On Saturday, October 1, 2016 at 11:29:24 AM UTC-6, Anurag Patel wrote: > > On Sat, Oct 1, 2016 at 3:08 AM, Doug Forster <[email protected] > <javascript:>> wrote: > >> Everyone, >> >> I need a little help I have two instances of foreman that I have >> installed. I am planning on upgrading an instance that is behind a F5 so I >> have done the following on the system that worked. >> >> 1. Installed current version on a fresh rhel 7 host. >> 2. Cloned the production database to a new mysql server for testing. >> 3. upgraded from 1.10 to 1.11. >> 4. upgraded to 1.12. >> >> Everything seemed to work fine. >> >> Added a new host and pointed it at the same database and installed >> foreman 1.12. I cannot auth via LDAP on the new host. >> >> This is the error: >> *LdapFluff::Generic::UnauthenticatedException* >> *Could not bind to ActiveDirectory user !LDAPForeman* >> > > [snip] > > >> Foreman Debug output from system that worked: >> HOSTNAME: working.net >> OS: redhat >> RELEASE: Red Hat Enterprise Linux Server release 7.2 (Maipo) >> FOREMAN: 1.12.3 >> RUBY: ruby 2.0.0p598 (2014-11-13) [x86_64-linux] >> PUPPET: 3.8.6 >> DENIALS: 0 >> >> Foreman debug output from system that didn't work: >> HOSTNAME: broken.net >> OS: redhat >> RELEASE: Red Hat Enterprise Linux Server release 7.2 (Maipo) >> FOREMAN: 1.12.3 >> RUBY: ruby 2.0.0p598 (2014-11-13) [x86_64-linux] >> PUPPET: 3.8.6 >> DENIALS: 0 >> >> Each is running under passenger with the tfm-ruby --version >> ruby 2.2.2p95 (2015-04-13 revision 50295) [x86_64-linux] >> >> If you need any other info please let me know. >> > > Were you able to manually bind on the new host using ldapsearch with same > credentials as foreman? Also, see if passenger is able to make ldap > requests (# getsebool -a | grep passenger_can_connect_ldap) > > Anurag >
SeLinux does not seem to be the problem. # getsebool -a | grep passenger_can_connect_ldap getsebool: SELinux is disabled I can bind with ldapsearch on both working and non working nodes. -- You received this message because you are subscribed to the Google Groups "Foreman users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/foreman-users. For more options, visit https://groups.google.com/d/optout.
