Hi Jose,

I noticed that you have both login_attribute and publicEmail set to the userPrincipalName. Not sure if this is the main cause of your problem but publicEmail should map a real email address.

Regards,
Marcin

On 18/12/13 07:44, Jose de Leon wrote:
Hi All,

Using Gitorious 3.0, installed on CentOS 6.4 using the ce_installer script.

Trying to get LDAP authentication to work and having a heck of a time.  I finally got an 
authentication.yml that appears to work.  The test_ldap_connection seems to work, it 
comes back with success.  I also tried running the ldap-wizard and used "curl -X 
POST localhost:1337/check -d ....." and this came back successful as well.

However, login via the web page just doesn't work, error is "Email and/or password 
did not match, please try again."  I've tried restarting all services, and even 
rebooted.

Here is what my authentication.yml looks like

production:

    disable_default: true

    methods:
     - adapter: Gitorious::Authentication::LDAPAuthentication

       host: dc-us.corp.mydomain.com
       #port: 1999
       base_dn: "OU=Employees Santa Clara,DC=corp,DC=mydomain,DC=com"
       #group_search_dn: OU=groups,dc=gitorious,dc=org
       login_attribute: userPrincipalName
       #distinguished_name_template: "{}@gitorious.org"
       attribute_mapping:
         givenName: fullname
         publicEmail: userPrincipalName
       encryption: none
       bind_user:
         username: "CN=LDAP Bind,CN=Users,DC=corp,DC=mydomain,DC=com"
         password: Secret
       #membership_attribute_name: memberof
       #members_attribute_name: member
       #cache_expiry: 60


Thanks



--
--
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]

--- You received this message because you are subscribed to the Google Groups "Gitorious" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to