Hello.
I have configured a LAVA server and I set up a local Django account to start configuring things:
sudo lava-server manage createsuperuser --username <user> --email=<mail>
Then I want to add LDAP support by adding the relevant fields to /etc/lava-server/settings.conf:
"AUTH_LDAP_SERVER_URI": "ldaps://server.domain.se:636", "AUTH_LDAP_BIND_DN": "CN=company_ldap,OU=Service Accounts,OU=Resources,OU=Data,DC=domain,DC=se", "AUTH_LDAP_BIND_PASSWORD": "thepwd", "AUTH_LDAP_USER_ATTR_MAP": { "first_name": "givenName", "email": "mail" }, "DISABLE_OPENID_AUTH": true
I have restarted both apache2 and lava-server.
I was expecting to get a Sign In page like this one:
https://validation.linaro.org/static/docs/v1/_images/ldap-user-login.png
Unfortunately I'm not familiar with neither django (and Web development) and LDAP and I don't know how to debug this. I have tried to grep for ldap|LDAP in /var/log/lava-server but nothing pops up.
Unfortunately I couldn't find a way to browse the mailing list for previous answers. GMANE search doesn't work today.
How should I proceed?
On 14 December 2016 at 14:14, Rafael Gago Castano RGC@hms.se wrote:
Hello.
I have configured a LAVA server and I set up a local Django account to start configuring things:
sudo lava-server manage createsuperuser --username <user> --email=<mail>
Then I want to add LDAP support by adding the relevant fields to /etc/lava-server/settings.conf:
"AUTH_LDAP_SERVER_URI": "ldaps://server.domain.se:636", "AUTH_LDAP_BIND_DN": "CN=company_ldap,OU=Service Accounts,OU=Resources,OU=Data,DC=domain,DC=se", "AUTH_LDAP_BIND_PASSWORD": "thepwd", "AUTH_LDAP_USER_ATTR_MAP": { "first_name": "givenName", "email": "mail" },
Use ldapsearch on the command line to ensure that these settings actually work.
"DISABLE_OPENID_AUTH": true
I have restarted both apache2 and lava-server.
With lava-server 2016.11 and later, you need to restart lava-server-gunicorn to restart the UI. The lava-server daemon just handles the scheduler. There is no need to restart apache unless you've changed apache configuration.
sudo service lava-server-gunicorn restart
I was expecting to get a Sign In page like this one:
https://validation.linaro.org/static/docs/v1/_images/ldap-user-login.png
Unfortunately I'm not familiar with neither django (and Web development) and LDAP and I don't know how to debug this. I have tried to grep for ldap|LDAP in /var/log/lava-server but nothing pops up.
Unfortunately I couldn't find a way to browse the mailing list for previous answers. GMANE search doesn't work today.
The list archive is here: https://lists.linaro.org/pipermail/lava-users/ - as mentioned in the footer of each message.
How should I proceed?
Lava-users mailing list Lava-users@lists.linaro.org https://lists.linaro.org/mailman/listinfo/lava-users
Wow! That was a fast response, thanks! It worked too :)
________________________________ From: Neil Williams neil.williams@linaro.org Sent: Wednesday, December 14, 2016 3:23 PM To: Rafael Gago Castano Cc: lava-users@lists.linaro.org Subject: Re: [Lava-users] LDAP authentication problem
On 14 December 2016 at 14:14, Rafael Gago Castano RGC@hms.se wrote:
Hello.
I have configured a LAVA server and I set up a local Django account to start configuring things:
sudo lava-server manage createsuperuser --username <user> --email=<mail>
Then I want to add LDAP support by adding the relevant fields to /etc/lava-server/settings.conf:
"AUTH_LDAP_SERVER_URI": "ldaps://server.domain.se:636", "AUTH_LDAP_BIND_DN": "CN=company_ldap,OU=Service Accounts,OU=Resources,OU=Data,DC=domain,DC=se", "AUTH_LDAP_BIND_PASSWORD": "thepwd", "AUTH_LDAP_USER_ATTR_MAP": { "first_name": "givenName", "email": "mail" },
Use ldapsearch on the command line to ensure that these settings actually work.
"DISABLE_OPENID_AUTH": true
I have restarted both apache2 and lava-server.
With lava-server 2016.11 and later, you need to restart lava-server-gunicorn to restart the UI. The lava-server daemon just handles the scheduler. There is no need to restart apache unless you've changed apache configuration.
sudo service lava-server-gunicorn restart
I was expecting to get a Sign In page like this one:
https://validation.linaro.org/static/docs/v1/_images/ldap-user-login.png
Unfortunately I'm not familiar with neither django (and Web development) and LDAP and I don't know how to debug this. I have tried to grep for ldap|LDAP in /var/log/lava-server but nothing pops up.
Unfortunately I couldn't find a way to browse the mailing list for previous answers. GMANE search doesn't work today.
The list archive is here: https://lists.linaro.org/pipermail/lava-users/ - as mentioned in the footer of each message.
How should I proceed?
Lava-users mailing list Lava-users@lists.linaro.org https://lists.linaro.org/mailman/listinfo/lava-users
Lava-users Info Page - Linarohttps://lists.linaro.org/mailman/listinfo/lava-users lists.linaro.org Ask questions and get support from other LAVA users and admins. To see the collection of prior postings to the list, visit the Lava-users Archives.
--
Neil Williams ============= neil.williams@linaro.org http://www.linux.codehelp.co.uk/ linux.codehelp.co.ukhttp://www.linux.codehelp.co.uk/ www.linux.codehelp.co.uk With thanks to Iain Learmonth for the hardware, there is now a Debian instance of LAVA available for use and the Debian wiki page has been updated.
[https://validation.linaro.org/static/docs/v1/_images/ldap-user-login.png]
lava-users@lists.lavasoftware.org