Hi Jeff, When you say that it looks just like the above file, does that mean it doesn't have the CASServer::Authenticators::SQLEncrypted authenticator section that is supplied by default? It should have a section at the top:
- class: CASServer::Authenticators::SQLEncrypted database: adapter: mysql database: console_auth username: console_auth password: console_auth server: localhost user_table: users username_column: username The values specified should be the ones generated/specified during installation. There's also a possibility of the YAML being malformed, there's more detail here: https://ask.puppetlabs.com/question/428/error-starting-pe-puppet-dashboard-workers-script/We're using the compact nested mapping format. The spec for the is here: http://www.yaml.org/spec/1.2/spec.html#id2760821 I hope this helps! -Jill On Wed, Mar 13, 2013 at 7:34 AM, Jeff <quainta...@gmail.com> wrote: > Hi All, I'm testing a Puppet install and running into a problem enabling > AD authentication: > > http://docs.puppetlabs.com/pe/2.7/console_auth.html#using-third-party-authentication-services > > I've followed the instructions in there and the end result is either only > AD auth or only local auth, once I turn on activedirectoryldap inside the > cas_client_config.yml file I get "invalid credentials given" for my local > user in the console-auth logs.. if i disable activedirectory i can locally > authenticate again. > > furthermore, when I do log in with the local account I see queries going > to my AD server with tcpdump, it appears at least that puppet console isn't > even attempting a local check. > > my cas_client_config.yml file looks exactly like the example in the above > URL with both local and activedirectory uncommented. > > > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users+unsubscr...@googlegroups.com. > To post to this group, send email to puppet-users@googlegroups.com. > Visit this group at http://groups.google.com/group/puppet-users?hl=en. > For more options, visit https://groups.google.com/groups/opt_out. > > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.