Added some extra logging, along with using reconnect/disconnect for the LDAP connections (not needed as much for this repository, but I think the changes were necessary for the sftpgo-ldap-http-server repository due to it having a long-lived process with the HTTP server.

Author: orware

functions.php

@@ -34,6 +34,7 @@ function authenticateUser() {
 
             // Strip specific organization email domains if provided:
             if (isset($domains_to_strip_automatically)) {
+                logMessage('Username before domain stripping: ' . $data['username']);
                 foreach($domains_to_strip_automatically as $domain) {
                     $domain = '@'.str_replace('@', '', $domain);
                     logMessage('Attempting to strip ' . $domain . ' from provided username.');
@@ -44,7 +45,7 @@ function authenticateUser() {
             foreach($connections as $connectionName => $connection) {
 
                 logMessage('Before connection attempt to ' . $connectionName);
-                $connection->connect();
+                $connection->reconnect();
                 logMessage('After connection attempt to ' . $connectionName);
 
                 $configuration = $connection->getConfiguration();
@@ -68,12 +69,21 @@ function authenticateUser() {
                         // User has been successfully authenticated.
                         logMessage('After authentication attempt for: ' . $data['username'] . ' (success!)');
                         $output = createResponseObject($connectionName, $data['username']);
+
+                        logMessage('Disconnecting from ' . $connectionName);
+                        $connection->disconnect();
                         createResponse($output);
                     } else {
                         // Username or password is incorrect.
                         logMessage('After authentication attempt for: ' . $data['username'] . ' (failed!)');
+
+                        logMessage('Disconnecting from ' . $connectionName);
+                        $connection->disconnect();
                         denyRequest();
                     }
+                } else {
+                   logMessage('Disconnecting from ' . $connectionName);
+                   $connection->disconnect();
                 }
 
                 logMessage('User lookup failed for: ' . $data['username']);
@@ -82,6 +92,7 @@ function authenticateUser() {
         } catch (\LdapRecord\Auth\BindException $e) {
             $error = $e->getDetailedError();
 
+            logMessage($error->getErrorMessage());
             //echo $error->getErrorCode();
             //echo $error->getErrorMessage();
             //echo $error->getDiagnosticMessage();