Bug #7137: Foreman is not using LDAP account to bind to the directory - Foreman

Custom queries

3.10.0 release DONE
3.10.0 release TODO
3.11.0 release DONE
3.11.0 release TODO
3.8.1 release DONE
3.8.1 release TODO
3.9.2 release DONE
3.9.2 release TODO
All bugs by votes
All issues closed in the last 3 weeks
Easy and Trivial Issues
Easy Issues (only)
Foreman - new open issues in last 10 days
Good first issues - Foreman core
high prio open bugs
Host registration [open]
Mine
My issues closed in the last 3 weeks
old bugs
Open with target version set (aka blockers)
registration
taken-none
Team Atlas untriaged bugs
templates
Trivial Issues
Untriaged and opened in the past two weeks

Actions

Copy link

Bug #7137

closed

Foreman is not using LDAP account to bind to the directory

Added by Chuck Schweizer over 9 years ago. Updated almost 6 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Dominic Cleal

Category:

Authentication

Target version:

1.6.0

Difficulty:

Triaged:

Bugzilla link:

Pull request:

Fixed in Releases:

Found in Releases:

1.6.0

Red Hat JIRA:

Description

I have LDAP authentication running in Foreman 1.5.2 without any issues. I am starting to test 1.6.0-rc1 and have found that even though I have defined an LDAP account to bind with 1.6.2 is only attempting to use an anonymous connection. I am not using SSL for this ldap connection.

History
Notes
Property changes

Actions

Copy link

Updated by Dominic Cleal over 9 years ago

Category set to Authentication
Target version set to 1.7.5
translation missing: en.field_release set to 10

Actions

Copy link

Updated by Chuck Schweizer over 9 years ago

Also this configuration is using POSIX.

Actions

Copy link

Updated by Chuck Schweizer over 9 years ago

Based on my limited understanding, it looks like POSIX server type is not setup to allow a Service Account in the LDAP Fluff code.

Actions

Copy link

Updated by Chuck Schweizer over 9 years ago

Here is what I had to change to fix my issue. Not sure if everything is fixed or if I broke something else.

https://github.com/csschwe/ldap_fluff/tree/POSIX_ldap_login_fix

Actions

Copy link

Updated by Dominic Cleal over 9 years ago

Status changed from New to Assigned
Assignee set to Dominic Cleal

Actions

Copy link

Updated by Dominic Cleal over 9 years ago

Status changed from Assigned to Ready For Testing

https://github.com/Katello/ldap_fluff/pull/31 submits the fix for group DN to look up users.

https://github.com/Katello/ldap_fluff/pull/32 allows use of a service account with POSIX servers. I tried to keep the original behaviours working, to allow anonymous searches and also determine the DN from a search of the directory for binds.

Actions

Copy link