# app/config/security.yml
security:
    encoders:
        FOSUserBundleModelUserInterface: bcrypt

    role_hierarchy:
        ROLE_ADMIN:       ROLE_USER
        ROLE_SUPER_ADMIN: ROLE_ADMIN

    providers:
      chain_provider:
         chain:
            providers: [fos_userbundle, fr3d_ldapbundle]
      fr3d_ldapbundle:
         id: fr3d_ldap.security.user.provider
      fos_userbundle:
         id: fos_user.user_provider.username

    firewalls:
        main:
           pattern: ^/
           fr3d_ldap:  ~
           form_login:
             always_use_default_target_path: true
             default_target_path: /
             csrf_token_generator: security.csrf.token_manager
           logout:       true
           anonymous:    true

    access_control:
        - { path: ^/login$, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/register, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/resetting, role: IS_AUTHENTICATED_ANONYMOUSLY }
        - { path: ^/admin/, role: ROLE_ADMIN }

fos_user:
    db_driver: orm
    firewall_name: main
    user_class: AppBundleEntityUser

fr3d_ldap:
   driver:
      host: ldap.forumsys.com
      username: cn=read-only-admin,dc=example,dc=com
      password: password
   user:
      baseDn: dc=example,dc=com
      attributes:
         - { ldap_attr: uid,  user_method: setUsername }
         - { ldap_attr: mail,  user_method: setEmail }
      filter: (&(ObjectClass=person))

request.INFO: Matched route "fos_user_security_check". {"route":"fos_user_security_check","route_parameters":{"_controller":"FOS\UserBundle\Controller\SecurityController::checkAction","_route":"fos_user_security_check"},"request_uri":"http://127.0.0.1:8000/app_dev.php/login_check","method":"POST"} []
[2017-03-29 20:37:11] doctrine.DEBUG: SELECT t0.username AS username_1, t0.username_canonical AS username_canonical_2, t0.email AS email_3, t0.email_canonical AS email_canonical_4, t0.enabled AS enabled_5, t0.salt AS salt_6, t0.password AS password_7, t0.last_login AS last_login_8, t0.confirmation_token AS confirmation_token_9, t0.password_requested_at AS password_requested_at_10, t0.roles AS roles_11, t0.id AS id_12 FROM fos_user t0 WHERE t0.username_canonical = ? LIMIT 1 ["tesla"] []
[2017-03-29 20:37:11] ldap_driver.DEBUG: ldap_search(dc=example,dc=com, (&(&(ObjectClass=person))(uid=tesla)), [array]) {"action":"ldap_search","base_dn":"dc=example,dc=com","filter":"(&(&(ObjectClass=person))(uid=tesla))","attributes":[]} []
[2017-03-29 20:37:12] security.INFO: User tesla found on LDAP {"action":"loadUserByUsername","username":"tesla","result":"found"} []
[2017-03-29 20:37:12] ldap_driver.DEBUG: ldap_bind(tesla, ****) {"action":"ldap_bind","bind_rdn":"tesla"} []
[2017-03-29 20:37:12] ldap_driver.DEBUG: ZendLdapExceptionLdapException: 0x22 (Invalid DN syntax; invalid DN): tesla in C:UserswackmPhpstormProjectspoemvendorzendframeworkzend-ldapsrcLdap.php:851 Stack trace: #0 C:UserswackmPhpstormProjectspoemvendorfr3dldap-bundleDriverZendLdapDriver.php(82): ZendLdapLdap->bind('tesla', 'password') #1 C:UserswackmPhpstormProjectspoemvendorfr3dldap-bundleLdapLdapManager.php(78): FR3DLdapBundleDriverZendLdapDriver->bind(Object(AppBundleEntityUser), 'password') #2 C:UserswackmPhpstormProjectspoemvendorfr3dldap-bundleSecurityAuthenticationLdapAuthenticationProvider.php(90): FR3DLdapBundleLdapLdapManager->bind(Object(AppBundleEntityUser), 'password') #3 C:UserswackmPhpstormProjectspoemvendorsymfonysymfonysrcSymfonyComponentSecurityCoreAuthenticationProviderUserAuthenticationProvider.php(86): FR3DLdapBundleSecurityAuthenticationLdapAuthenticationProvider->checkAuthentication(Object(AppBundleEntityUser), Object(SymfonyComponentSecurityCoreAuthenticationTokenUsernamePasswordToken)) #4 C:UserswackmPhpstormProjectspoemvarcachedevclasses.php(4613): SymfonyComponentSecurityCoreAuthenticationProviderUserAuthenticationProvider->authenticate(Object(SymfonyComponentSecurityCoreAuthenticationTokenUsernamePasswordToken)) #5 C:UserswackmPhpstormProjectspoemvendorsymfonysymfonysrcSymfonyComponentSecurityHttpFirewallUsernamePasswordFormAuthenticationListener.php(93): SymfonyComponentSecurityCoreAuthenticationAuthenticationProviderManager->authenticate(Object(SymfonyComponentSecurityCoreAuthenticationTokenUsernamePasswordToken)) #6 C:UserswackmPhpstormProjectspoemvendorsymfonysymfonysrcSymfonyComponentSecurityHttpFirewallAbstractAuthenticationListener.php(146): SymfonyComponentSecurityHttpFirewallUsernamePasswordFormAuthenticationListener->attemptAuthentication(Object(SymfonyComponentHttpFoundationRequest)) #7 C:UserswackmPhpstormProjectspoemvarcachedevclasses.php(4528): SymfonyComponentSecurityHttpFirewallAbstractAuthenticationListener->handle(Object(SymfonyComponentHttpKernelEventGetResponseEvent)) #8 [internal function]: SymfonyComponentSecurityHttpFirewall->onKernelRequest(Object(SymfonyComponentHttpKernelEventGetResponseEvent), 'kernel.request', Object(SymfonyComponentHttpKernelDebugTraceableEventDispatcher)) #9 C:UserswackmPhpstormProjectspoemvendorsymfonysymfonysrcSymfonyComponentEventDispatcherDebugWrappedListener.php(106): call_user_func(Array, Object(SymfonyComponentHttpKernelEventGetResponseEvent), 'kernel.request', Object(SymfonyComponentHttpKernelDebugTraceableEventDispatcher)) #10 [internal function]: SymfonyComponentEventDispatcherDebugWrappedListener->__invoke(Object(SymfonyComponentHttpKernelEventGetResponseEvent), 'kernel.request', Object(SymfonyComponentEventDispatcherContainerAwareEventDispatcher)) #11 C:UserswackmPhpstormProjectspoemvarcachedevclasses.php(3273): call_user_func(Object(SymfonyComponentEventDispatcherDebugWrappedListener), Object(SymfonyComponentHttpKernelEventGetResponseEvent), 'kernel.request', Object(SymfonyComponentEventDispatcherContainerAwareEventDispatcher)) #12 C:UserswackmPhpstormProjectspoemvarcachedevclasses.php(3188): SymfonyComponentEventDispatcherEventDispatcher->doDispatch(Array, 'kernel.request', Object(SymfonyComponentHttpKernelEventGetResponseEvent)) #13 C:UserswackmPhpstormProjectspoemvendorsymfonysymfonysrcSymfonyComponentEventDispatcherDebugTraceableEventDispatcher.php(136): SymfonyComponentEventDispatcherEventDispatcher->dispatch('kernel.request', Object(SymfonyComponentHttpKernelEventGetResponseEvent)) #14 C:UserswackmPhpstormProjectspoemvarcachedevclasses.php(4202): SymfonyComponentEventDispatcherDebugTraceableEventDispatcher->dispatch('kernel.request', Object(SymfonyComponentHttpKernelEventGetResponseEvent)) #15 C:UserswackmPhpstormProjectspoemvarcachedevclasses.php(4172): SymfonyComponentHttpKernelHttpKernel->handleRaw(Object(SymfonyComponentHttpFoundationRequest), 1) #16 C:UserswackmPhpstormProjectspoemvendorsymfonysymfonysrcSymfonyComponentHttpKernelKernel.php(168): SymfonyComponentHttpKernelHttpKernel->handle(Object(SymfonyComponentHttpFoundationRequest), 1, true) #17 C:UserswackmPhpstormProjectspoemwebapp_dev.php(28): SymfonyComponentHttpKernelKernel->handle(Object(SymfonyComponentHttpFoundationRequest)) #18 {main} {"exception":"[object] (Zend\Ldap\Exception\LdapException(code: 34): 0x22 (Invalid DN syntax; invalid DN): tesla at C:\Users\wackm\PhpstormProjects\poem\vendor\zendframework\zend-ldap\src\Ldap.php:851)"} []
[2017-03-29 20:37:12] doctrine.DEBUG: SELECT t0.username AS username_1, t0.username_canonical AS username_canonical_2, t0.email AS email_3, t0.email_canonical AS email_canonical_4, t0.enabled AS enabled_5, t0.salt AS salt_6, t0.password AS password_7, t0.last_login AS last_login_8, t0.confirmation_token AS confirmation_token_9, t0.password_requested_at AS password_requested_at_10, t0.roles AS roles_11, t0.id AS id_12 FROM fos_user t0 WHERE t0.username_canonical = ? LIMIT 1 ["tesla"] []
[2017-03-29 20:37:12] ldap_driver.DEBUG: ldap_search(dc=example,dc=com, (&(&(ObjectClass=person))(uid=tesla)), [array]) {"action":"ldap_search","base_dn":"dc=example,dc=com","filter":"(&(&(ObjectClass=person))(uid=tesla))","attributes":[]} []
[2017-03-29 20:37:12] security.INFO: User tesla found on LDAP {"action":"loadUserByUsername","username":"tesla","result":"found"} []
[2017-03-29 20:37:12] security.INFO: Authentication request failed. {"exception":"[object] (Symfony\Component\Security\Core\Exception\BadCredentialsException(code: 0): Bad credentials. at C:\Users\wackm\PhpstormProjects\poem\vendor\symfony\symfony\src\Symfony\Component\Security\Core\Authentication\Provider\UserAuthenticationProvider.php:90, Symfony\Component\Security\Core\Exception\BadCredentialsException(code: 0): The presented password is invalid. at C:\Users\wackm\PhpstormProjects\poem\vendor\symfony\symfony\src\Symfony\Component\Security\Core\Authentication\Provider\DaoAuthenticationProvider.php:67)"} []
[2017-03-29 20:37:12] security.DEBUG: Authentication failure, redirect triggered. {"failure_path":"/login"} []