LDAP authentication failed

[ShonInDim]

Hi ! I trying to run docker-gerrit with LDAP capability this way :

docker run --name gerrit1 -e IGNORE_VERSIONCHECK=1 \

• --net=host

• -v ~/gerrit_dir:/var/gerrit/review_site \

• -e WEBURL=http://127.0.0.1:8080 \

• -e DATABASE_TYPE=postgresql \

• -e DATABASE_HOSTNAME=127.0.0.1 \

• -e DATABASE_PORT=5432 \

• -e DATABASE_DATABASE=reviewdb \

• -e DATABASE_USERNAME=gerrit \

• -e DATABASE_PASSWORD=gerrit \

• -e AUTH_TYPE=LDAP \

• -e LDAP_SERVER=ldap://1.**..*** \

• -e LDAP_ACCOUNTBASE="OU=ABC Users,dc=abc,dc=com" \

• -e LDAP_ACCOUNTBASE="OU=ABC Users Group,DC=ABC,DC=COM" \

• -e LDAP_USERNAME="test.*@.com" \

• -e LDAP_PASSWORD="**" \

• -e LDAP_ACCOUNTPATTERN="(&(objectClass=*)(sAMAccountName=${username}))" \

• -d openfrontier/gerrit

and get error :

[HTTP-81] ERROR com.google.gerrit.httpd.auth.ldap.LdapLoginServlet : LDAP authentication failed java.lang.IllegalArgumentException: No variables in ldap.accountPattern

may be would you give me advice how can I resolve it ?

p.s. I tried to find solution at google gerrit groups and whole of that's options not a valid for me.

[ShonInDim]

I try to add some parameters like : -e LDAP_GROUPMEMBERPATTERN="(sAMAccountName=${username})"
and get another error, seems like it some contradiction on the gerrit side :

[HTTP-82] ERROR com.google.gerrit.server.auth.ldap.LdapRealm : LDAP backend doesn't support: ldap.groupMemberPattern [2018-11-09 15:24:52,124] [HTTP-82] ERROR com.google.gerrit.httpd.auth.ldap.LdapLoginServlet : LDAP authentication failed java.lang.IllegalArgumentException: LDAP backend doesn't support: ldap.groupMemberPattern

So, actually it's not issue of your docker image but rather a question. Might be you already faced some similar ?

[thinkernel]

Hi @ShonInDim Unfortunately, I'v never used AD as the ldap backend. However, I think there are lots of stuffs about this topic on the internet.

[ShonInDim]

However, I think there are lots of stuffs about this topic on the internet.

Sure, even more then I can handle. Anyways, thank you.