Christian,
    Thanks for your help.  Unfortunately I don't know Python at all, but 
I'll take a look when I get a chance.  If I figure it out, I'll let you 
know!

Mike

On Tuesday, July 30, 2013 7:49:28 PM UTC-4, Christian Hammond wrote:
>
> Hi Michael,
>
> I don't have any useful answer for you just yet, but I wanted to point out 
> that the version of backends.py you're looking out is very ancient. You'll 
> want to check the one on http://github.com/reviewboard/reviewboard/ in 
> order to help debug this.
>
> I'm not an LDAP expert so I'm not in a great position right now to tell 
> you what's wrong. It's possible our code is doing something wrong right 
> now. Particularly if you're getting that error, which at the very least we 
> should catch.
>
> Christian
>
>
> On Sunday, July 28, 2013, Michael Pigott wrote:
>
>> Hello,
>>      I'm having trouble with configuring ReviewBoard for LDAP.  I know 
>> I'm doing this correctly, because it works for my Subversion and Redmine 
>> instances.  I'm not expecting much out of this, because I've seen others 
>> have had LDAP authentication issues like mine and haven't had much luck 
>> either.
>>
>> None of my LDAP users authenticate.  I get varying issues with trying 
>> various configurations.  The best I can get is a connection, with an error 
>> in my reviewboard.log stating:
>>
>>      LDAP error: The specified object does not exist in the Directory or 
>> provided invalid credentials: uid=mpigott,dc=XXXXX,dc=org
>>
>> I have an OpenLDAP server running on the same machine as my Reviewboard 
>> instance.  It has an admin account of "cn=admin,dc=XXXXX,dc=org" with a 
>> password.  I don't have SASL set up, so it's just using the basic 
>> authentication.
>>
>> Server:
>>     I have tried all of the following:
>>
>> ldap://localhost/
>> ldap://localhost:389/
>> ldap://localhost/DC=XXXXX,DC=org?uid  (to the unfamiliar, this is 
>> Apache's LDAP authentication URL)
>>
>> LDAP Base DN:
>>      dc=XXXXX,dc=org
>>      ou=people,dc=XXXXX,dc=org
>>
>> Given Name Attribute:
>>      givenName
>>
>> Surname Attribute:
>>      sn
>>
>> Full Name Attribute:
>>      cn
>>
>> E-mail Domain
>>      <blank>
>>      XXXXX.org
>>
>> E-mail LDAP Attribute
>>      mail
>>
>> User Mask:
>>      uid=%s                                 => This gives me the error 
>> "LDAP error: The specified object does not exist in the Directory or 
>> provided invalid credentials: uid=mpigott,dc=XXXXX,dc=org"
>>      uid=%s,dc=XXXXX,dc=org    => Same error.
>>      (uid=%s)                               => This gives me the error 
>> "LDAP error: {'info': 'invalid DN', 'desc': 'Invalid DN syntax'}", with a 
>> corresponding error in syslog stating either "invalid dn 
>> ((uid=mpigott),ou=people,dc=XXXXX,dc=org)" or "invalid dn 
>> ((uid=mpigott),dc=XXXXX,dc=org)", depending on the above configurations.
>>
>> After looking at backends.py ( 
>> http://reviewboard.googlecode.com/svn/trunk/reviewboard/accounts/backends.py),
>>  I was hoping the problem was that I did not set an anonymous username or 
>> password.  From the logic, it looked like I could try to set the following:
>>
>> Anonymous User:
>>       cn=admin,dc=XXXXX,dc=org
>>
>> Anonymous Password
>>       <Admin Password>
>>
>> Except, this time I get the error:
>>
>> "An error while LDAP-authenticating: ValueError('need more than 1 value 
>> to unpack',)"
>>
>> That appears to be a Python error that occurs when a list of items is too 
>> short.  I noticed that the LDAP Anonymous Password never shows up on the 
>> admin screen; perhaps it is not saved?
>>
>> At any rate, any help is appreciated, though I'm about to give up and 
>> just use Registration authentication.
>>
>> Thanks,
>> Mike
>>
>> -- 
>> Want to help the Review Board project? Donate today at 
>> http://www.reviewboard.org/donate/
>> Happy user? Let us know at http://www.reviewboard.org/users/
>> -~----------~----~----~----~------~----~------~--~---
>> To unsubscribe from this group, send email to 
>> reviewboard+unsubscr...@googlegroups.com
>> For more options, visit this group at 
>> http://groups.google.com/group/reviewboard?hl=en
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "reviewboard" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to reviewboard+unsubscr...@googlegroups.com.
>> For more options, visit https://groups.google.com/groups/opt_out.
>>  
>>  
>>
>
>
> -- 
> -- 
> Christian Hammond - chi...@chipx86.com <javascript:>
> Review Board - http://www.reviewboard.org
> Beanbag, Inc. - http://www.beanbaginc.com
>
>

-- 
Want to help the Review Board project? Donate today at 
http://www.reviewboard.org/donate/
Happy user? Let us know at http://www.reviewboard.org/users/
-~----------~----~----~----~------~----~------~--~---
To unsubscribe from this group, send email to 
reviewboard+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/reviewboard?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to