search

whitlockjc / sync-ldap-groups-to-svn-authz

Simple Python script that can take your LDAP group definitions and create a Subversion authz file equivalent.
MIT License
26 stars 26 forks source link

Script works but Authentication with LDAP does not #26

Closed just-another-dude closed 4 years ago

just-another-dude commented 4 years ago

Hello, The script indeed pulled the groups from the AD and organized them in a file. I tried many different configurations to make the group-based LDAP authentication work, but to no avail. Currently, the AuthLDAPURL is: "ldap://my-ad:389/OU=UsersOU,DC=ilient-hq,DC=local?sAMAccountName"

This version works for regular LDAP Authentication, but not with group-based.

I've tried removing the OU, and I've tried adding "?sub?(objectClass=user)" like so: "ldap://my-ad:389/OU=UsersOU,DC=ilient-hq,DC=local?sAMAccountName?sub?(objectClass=user)"

None of these configurations work. Would be happy for some advice.

just-another-dude commented 4 years ago

After tailing the log files and attempting to authenticate, I saw that it wasn't loading the group definitions properly because of a certain group in the AD containing itself in the members, and SVN raised an error about it.