1) I'm using a service account. I verified the DN's by connecting using
Apache Directory Studio.
2) I just promoted the service account user but I'm still facing the same
error.
3) Logging is not helping: it's only reiterating what the original error is
telling me: Caught LDAPError while authenticating ken:
INVALID_CREDENTIALS({'desc': 'Invalid credentials'},) I added logging by
adding this to the config:
import logging
logger = logging.getLogger('django_auth_ldap')
logger.addHandler(logging.StreamHandler())
logger.setLevel(logging.DEBUG)
On Sunday, October 8, 2017 at 11:06:20 PM UTC-4, James Schneider wrote:
>
>
>
> On Oct 8, 2017 7:33 PM, "Ken Jenney" <[email protected] <javascript:>>
> wrote:
>
> I've got LDAPSearch configured to work with my Synology Directory Server.
> Users can authenticate fine but when I try to map a user to a group I get
> INVALID_CREDENTIALS:
>
>
> Are you binding to LDAP using the users' credentials, or do you have a
> service account? It appears you have a service account configured, but I
> can't tell whether or not it is in use based on the settings you provided.
>
> Have you:
>
> a) Verified the DN being used against the Synology NAS for the user and
> group authentication requests? This can be found in the Synology auth logs.
> b) Verified that the account in use has permission to traverse that
> portion of the LDAP schema, including a user being able to query their own
> groups, or the service account being able to list other users' groups?
> c) Increased the logging level for Django and specifically for the Django
> LDAP package you are using to examine what is happening?
>
> This issue will likely be illuminated very easily by the detailed logs on
> each side of the connection.
>
> -James
>
--
You received this message because you are subscribed to the Google Groups
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-users/eb005b37-172c-4597-a477-90a8d288a935%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
