Hi Jack,

I don't think this was introduced in RC2. I think it was one of the earlier releases. I believe what you're seeing might be related to this issue (http://projects.theforeman.org/issues/7003). If so, you can make the change found here (http://projects.theforeman.org/projects/foreman/repository/revisions/02432b498a6b01faed2615e4ddbc16f38648ea35/diff/), which use simple_tls instead of starttls, and try logging in again. That allowed me to login. Hopefully, it will do the same for you.

Best,
Paul

I verified the simple_tls was properly set.

Foreman server: CentOS 6.4
AD server: Server 2008R2
Port 636

I have a working LDAP account and the authentication was working right before the upgrade. I'm able to do a successful ldapsearch with the same user/cert from the Foreman server after the upgrade. The foreman logs simply show: invalid user.

Also useful might be to enable debugging, as a couple more log entries might be made:
http://projects.theforeman.org/projects/foreman/wiki/Troubleshooting#How-do-I-enable-debugging

1. Yes, we have a dedicated account for LDAP queries. Call it ldapuser
2. BaseDN: ou=users,ou=location,dc=some,dc=company
3. UserDN: cn=ldapuser,ou=users,ou=location,dc=some,dc=company

4. I enabled debugging and tried to log in with my user, which worked before the upgrade, and continues to work on a second Foreman 1.5.1 server. I've verified with my team and all users are experiencing this behavior.

Started POST "/users/login" for x.x.x.x at 2014-09-02 09:04:41 -0700
Processing by UsersController#login as HTML
Parameters: {"utf8"=>"✓", "authenticity_token"=>"oRn6khzmz9DyfcOlNdDZaGyJjFVmS+pQ6KwKuzkvypg=", "login"=>{"login"=>"adminuser", "password"=>"[FILTERED]"}, "commit"=>"Login"}
Setting current user thread-local variable to nil
^[[1m[[36mUser Load (1.2ms)^[[0m ^{[[1mSELECT "users".* FROM "users" WHERE "users"."login" = 'adminuser' LIMIT 1}[[0m
^[[1m[[35mAuthSource Load (1.1ms)^[[0m SELECT "auth_sources".* FROM "auth_sources" WHERE "auth_sources"."id" = 2 LIMIT 1
LDAP-Auth with User adminuser
Result: 49
Message: Invalid Credentials
Failed to authenticate adminuser
Failed to authenticate Admin User against LDAP-Some.Company authentication source
invalid user
Setting current user thread-local variable to nil
Redirected to https://foreman/users/login
Completed 302 Found in 496ms (ActiveRecord: 8.9ms)

Could be a result of the new ldap fluff rpm not being in the RC2 repo.

Does installing the following rpm(s) resolve your issue?

http://yum.theforeman.org/nightly/el6/x86_64/ruby193-rubygem-ldap_fluff-0.3.1-1.el6.noarch.rpm
http://yum.theforeman.org/nightly/el6/x86_64/ruby193-rubygem-ldap_fluff-doc-0.3.1-1.el6.noarch.rpm

Yep, that fixed it.

Thanks!