Re: LDAP Authentication Issues
Christian,
Thanks for your help. Unfortunately I don't know Python at all, but
I'll take a look when I get a chance. If I figure it out, I'll let you
know!
Mike
On Tuesday, July 30, 2013 7:49:28 PM UTC-4, Christian Hammond wrote:
>
> Hi Michael,
>
> I don't have any useful answer for you just yet, but I wanted to point out
> that the version of backends.py you're looking out is very ancient. You'll
> want to check the one on http://github.com/reviewboard/reviewboard/ in
> order to help debug this.
>
> I'm not an LDAP expert so I'm not in a great position right now to tell
> you what's wrong. It's possible our code is doing something wrong right
> now. Particularly if you're getting that error, which at the very least we
> should catch.
>
> Christian
>
>
> On Sunday, July 28, 2013, Michael Pigott wrote:
>
>> Hello,
>> I'm having trouble with configuring ReviewBoard for LDAP. I know
>> I'm doing this correctly, because it works for my Subversion and Redmine
>> instances. I'm not expecting much out of this, because I've seen others
>> have had LDAP authentication issues like mine and haven't had much luck
>> either.
>>
>> None of my LDAP users authenticate. I get varying issues with trying
>> various configurations. The best I can get is a connection, with an error
>> in my reviewboard.log stating:
>>
>> LDAP error: The specified object does not exist in the Directory or
>> provided invalid credentials: uid=mpigott,dc=X,dc=org
>>
>> I have an OpenLDAP server running on the same machine as my Reviewboard
>> instance. It has an admin account of "cn=admin,dc=X,dc=org" with a
>> password. I don't have SASL set up, so it's just using the basic
>> authentication.
>>
>> Server:
>> I have tried all of the following:
>>
>> ldap://localhost/
>> ldap://localhost:389/
>> ldap://localhost/DC=X,DC=org?uid (to the unfamiliar, this is
>> Apache's LDAP authentication URL)
>>
>> LDAP Base DN:
>> dc=X,dc=org
>> ou=people,dc=X,dc=org
>>
>> Given Name Attribute:
>> givenName
>>
>> Surname Attribute:
>> sn
>>
>> Full Name Attribute:
>> cn
>>
>> E-mail Domain
>>
>> X.org
>>
>> E-mail LDAP Attribute
>> mail
>>
>> User Mask:
>> uid=%s => This gives me the error
>> "LDAP error: The specified object does not exist in the Directory or
>> provided invalid credentials: uid=mpigott,dc=X,dc=org"
>> uid=%s,dc=X,dc=org=> Same error.
>> (uid=%s) => This gives me the error
>> "LDAP error: {'info': 'invalid DN', 'desc': 'Invalid DN syntax'}", with a
>> corresponding error in syslog stating either "invalid dn
>> ((uid=mpigott),ou=people,dc=X,dc=org)" or "invalid dn
>> ((uid=mpigott),dc=X,dc=org)", depending on the above configurations.
>>
>> After looking at backends.py (
>> http://reviewboard.googlecode.com/svn/trunk/reviewboard/accounts/backends.py),
>> I was hoping the problem was that I did not set an anonymous username or
>> password. From the logic, it looked like I could try to set the following:
>>
>> Anonymous User:
>> cn=admin,dc=X,dc=org
>>
>> Anonymous Password
>>
>>
>> Except, this time I get the error:
>>
>> "An error while LDAP-authenticating: ValueError('need more than 1 value
>> to unpack',)"
>>
>> That appears to be a Python error that occurs when a list of items is too
>> short. I noticed that the LDAP Anonymous Password never shows up on the
>> admin screen; perhaps it is not saved?
>>
>> At any rate, any help is appreciated, though I'm about to give up and
>> just use Registration authentication.
>>
>> Thanks,
>> Mike
>>
>> --
>> Want to help the Review Board project? Donate today at
>> http://www.reviewboard.org/donate/
>> Happy user? Let us know at http://www.reviewboard.org/users/
>> -~--~~~~--~~--~--~---
>> To unsubscribe from this group, send email to
>> reviewboard+unsubscr...@googlegroups.com
>> For more options, visit this group at
>> http://groups.google.com/group/reviewboard?hl=en
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "reviewboard" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to reviewboard+unsubscr...@googlegroups.com.
>> For more options, visit https://groups.google.com/groups/opt_out.
>>
>>
>>
>
>
> --
> --
> Christian Hammond - chi...@chipx86.com
> Review Board - http://www.reviewboard.org
> Beanbag, Inc. - http://www.beanbaginc.com
>
>
--
Want to help the Review Board project? Donate today at
http://www.reviewboard.org/donate/
Happy user? Let us know at http://www.reviewboard.org/users/
-~--~~~~--~~--~--~---
To unsubscribe from this group, send email to
reviewboard+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/reviewboard?hl=en
---
You received
Re: LDAP Authentication Issues
Hi Michael,
I don't have any useful answer for you just yet, but I wanted to point out
that the version of backends.py you're looking out is very ancient. You'll
want to check the one on http://github.com/reviewboard/reviewboard/ in
order to help debug this.
I'm not an LDAP expert so I'm not in a great position right now to tell you
what's wrong. It's possible our code is doing something wrong right now.
Particularly if you're getting that error, which at the very least we
should catch.
Christian
On Sunday, July 28, 2013, Michael Pigott wrote:
> Hello,
> I'm having trouble with configuring ReviewBoard for LDAP. I know I'm
> doing this correctly, because it works for my Subversion and Redmine
> instances. I'm not expecting much out of this, because I've seen others
> have had LDAP authentication issues like mine and haven't had much luck
> either.
>
> None of my LDAP users authenticate. I get varying issues with trying
> various configurations. The best I can get is a connection, with an error
> in my reviewboard.log stating:
>
> LDAP error: The specified object does not exist in the Directory or
> provided invalid credentials: uid=mpigott,dc=X,dc=org
>
> I have an OpenLDAP server running on the same machine as my Reviewboard
> instance. It has an admin account of "cn=admin,dc=X,dc=org" with a
> password. I don't have SASL set up, so it's just using the basic
> authentication.
>
> Server:
> I have tried all of the following:
>
> ldap://localhost/
> ldap://localhost:389/
> ldap://localhost/DC=X,DC=org?uid (to the unfamiliar, this is Apache's
> LDAP authentication URL)
>
> LDAP Base DN:
> dc=X,dc=org
> ou=people,dc=X,dc=org
>
> Given Name Attribute:
> givenName
>
> Surname Attribute:
> sn
>
> Full Name Attribute:
> cn
>
> E-mail Domain
>
> X.org
>
> E-mail LDAP Attribute
> mail
>
> User Mask:
> uid=%s => This gives me the error
> "LDAP error: The specified object does not exist in the Directory or
> provided invalid credentials: uid=mpigott,dc=X,dc=org"
> uid=%s,dc=X,dc=org=> Same error.
> (uid=%s) => This gives me the error
> "LDAP error: {'info': 'invalid DN', 'desc': 'Invalid DN syntax'}", with a
> corresponding error in syslog stating either "invalid dn
> ((uid=mpigott),ou=people,dc=X,dc=org)" or "invalid dn
> ((uid=mpigott),dc=X,dc=org)", depending on the above configurations.
>
> After looking at backends.py (
> http://reviewboard.googlecode.com/svn/trunk/reviewboard/accounts/backends.py),
> I was hoping the problem was that I did not set an anonymous username or
> password. From the logic, it looked like I could try to set the following:
>
> Anonymous User:
> cn=admin,dc=X,dc=org
>
> Anonymous Password
>
>
> Except, this time I get the error:
>
> "An error while LDAP-authenticating: ValueError('need more than 1 value to
> unpack',)"
>
> That appears to be a Python error that occurs when a list of items is too
> short. I noticed that the LDAP Anonymous Password never shows up on the
> admin screen; perhaps it is not saved?
>
> At any rate, any help is appreciated, though I'm about to give up and just
> use Registration authentication.
>
> Thanks,
> Mike
>
> --
> Want to help the Review Board project? Donate today at
> http://www.reviewboard.org/donate/
> Happy user? Let us know at http://www.reviewboard.org/users/
> -~--~~~~--~~--~--~---
> To unsubscribe from this group, send email to
> reviewboard+unsubscr...@googlegroups.com 'reviewboard%2bunsubscr...@googlegroups.com');>
> For more options, visit this group at
> http://groups.google.com/group/reviewboard?hl=en
> ---
> You received this message because you are subscribed to the Google Groups
> "reviewboard" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to reviewboard+unsubscr...@googlegroups.com 'cvml', 'reviewboard%2bunsubscr...@googlegroups.com');>.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>
>
--
--
Christian Hammond - chip...@chipx86.com
Review Board - http://www.reviewboard.org
Beanbag, Inc. - http://www.beanbaginc.com
--
Want to help the Review Board project? Donate today at
http://www.reviewboard.org/donate/
Happy user? Let us know at http://www.reviewboard.org/users/
-~--~~~~--~~--~--~---
To unsubscribe from this group, send email to
reviewboard+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/reviewboard?hl=en
---
You received this message because you are subscribed to the Google Groups
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to reviewboard+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
