Can you check the LDAP auth backend for newer versions? There have been
many changes to it since 1.7.6.

Christian

-- 
Christian Hammond - chip...@chipx86.com
Review Board - http://www.reviewboard.org
Beanbag, Inc. - http://www.beanbaginc.com


On Fri, Nov 22, 2013 at 2:48 PM, humble <eyuw...@gmail.com> wrote:

> Hi,
>
> After we upgraded to 1.7.6, we started seeing authentication issues for
> some users who have never signed in review board before. The issue tracked
> down was in 1.7.6 after the authentication was done in
> LDAPBackend.authenticate(), it calls self.get_or_create_user(username,
> ldapo) with ldapo, basically reuses the simple binding object to avoid a
> second auth in get_or_create_user().  In 1.6.13, it has to re-authenticate
> the simple bind before searching the user.
>
> Reusing ldapo seems to cause LDAP failure for new users (users who sign in
> the first time). A typical error is:
>
> (Pdb) search_result = ldapo.search_s(settings.LDAP_BASE_DN,
>                                                         ldap.SCOPE_SUBTREE,
>                                                         "(%s)" %
> settings.LDAP_UID_MASK % username)
> *** INVALID_CREDENTIALS: {'info': '80090308: LdapErr: DSID-0C090334,
> comment: AcceptSecurityContext error, data 52e, vece', 'desc': 'Invalid
> credentials'}
>
> The problem goes away after switching back to the auth scheme in 1.6.13
>
> --
> Get the Review Board Power Pack at http://www.reviewboard.org/powerpack/
> ---
> Sign up for Review Board hosting at RBCommons: https://rbcommons.com/
> ---
> Happy user? Let us know at http://www.reviewboard.org/users/
> ---
> You received this message because you are subscribed to the Google Groups
> "reviewboard" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to reviewboard+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/groups/opt_out.
>

-- 
Get the Review Board Power Pack at http://www.reviewboard.org/powerpack/
---
Sign up for Review Board hosting at RBCommons: https://rbcommons.com/
---
Happy user? Let us know at http://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to