Activities of "mostafa_ibrahem22@hotmail.com"

how make these "You return a LoggedOutView that includes iframe that calls the callback of the other clients."?

implement front-channel or back-channel logout mechanism to the external identityserver already exists but how call SignOut("cookies","oidc"); in abp identityserver.

please write full code for solution. in normal application without abp can ease implementation,

in normal application SignOut("cookies","oidc"); is enough, but in abp with angular how can get id_token to call end session in external Idsv.

which page can I write this code?

hi,

sorry maliming, because of this critical information,

I Made new LdapExternalLoginProvider extened from ExternalLoginProviderBase, and remove old LdapExternalLoginProvider and register new code LdapExternalLoginProvider. and the code worked fine. if you can enhance code or resolve the problem, many thanks

I used (System.DirectoryServices.AccountManagement)

thanks maliming for your support.

using System; using System.Threading.Tasks; using Microsoft.AspNetCore.Identity; using Microsoft.Extensions.Logging; using Microsoft.Extensions.Logging.Abstractions; using Microsoft.Extensions.Options; using Volo.Abp.Account.Feature; using Volo.Abp.Account.Settings; using Volo.Abp.DependencyInjection; using Volo.Abp.Features; using Volo.Abp.Guids; using Volo.Abp.Identity; using Volo.Abp.Ldap; using Volo.Abp.MultiTenancy; using Volo.Abp.Settings; using Volo.Abp.Account.Public.Web.Ldap; using System.DirectoryServices.Protocols; using System.DirectoryServices.AccountManagement;

namespace XXXX.Sso.Ldap { public class XXXXLdapExternalLoginProvider : ExternalLoginProviderBase, ITransientDependency { public const string Name = "Ldap";

    public ILogger<LdapExternalLoginProvider> Logger { get; set; }

    protected ILdapSettingProvider LdapSettingProvider { get; }

    protected IFeatureChecker FeatureChecker { get; }

    protected ISettingProvider SettingProvider { get; }

    public XXXXLdapExternalLoginProvider(IGuidGenerator guidGenerator,
        ICurrentTenant currentTenant,
        IdentityUserManager userManager,
        IIdentityUserRepository identityUserRepository,
        ILdapSettingProvider ldapSettingProvider,
        IFeatureChecker featureChecker,
        ISettingProvider settingProvider,
        IOptions<IdentityOptions> identityOptions)
            : base(guidGenerator,
                currentTenant,
                userManager,
                identityUserRepository,
                identityOptions)
    {
        LdapSettingProvider = ldapSettingProvider;
        FeatureChecker = featureChecker;
        SettingProvider = settingProvider;

        Logger = NullLogger<LdapExternalLoginProvider>.Instance;
    }

    public override async Task<bool> TryAuthenticateAsync(string userName, string plainPassword)
     {
        Logger.LogInformation("Try to use LDAP for external authentication");

        if (!await FeatureChecker.IsEnabledAsync(AccountFeature.EnableLdapLogin))
        {
            Logger.LogWarning("Ldap login feature is not enabled!");
            return false;
        }

        if (!await SettingProvider.IsTrueAsync(AccountSettingNames.EnableLdapLogin))
        {
            Logger.LogWarning("Ldap login setting is not enabled!");
            return false;
        }

        return await AuthenticateAsync(userName, plainPassword);
    }

    protected override async Task<ExternalLoginUserInfo> GetUserInfoAsync(string userName)
    {
        var email = await GetUserEmailAsync(userName);
        if (email.IsNullOrWhiteSpace())
        {
            throw new Exception("Unable to get the email of ldap user!");
        }
        return new ExternalLoginUserInfo(email);
    }

    private async Task<bool> AuthenticateAsync(string userName, string password)
    {
        string serverHost = await LdapSettingProvider.GetServerHostAsync();
        int serverPort = await LdapSettingProvider.GetServerPortAsync();
        string userNameAuth = await LdapSettingProvider.GetUserNameAsync();
        string passwordAuth = await LdapSettingProvider.GetPasswordAsync();

        try
        {
            using (LdapConnection conn = new LdapConnection(new LdapDirectoryIdentifier(serverHost, serverPort)))
            {
                conn.Bind(new System.Net.NetworkCredential(userName, password, serverHost));
                return true;
            }
        }
        catch (LdapException e)
        {
            Logger.LogException(e);
        }

        return false;
    }

    private async Task<string> GetUserEmailAsync(string userName)
    {
        string serverHost = await LdapSettingProvider.GetServerHostAsync();
        int serverPort = await LdapSettingProvider.GetServerPortAsync();
        string userNameAuth = await LdapSettingProvider.GetUserNameAsync();
        string passwordAuth = await LdapSettingProvider.GetPasswordAsync();

        try
        {

#pragma warning disable CA1416 // Validate platform compatibility using (PrincipalContext context = new PrincipalContext(ContextType.Domain, serverHost, userNameAuth, passwordAuth)) using (UserPrincipal principal = UserPrincipal.FindByIdentity(context, IdentityType.SamAccountName, userName)) { return principal.EmailAddress; } #pragma warning restore CA1416 // Validate platform compatibility } catch (LdapException e) { Logger.LogException(e); }

        return string.Empty;
    }

}

}

[Dependency(ReplaceServices = true)]
[ExposeServices(typeof(OpenLdapManager), typeof(ILdapManager), typeof(LdapManager))]
public class VoloOpenLdapManager : OpenLdapManager
{
    public VoloOpenLdapManager(ILdapSettingProvider ldapSettingProvider)
        : base(ldapSettingProvider)
    {

    }

    protected override async Task<string> NormalizeUserNameAsync(string userName)
    {
        return Task.FromResult($"mydc\\{userName}");
    }

    protected override Task<string> GetUserFilterAsync(string userName)
    {
        return return Task.FromResult($"(&(objectClass=user)(sAMAccountName={userName}))");
    }

    protected override Task<string> GetUserEmailAsync(LdapEntry ldapEntry)
    {
        return Task.FromResult(ldapEntry.ToDirectoryEntry().GetAttribute("mail")?.GetValue<string>());
    }
}


public class VoloLdapExternalLoginProvider : LdapExternalLoginProvider
{
    public VoloLdapExternalLoginProvider(
        IGuidGenerator guidGenerator,
        ICurrentTenant currentTenant,
        IdentityUserManager userManager,
        IIdentityUserRepository identityUserRepository,
        OpenLdapManager ldapManager,
        ILdapSettingProvider ldapSettingProvider,
        IFeatureChecker featureChecker,
        ISettingProvider settingProvider,
        IOptions<IdentityOptions> identityOptions)
        : base(guidGenerator,
            currentTenant,
            userManager,
            identityUserRepository,
            ldapManager,
            ldapSettingProvider,
            featureChecker,
            settingProvider,
            identityOptions)
    {

    }

    protected override async Task<string> NormalizeUserNameAsync(string userName)
    {
        // Default is $"uid={userName}, {BaseDc}"
        // or "userName@domain 
        // await LdapSettingProvider.GetDomainAsync()
        return Task.FromResult($"mydc\\{userName}");
    }
}



public override void ConfigureServices(ServiceConfigurationContext context)
{
    Configure<AbpIdentityOptions>(options =>
    {
        options.ExternalLoginProviders.Remove(LdapExternalLoginProvider.Name);
        options.ExternalLoginProviders.Add<VoloLdapExternalLoginProvider>(LdapExternalLoginProvider.Name);
    });
}

Hi

using System;
using System.Linq;
using System.Threading.Tasks;
using LdapForNet;
using LdapForNet.Native;

namespace ConsoleApp1
{
    internal class Program
    {
        static async Task Main(string[] args)
        {
            var server = "dc.mydc.com.ae";
            var serverPort = 389;
            var baseDc = "dc=mydc,dc=com,dc=ae";
            var adminUserName = "mydc\\testadminuser";
            var adminPassword = "testadminpassword";
            var testUserName = "testuser";
            var testPassword = "testuserpassword";

            using (var ldapConnection = new LdapConnection())
            {
                ldapConnection.Connect(server, serverPort);
                try
                {
                    await ldapConnection.BindAsync(Native.LdapAuthType.Simple, new LdapCredential
                    {
                        // Configure username according to your LDAP config:
                        // cn=admin,dc=abp,dc=com or just username.
                        UserName = adminUserName,
                        Password = adminPassword
                    });

                    Console.WriteLine($"{adminUserName} login success!");

                    var searchResults = await ldapConnection.SearchAsync(baseDc, $"(&(objectClass=user)(sAMAccountName={testUserName}))");

                    Console.WriteLine();
                    Console.WriteLine($"{testUserName} attributes:");

                    var userEntry = searchResults.First();
                    Console.WriteLine(string.Join(", ", userEntry.ToDirectoryEntry().Attributes));

                    await ldapConnection.BindAsync(Native.LdapAuthType.Simple, new LdapCredential
                    {
                        UserName = userEntry.Dn,
                        Password = testPassword
                    });

                    Console.WriteLine();
                    Console.WriteLine($"{testUserName} login success!");
                }
                catch (Exception e)
                {
                    Console.WriteLine(e);
                }
            }
            Console.ReadKey();

        }
    }
}

same setting with different code working fine

using (LdapConnection conn = new LdapConnection(new LdapDirectoryIdentifier(serverHost, serverPort)))
{
    conn.Bind(new System.Net.NetworkCredential(userName, password, serverHost));
    return true;
}

using (PrincipalContext context = new PrincipalContext(ContextType.Domain, serverHost, userNameAuth, passwordAuth))
using (UserPrincipal principal = UserPrincipal.FindByIdentity(context, IdentityType.SamAccountName, userName))
{
    return principal.EmailAddress;
}
            

Hi,

I made these in the above images in a console application and customize LdapExternalLoginProvider on Identity Server, but the same error appear in both,

hi maliming Thanks for your support

l10n.currentLang$ not exists

I made some changes, please tell me if this code is ok or not, I only support two languages "ar", and "en" only