On 11 Apr 2006, at 14:55, Olivier Grisel wrote:
lopez adrian a écrit :
Here the Trace log of an attempt to authenticate with LDAP :
2006-04-11T14:41:25 TRACE searchLDAP Searching cache for {'filter': '(&(objectClass=inetOrgPerson)(uid=alopezrufian))', 'scope': 2, 'base': 'ou=Labege,ou=People,o=Astek,dc=robinson', 'attrs': ['cn', 'cpsGroups', 'cpsRoles', 'dn', 'givenName', 'mail', 'o', 'ou', 'postalAddress', 'sn', 'telephoneNumber', 'title', 'uid', 'userPassword']}
------
2006-04-11T14:41:25 TRACE searchLDAP search_s base=ou=Labege,ou=People,o=Astek,dc=robinson scope=2
                             ^^^^^
[snip]
2006-04-11T14:41:25 DEBUG getUserWithAuthentication KeyError ('uid=alopezrufian,ou=Labege,ou=People,o=ASTEK,dc=robinson') for user
                                           ^^^^^
LDAP is a case sensitive protocol.

Actually it depends on the attributeTypes and matchingRoles of the LDAP attributes. Many are case insensitive in LDAP itself. However CPS does case sensitive comparisons for the cases where it has to, so it's a good idea to be consistent.

Florent

Change the configuration of the search base so that it actually matches you LDAP settings.

2006-04-11T14:41:25 TRACE txn.508 commit
authentification failed... but the password was correct.
Did LDAPSetup attempt to load the password and to compare it with the one given with the user? I see something strange in my members_LDAP folder, the Password encryption is "none" and i cant change it to SMD5. Is that normal??

This has been fixed in recent CPSDirectory (ie nightly builds). However MD5 is not yet supported (just SSHA and plain text so far).


--
Florent Guillaume, Nuxeo (Paris, France)   Director of R&D
+33 1 40 33 71 59   http://nuxeo.com   [EMAIL PROTECTED]


_______________________________________________
cps-devel mailing list
http://lists.nuxeo.com/mailman/listinfo/cps-devel

Reply via email to