Cool. I see your changes:) 
https://github.com/reviewboard/reviewboard/blob/master/reviewboard/accounts/backends.py

On Friday, November 22, 2013 2:50:42 PM UTC-8, Christian Hammond wrote:
>
> Can you check the LDAP auth backend for newer versions? There have been 
> many changes to it since 1.7.6.
>
> Christian
>
> -- 
> Christian Hammond - chi...@chipx86.com <javascript:>
> Review Board - 
> http://www.reviewboard.org<http://www.google.com/url?q=http%3A%2F%2Fwww.reviewboard.org&sa=D&sntz=1&usg=AFQjCNFu6rVJ79URKHS1VrnqPxI2_TfqqQ>
> Beanbag, Inc. - 
> http://www.beanbaginc.com<http://www.google.com/url?q=http%3A%2F%2Fwww.beanbaginc.com&sa=D&sntz=1&usg=AFQjCNHeSvZsbNu-Ri1PuVkAAv_K-3EMUA>
>
>
> On Fri, Nov 22, 2013 at 2:48 PM, humble <eyu...@gmail.com <javascript:>>wrote:
>
>> Hi,
>>
>> After we upgraded to 1.7.6, we started seeing authentication issues for 
>> some users who have never signed in review board before. The issue tracked 
>> down was in 1.7.6 after the authentication was done in 
>> LDAPBackend.authenticate(), it calls self.get_or_create_user(username, 
>> ldapo) with ldapo, basically reuses the simple binding object to avoid a 
>> second auth in get_or_create_user().  In 1.6.13, it has to re-authenticate 
>> the simple bind before searching the user. 
>>
>> Reusing ldapo seems to cause LDAP failure for new users (users who sign 
>> in the first time). A typical error is:
>>
>> (Pdb) search_result = ldapo.search_s(settings.LDAP_BASE_DN,
>>                                                         
>> ldap.SCOPE_SUBTREE,
>>                                                         "(%s)" % 
>> settings.LDAP_UID_MASK % username)
>> *** INVALID_CREDENTIALS: {'info': '80090308: LdapErr: DSID-0C090334, 
>> comment: AcceptSecurityContext error, data 52e, vece', 'desc': 'Invalid 
>> credentials'}
>>
>> The problem goes away after switching back to the auth scheme in 1.6.13
>>
>> -- 
>> Get the Review Board Power Pack at 
>> http://www.reviewboard.org/powerpack/<http://www.google.com/url?q=http%3A%2F%2Fwww.reviewboard.org%2Fpowerpack%2F&sa=D&sntz=1&usg=AFQjCNHvNQmuU5sDe3NAVxxmt3e7_0CXHA>
>> ---
>> Sign up for Review Board hosting at RBCommons: 
>> https://rbcommons.com/<https://www.google.com/url?q=https%3A%2F%2Frbcommons.com%2F&sa=D&sntz=1&usg=AFQjCNHb-u2_RY-dBIOlVIqiWd3JbrdivA>
>> ---
>> Happy user? Let us know at 
>> http://www.reviewboard.org/users/<http://www.google.com/url?q=http%3A%2F%2Fwww.reviewboard.org%2Fusers%2F&sa=D&sntz=1&usg=AFQjCNFyEqttNN29TbXXuEolF2UQXwajng>
>> --- 
>> You received this message because you are subscribed to the Google Groups 
>> "reviewboard" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to reviewboard...@googlegroups.com <javascript:>.
>> For more options, visit https://groups.google.com/groups/opt_out.
>>
>
>

-- 
Get the Review Board Power Pack at http://www.reviewboard.org/powerpack/
---
Sign up for Review Board hosting at RBCommons: https://rbcommons.com/
---
Happy user? Let us know at http://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to