Project

General

Profile

Bug #5621

LDAP + User Groups authentication plugin not working after upgrade to 4.19.x

Added by Michael Davis 4 months ago. Updated 4 months ago.

Status:
Resolved
Priority:
Urgent
Assignee:
-
Category:
-
Target version:
-
Start date:
15.06.2020
Due date:
% Done:

0%

Estimated time:
Sorting:
Commit Number:
Affected Version:

Description

After upgrading our RhodeCode EE server to 4.19.3, the LDAP + User Groups authentication plugin no longer works for us. I get "invalid username/password" errors when trying to log in with an LDAP account. If I switch the server to the regular LDAP plugin, it works fine with the same settings.

The problem appears to have first occurred in 4.19.0. I tested this by updating a copy of our server from 4.18.3 (where the LDAP + Groups authentication plugin worked) to 4.19.0 (where it did not).

I see this error in the log file when the authentication failure occurs:

2020-06-14 22:24:16.746 [15542] INFO  [rhodecode.authentication.base] Authenticating user `mdavis` using egg:rhodecode-enterprise-ee#ldap_group plugin
2020-06-14 22:24:16.776 [15542] ERROR [rhodecode.rc_auth_plugins.auth_ldap_group] Other exception
Traceback (most recent call last):
  File "rc_auth_plugins/auth_ldap_group.py", line 835, in rc_auth_plugins.auth_ldap_group.RhodeCodeAuthPlugin.auth
  File "rc_auth_plugins/auth_ldap_group.py", line 295, in rc_auth_plugins.auth_ldap_group.AuthLdap.authenticate_ldap
AttributeError: 'AuthLdap' object has no attribute 'BASE_DN'
2020-06-14 22:24:16.783 [15542] WARNI [rhodecode.model.validators] user `mdavis` failed to authenticate

History

#1 Updated by Marcin Kuzminski [CTO] 4 months ago

  • Priority changed from Normal to Urgent
  • Status changed from New to In Progress

We'll take a look into this, as a workaround you can copy the old ldap_group.so plugin from the backup folder:

cp ~/.rccontrol/enterprise-1/backup/lib/python2.7/site-packages/rc_auth_plugins/auth_ldap_group.so ~/.rccontrol/enterprise-1/profile/lib/python2.7/site-packages/rc_auth_plugins/auth_ldap_group.so

#2 Updated by Marcin Kuzminski [CTO] 4 months ago

  • Status changed from In Progress to Resolved

4.19.3 fixes this problem

Also available in: Atom PDF