Bug #5621
open
LDAP + User Groups authentication plugin not working after upgrade to 4.19.x
0%
Description
After upgrading our RhodeCode EE server to 4.19.3, the LDAP + User Groups authentication plugin no longer works for us. I get "invalid username/password" errors when trying to log in with an LDAP account. If I switch the server to the regular LDAP plugin, it works fine with the same settings.
The problem appears to have first occurred in 4.19.0. I tested this by updating a copy of our server from 4.18.3 (where the LDAP + Groups authentication plugin worked) to 4.19.0 (where it did not).
I see this error in the log file when the authentication failure occurs:
2020-06-14 22:24:16.746 [15542] INFO [rhodecode.authentication.base] Authenticating user `mdavis` using egg:rhodecode-enterprise-ee#ldap_group plugin
2020-06-14 22:24:16.776 [15542] ERROR [rhodecode.rc_auth_plugins.auth_ldap_group] Other exception
Traceback (most recent call last):
File "rc_auth_plugins/auth_ldap_group.py", line 835, in rc_auth_plugins.auth_ldap_group.RhodeCodeAuthPlugin.auth
File "rc_auth_plugins/auth_ldap_group.py", line 295, in rc_auth_plugins.auth_ldap_group.AuthLdap.authenticate_ldap
AttributeError: 'AuthLdap' object has no attribute 'BASE_DN'
2020-06-14 22:24:16.783 [15542] WARNI [rhodecode.model.validators] user `mdavis` failed to authenticate
Updated by Marcin Kuzminski [CTO] almost 4 years ago
- Status changed from New to In Progress
- Priority changed from Normal to Urgent
We'll take a look into this, as a workaround you can copy the old ldap_group.so plugin from the backup folder:
cp ~/.rccontrol/enterprise-1/backup/lib/python2.7/site-packages/rc_auth_plugins/auth_ldap_group.so ~/.rccontrol/enterprise-1/profile/lib/python2.7/site-packages/rc_auth_plugins/auth_ldap_group.so
Updated by Marcin Kuzminski [CTO] almost 4 years ago
- Status changed from In Progress to Resolved
4.19.3 fixes this problem