jp-gouin / helm-openldap

Helm chart of Openldap in High availability with multi-master replication and PhpLdapAdmin and Ltb-Passwd
Apache License 2.0
181 stars 115 forks source link

get tag=103 err=50 when use ldap-ltb to change password #156

Closed lordk911 closed 1 month ago

lordk911 commented 3 months ago

Describe the bug get tag=103 err=50 when use ldap-ltb to change password but I can use phpldapadmin to change password

To Reproduce I install helm-openldap use master branch :

helm list -n openldap
NAME            NAMESPACE       REVISION        UPDATED                                 STATUS          CHART                   APP VERSION
openldap        openldap        1               2024-03-20 15:20:47.555650925 +0800 CST deployed        openldap-stack-ha-4.2.2 2.6.6    

Try to change user's password by ldap-ltb

Screenshots The log when use phpldapadmin to change password : image

The log when useldap-ltb to change password : image

Additional context Add any other context about the problem here.

lordk911 commented 3 months ago

https://github.com/ltb-project/self-service-password/issues/800#issuecomment-1711274009

Via the values.yaml :

# Custom openldap ACLs
# If not defined, the following default ACLs are applied:
# customAcls: |-
#   dn: olcDatabase={2}mdb,cn=config
#   changetype: modify
#   replace: olcAccess
#   olcAccess: {0}to *
#     by dn.exact=gidNumber=0+uidNumber=1001,cn=peercred,cn=external,cn=auth manage
#     by * break
#   olcAccess: {1}to attrs=userPassword,shadowLastChange
#     by self write
#     by dn="{{ include "global.bindDN" . }}" write
#     by anonymous auth by * none
#   olcAccess: {2}to *
#     by dn="{{ include "global.bindDN" . }}" write
#     by self read
#     by * none

I see: by dn="{{ include "global.bindDN" . }}" write

I also try to add global.bindDN in values.yaml , but this is not help.

stale[bot] commented 1 month ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

jp-gouin commented 1 month ago

Fix in latest version v4.2.4 via PR #165