Re: [Health-dev] Help with LDAP configuration

[Cédric Krier]

On 2015-12-01 10:17, Joe Gene Q wrote:
> Hi,
> 
> I am trying to configure GNU Health to connect to an LDAP server for LDAP
> based authentication.
> 
> I got as far as adding an LDAP connection string in trytond.conf, and
> getting the LDAP server and the tryton server to communicate and exchange
> messages.
> 
> I am now getting an error in my slapd log file, and I don't know how to
> proceed.
> 
> I installed ldap_authentication module ver 3.4.4, and I am using GNU Health
> ver 2.8.1. The LDAP Server I am using runs on CENTOS 6
> 
> Would really appreciate the help.
> 
> Here are the relevant logs, configurations:
> 
> GNU Health Log
> 
> [Tue Dec 01 01:53:30 2015]
> ERROR:trytond.modules.ldap_authentication.res:LDAPError: {'desc': 'No such
> object'}
> [Tue Dec 01 01:53:31 2015] INFO:trytond.protocols.dispatcher:bad login or
> password 'cameroncordara1' from ::ffff:192.168.2.3:9652 using JSON-RPC on
> database 'gnuhealth_custom9_account_es'
> 
> 
> var/log/slapd
> 
> Nov 30 03:42:23 nethserver slapd[780]: conn=1271 fd=26 ACCEPT from IP=
> 192.168.2.39:45632 (IP=0.0.0.0:389)
> Nov 30 03:42:23 nethserver slapd[780]: conn=1271 op=0 SRCH
> base="cn=libuser,ou=people,dc=directory,dc=nh" scope=0 deref=0
> filter="(uid=cameroncordara1)"
> Nov 30 03:42:23 nethserver slapd[780]: conn=1271 op=0 SRCH attr=uid
> Nov 30 03:42:23 nethserver slapd[780]: conn=1271 op=0 SEARCH RESULT tag=101
> err=32 nentries=0 text=

This looks like the search should not be on uid attribute.
You can configure the UID attribute in the configuration:
http://doc.tryton.org/3.4/modules/ldap_authentication/doc/index.html#uid

> Nov 30 03:42:24 nethserver slapd[780]: conn=1271 op=1 UNBIND
> Nov 30 03:42:24 nethserver slapd[780]: conn=1271 fd=26 closed
> 
> 
> trytond.conf
> 
> [ldap_authentication]
> # The URI to connect to the LDAP server.
> #uri = ldap://host:port/dn?attributes?scope?filter?extensions
> # A basic default URL could look like
> uri = ldap://192.168.2.5:389/cn=libuser,ou=people,dc=directory,dc=nh
> bind_pass = *****************

-- 
Cédric Krier - B2CK SPRL
Email/Jabber: address@hidden
Tel: +32 472 54 46 59
Website: http://www.b2ck.com/

pgpje9DA4bEkQ.pgp
Description: PGP signature