\LdapAuthenticatable;
use Spatie\Permission\Traits\HasRoles;

class User extends Authenticatable implements LdapAuthenticatable
{
    use HasFactory, Notifiable, HasApiTokens, HasRoles, AuthenticatesWithLdap, HasLdapUser;

    /**
     * The attributes that are mass assignable.
     *
     * @var array<int, string>
     */
    protected $fillable = [
        'name',
        'email',
        'password',
        'status',
        'lastlogin',
        'photo_url',
        'agree',

so incase i want to import users i do this
php artisan ldap:import ldap_users

since its the ldap_users provider that has ldap in my config/auth.php