search

openbmc / phosphor-webui

Web-based user interface for managing OpenBMC systems
Apache License 2.0
37 stars 25 forks source link

Unable to Establish successful LDAP connection #130

Open manojdesd opened 2 years ago

manojdesd commented 2 years ago

Issue: Unable to establish a successful LDAP connection and LOGIN and use the LDAP user.

OpenBMC version - 2.9

Steps:

  1. I gave the input to field Server URI: ldap:// in LDAP configuration page in BMC.
  2. I got the BASE DN from this command $ dsquery* from the LDAP server.
  3. I got the BIND DN from this command $ dsquery user -name . From the user which i had created in the LDAP server.
  4. I filled in all the inputs to the LDAP configuration page in BMC.
  5. I added the created user to the admin privilege group in BMC webpage.

configuring ldap (1)

  1. But when I try to login through with LDAP user and password I couldn't access the server so i manually added the user into the redfish group using the command $ usermod -a -G redfish like adding any other local user I had to do it.
  2. After that I could login to the server but I couldn't do any operations at all. It shows "unauthorized" testfailed

My question is : why I couldn't login without adding the user to the redfish group? why does it show unauthorized even after adding to the redfish group?

Please help me with this. What am I missing to do? Do I need to preconfigure anything else in order to have a successful connection? Is it a problem with my steps?

manojdesd commented 2 years ago

Please help me in this. I have tried many times, couldn't configure it right. OpenBMC community help me.

manojdesd commented 2 years ago

@gtmills Please help me in this, or can you guide someone to help me with the LDAP configuration. I have tried many things, nothing has worked for me. Please help.

gtmills commented 2 years ago

Hi, Do these same commands work via Redfish? You can go to the network tab on the browser developer tools to see the requests/responses. I doubt this is a problem with phosphor-webui and instead looks like a problem with your setup or a user management bug. Note: most community members have moved away from phoshor-webui and to https://github.com/openbmc/webui-vue

There is some LDAP documentation here: https://github.com/openbmc/phosphor-user-manager/blob/18c1b42c1612e0e8d8f5cd9973bba09b447c7185/docs/README.md

@ratagupt do you see anything?

manojdesd commented 2 years ago

Hi @gtmills

Thank you for your response. Since this is the older project, still using the phosphor-webui, so won't be able to use webui-vue. I have tried a unsecure LDAP config, but it hasn't worked. Through redfish commands I will try and get back to you.

ratagupt commented 2 years ago

@manojdesd : It is a working code and we have been using it since long...I don't have the setup right now, @gkeishin @prakatti1 Can you help in configuring the setup? I will be looking at my notes to share the setup details. As per me this is a ldap setup/configuration problem

But when I try to login through with LDAP user and password I couldn't access the server so i manually added the user into the redfish group using the command $ usermod -a -G redfish like adding any other local user I had to do it.

You don't need to run the usermod cmd

@gkeishin : Can you also confirm that do we need to run the usermod cmd to put the ldap user in the redfish group?

manojdesd commented 2 years ago

@ratagupt thank you for your insights. Yeah please do share the setup details.