We have installed a gitlab-ee-6.6.2, and trying to connect to LDAP.
We get an error saying “Could not authorize you from LDAP because "Invalid
credentials"” or “Access denied for your LDAP account.” . I see the user
gets added to the user list but could not login.
Tried other version of gitlab too gitlab-ee-6.7.5 and gitlab-ee-6.8, still
get the same error. Are there any other settings required.
This is what we are doing: in /etc/gitlab/gitlab.rb
gitlab_rails['ldap_enabled'] = true gitlab_rails['ldap_host'] =
'ldap.host.com' gitlab_rails['ldap_port']
= 389 gitlab_rails['ldap_uid'] = 'uid' gitlab_rails['ldap_method'] =
'plain' gitlab_rails['ldap_bind_dn'] = 'uid=,ou=,o='
gitlab_rails['ldap_password'] = ''
gitlab_rails['ldap_allow_username_or_email_login'] = true
gitlab_rails['ldap_base']='ou=’
This is what I see in production.log.
Started POST "/users/auth/ldap/callback" for 127.0.0.1 at 2014-05-16
16:31:56 -0700
Processing by OmniauthCallbacksController#ldap as HTML
Parameters: {"utf8"=>"✓",
"authenticity_token"=>"4TtSg4Aed0EfWP5H1HaEuz96z5t1HoOItpHvxCd83Gk=",
"username"=>”user", "password"=>"[FILTERED]"}
Redirected to http://hostname/users/sign_in
Completed 302 Found in 340ms (ActiveRecord: 120.4ms)
Started GET "/users/sign_in" for 127.0.0.1 at 2014-05-16 16:31:56 -0700
Processing by Devise::SessionsController#new as HTML
Rendered devise/sessions/_new_ldap.html.haml (1.3ms)
Rendered devise/sessions/_new_base.html.haml (2.4ms)
Rendered devise/sessions/_oauth_providers.html.haml (0.1ms)
Rendered devise/sessions/new.html.haml within layouts/devise (5.2ms)
Rendered layouts/_head.html.haml (1.5ms)
Rendered layouts/_flash.html.haml (0.2ms)
Completed 200 OK in 13ms (Views: 8.4ms | ActiveRecord: 0.0ms)
The error log does not show anything.
Also when i check gitlab-rake gitlab:ldap:check RAILS_ENV=production, i
successfully get list of users.
Not sure whats wrong, please help...
--
You received this message because you are subscribed to the Google Groups
"GitLab" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/gitlabhq/48c26a90-8144-482b-a34b-c69d6f718355%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
