I'm having the same problem: after our Active Directory team moved a user 
from OU=A to OU=B, the user couldn't login anymore. 

I have solved this by changing the code 
in /opt/gitlab/embedded/service/gitlab-rails/lib/gitlab/ldap/access.rb => 
don't forget to do a gitlab-ctl reconfigure after changing it.

Instead of searching a user by his DN, it is now searching the user by its 
username.
      def allowed?
        #if Gitlab::LDAP::Person.find_by_dn(user.ldap_identity.extern_uid, 
adapter)
        if Gitlab::LDAP::Person.find_by_uid(user.username, adapter)

I didn't have had any success yet changing the user DN via the API calls 
(with PUT extern_uid)


-- 
You received this message because you are subscribed to the Google Groups 
"GitLab" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to gitlabhq+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/gitlabhq/b7b451c4-e8cf-407a-aeef-a81093957c3f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to