Cool. I see your changes:) https://github.com/reviewboard/reviewboard/blob/master/reviewboard/accounts/backends.py
On Friday, November 22, 2013 2:50:42 PM UTC-8, Christian Hammond wrote: > > Can you check the LDAP auth backend for newer versions? There have been > many changes to it since 1.7.6. > > Christian > > -- > Christian Hammond - chi...@chipx86.com <javascript:> > Review Board - > http://www.reviewboard.org<http://www.google.com/url?q=http%3A%2F%2Fwww.reviewboard.org&sa=D&sntz=1&usg=AFQjCNFu6rVJ79URKHS1VrnqPxI2_TfqqQ> > Beanbag, Inc. - > http://www.beanbaginc.com<http://www.google.com/url?q=http%3A%2F%2Fwww.beanbaginc.com&sa=D&sntz=1&usg=AFQjCNHeSvZsbNu-Ri1PuVkAAv_K-3EMUA> > > > On Fri, Nov 22, 2013 at 2:48 PM, humble <eyu...@gmail.com <javascript:>>wrote: > >> Hi, >> >> After we upgraded to 1.7.6, we started seeing authentication issues for >> some users who have never signed in review board before. The issue tracked >> down was in 1.7.6 after the authentication was done in >> LDAPBackend.authenticate(), it calls self.get_or_create_user(username, >> ldapo) with ldapo, basically reuses the simple binding object to avoid a >> second auth in get_or_create_user(). In 1.6.13, it has to re-authenticate >> the simple bind before searching the user. >> >> Reusing ldapo seems to cause LDAP failure for new users (users who sign >> in the first time). A typical error is: >> >> (Pdb) search_result = ldapo.search_s(settings.LDAP_BASE_DN, >> >> ldap.SCOPE_SUBTREE, >> "(%s)" % >> settings.LDAP_UID_MASK % username) >> *** INVALID_CREDENTIALS: {'info': '80090308: LdapErr: DSID-0C090334, >> comment: AcceptSecurityContext error, data 52e, vece', 'desc': 'Invalid >> credentials'} >> >> The problem goes away after switching back to the auth scheme in 1.6.13 >> >> -- >> Get the Review Board Power Pack at >> http://www.reviewboard.org/powerpack/<http://www.google.com/url?q=http%3A%2F%2Fwww.reviewboard.org%2Fpowerpack%2F&sa=D&sntz=1&usg=AFQjCNHvNQmuU5sDe3NAVxxmt3e7_0CXHA> >> --- >> Sign up for Review Board hosting at RBCommons: >> https://rbcommons.com/<https://www.google.com/url?q=https%3A%2F%2Frbcommons.com%2F&sa=D&sntz=1&usg=AFQjCNHb-u2_RY-dBIOlVIqiWd3JbrdivA> >> --- >> Happy user? Let us know at >> http://www.reviewboard.org/users/<http://www.google.com/url?q=http%3A%2F%2Fwww.reviewboard.org%2Fusers%2F&sa=D&sntz=1&usg=AFQjCNFyEqttNN29TbXXuEolF2UQXwajng> >> --- >> You received this message because you are subscribed to the Google Groups >> "reviewboard" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to reviewboard...@googlegroups.com <javascript:>. >> For more options, visit https://groups.google.com/groups/opt_out. >> > > -- Get the Review Board Power Pack at http://www.reviewboard.org/powerpack/ --- Sign up for Review Board hosting at RBCommons: https://rbcommons.com/ --- Happy user? Let us know at http://www.reviewboard.org/users/ --- You received this message because you are subscribed to the Google Groups "reviewboard" group. To unsubscribe from this group and stop receiving emails from it, send an email to reviewboard+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.