search

wekan / ldap

LDAP support for Wekan code has been moved to https://github.com/wekan/wekan/tree/master/packages/wekan-ldap , issues to https://github.com/wekan/wekan/issues , and if PRs are needed please add them instead to https://github.com/wekan/wekan/pulls
https://github.com/wekan/wekan/tree/master/packages/wekan-ldap
MIT License
12 stars 10 forks source link

LDAP 52e error (snap) #52

Open LemonEistee opened 5 years ago

LemonEistee commented 5 years ago

Hello, I have installed and configured the snap for wekan before a few days.

It all works fine except from LDAP. There I get to following error

2019-06-25T05:43:38Z wekan.wekan[32431]: [INFO] Init LDAP login "test\lemoneistee" 2019-06-25T05:43:38Z wekan.wekan[32431]: [WARN] Lookup for unset variable: INTERNAL_LOG_LEVEL 2019-06-25T05:43:38Z wekan.wekan[32431]: [WARN] Lookup for unset variable: LDAP_USER_ATTRIBUTES 2019-06-25T05:43:38Z wekan.wekan[32431]: [INFO] Init setup 2019-06-25T05:43:38Z wekan.wekan[32431]: [INFO] Connecting "ldap://192.168.10.1:389" 2019-06-25T05:43:38Z wekan.wekan[32431]: [DEBUG] connectionOptions{ url: 'ldap://192.168.10.1:389', 2019-06-25T05:43:38Z wekan.wekan[32431]: timeout: 10000, 2019-06-25T05:43:38Z wekan.wekan[32431]: connectTimeout: 10000, 2019-06-25T05:43:38Z wekan.wekan[32431]: idleTimeout: 10000, 2019-06-25T05:43:38Z wekan.wekan[32431]: reconnect: true, 2019-06-25T05:43:38Z wekan.wekan[32431]: log: 2019-06-25T05:43:38Z wekan.wekan[32431]: Logger { 2019-06-25T05:43:38Z wekan.wekan[32431]: domain: null, 2019-06-25T05:43:38Z wekan.wekan[32431]: _events: {}, 2019-06-25T05:43:38Z wekan.wekan[32431]: _eventsCount: 0, 2019-06-25T05:43:38Z wekan.wekan[32431]: _maxListeners: undefined, 2019-06-25T05:43:38Z wekan.wekan[32431]: _level: 30, 2019-06-25T05:43:38Z wekan.wekan[32431]: streams: [ [Object] ], 2019-06-25T05:43:38Z wekan.wekan[32431]: serializers: null, 2019-06-25T05:43:38Z wekan.wekan[32431]: src: false, 2019-06-25T05:43:38Z wekan.wekan[32431]: fields: 2019-06-25T05:43:38Z wekan.wekan[32431]: { name: 'ldapjs', 2019-06-25T05:43:38Z wekan.wekan[32431]: component: 'client', 2019-06-25T05:43:38Z wekan.wekan[32431]: hostname: 'wekan', 2019-06-25T05:43:38Z wekan.wekan[32431]: pid: 805 } } } 2019-06-25T05:43:38Z wekan.wekan[32431]: [INFO] LDAP connected 2019-06-25T05:43:38Z wekan.wekan[32431]: [ERROR] InvalidCredentialsError: 80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 52e, v2580 2019-06-25T05:43:38Z wekan.wekan[32431]: 2019-06-25T05:43:48Z wekan.wekan[32431]: [INFO] Idle 2019-06-25T05:43:48Z wekan.wekan[32431]: [INFO] Disconecting 2019-06-25T05:43:48Z wekan.wekan[32431]: [INFO]

I have read that 52e means wrong password, but the password is 100% correct. I have set up ldap on some other ubuntu server and it works fine with the same user and password (and of curse the user is in the right basedn)

Here are my current configurations

ldap-enable: true ldap-port: 389 ldap-host: AD01 ldap-basedn: 192.168.10.1 ldap-reconnect: true ldap-authentication: true ldap-authentication-userdn: ldap ldap-authentication-password: example ldap-background-sync: true ldap-user-authentication: true ldap-username-field: sAMAccountName default-authentication-method: ldap ldap-default-domain: test.local

LemonEistee commented 5 years ago

My version

image

rholighaus commented 4 years ago

I have the same issue with wekan 3.43 - and have not managed to see any additional debugging information.

I have the following settings:

debug true default-authentication-method ldap internal-log-level debug ldap-authentication true ldap-background-sync true ldap-basedn OU=User,DC=ourdomain,DC=local ldap-default-domain ourdomain.com ldap-email-field mail ldap-enable true ldap-fullname-field cn ldap-host 192.168.1.6 ldap-internal-log-level debug ldap-log-enable true ldap-log-enabled true ldap-port 3268 ldap-search-field sAMAccountName ldap-sync-user-data-fieldmap {...} ldap-user-authentication true ldap-user-authentication-field sAMAccountName ldap-user-search-field sAMAccountName ldap-username-field sAMAccountName loglevel debug