LDAP authentication error

[Adam Weremczuk]

Hi all,



Review Board 3.0.17



My LDAP settings:

-> Authentication Method: LDAP
-> LDAP Server: ldap://192.168.x.x:389
-> Review Board LDAP Bind Account: a...@domain.co.uk
-> Review Board LDAP Bind Password: 
-> LDAP Base DN: cn=Users,dc=domain,dc=co,dc=uk
-> Username Attribute: sAMAccountName
-> Given Name Attribute: givenName
-> Surname Attribute: sn
-> Full Name Attribute: displayName
-> E-Mail LDAP Attribute: mail
-> E-Mail Domain: (blank)
-> Custom LDAP User Search Filter: sAMAccountName=%s



My ldapsearch results:

ldapsearch -D 'du...@domain.co.uk' -b 'cn=Users,dc=domain,dc=co,dc=uk' -H 
ldap://192.168.x.x -W sAMAccountName=dummy
Enter LDAP Password:
# extended LDIF
#
# LDAPv3
# base  with scope subtree
# filter: sAMAccountName=dummy
# requesting: ALL
#

# dummy, Users, domain.co.uk
dn: CN=dummy,CN=Users,DC=domain,DC=co,DC=uk
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: user
sn: Account
givenName: Dummy
instanceType: 4
whenCreated: 20180313125318.0Z
displayName: Dummy Account
uSNCreated: 2511997
objectGUID:: Y5A3vaWhyuKF9j3q/Ek+9w==
badPwdCount: 0
codePage: 0
countryCode: 0
badPasswordTime: 0
lastLogoff: 0
lastLogon: 0
objectSid:: AQUAAAUVyHdPCeZosyKsV0w3FAUAAA==
accountExpires: 9223372036854775807
logonCount: 0
sAMAccountName: dummy
sAMAccountType: 805306368
userPrincipalName: du...@domain.co.uk
objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=domain,DC=co,DC
 =uk
userAccountControl: 66048
cn: dummy
name: dummy
memberOf: CN=Domain Users,CN=Users,DC=domain,DC=co,DC=uk
memberOf: CN=Remote Desktop Users,CN=Builtin,DC=domain,DC=co,DC=uk
memberOf: CN=RDP Domain Users,CN=Users,DC=domain,DC=co,DC=uk
primaryGroupID: 2354
msSFU30NisDomain: example_domain
uidNumber: 5652
loginShell: /bin/bash
unixHomeDirectory: /home/dummy
gidNumber: 4700
msSFU30Name: dummy
uid: dummy
mail: du...@domain.com
pwdLastSet: 13217705164000
whenChanged: 20191108164604.0Z
uSNChanged: 3800280
distinguishedName: CN=dummy,CN=Users,DC=domain,DC=co,DC=uk

# search result
search: 2
result: 0 Success

# numResponses: 2
# numEntries: 1



On login attempt Review Board error log produces: 

2020-05-21 10:43:09,771 - INFO -  - root - Reloading logging settings
2020-05-21 10:43:09,772 - DEBUG -  - root - Logging to 
/var/log/reviewboard/reviewboard.log with a minimum level of DEBUG
2020-05-21 10:43:09,826 - WARNING -  - root - Error authenticating user 
"dummy" in LDAP: {'info': u'acl_read: Error retrieving instanceType for 
base. at ../source4/dsdb/samdb/ldb_modules/acl_read.c:356', 'desc': u'No 
such object'}
2020-05-21 10:43:09,827 - ERROR -  - root - Unexpected error authenticating 
user "dummy" in LDAP: 'NoneType' object has no attribute 'decode'
Traceback (most recent call last):
  File 
"/usr/local/lib/python2.7/dist-packages/reviewboard/accounts/backends/ldap.py", 
line 146, in authenticate
userdn.decode('utf-8'), username)
AttributeError: 'NoneType' object has no attribute 'decode'



Is it related to DB backend being set up as MySQL 5.7 with utf8 or 
something else?

-- 
Supercharge your Review Board with Power Pack: 
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: 
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"Review Board Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/reviewboard/4711e7ae-60ab-42fd-8b55-2b708bb0d62c%40googlegroups.com.

Re: LDAP authentication error

[Paul Mansfield]

On Thu, 21 May 2020 at 11:52, Adam Weremczuk  wrote:
> My LDAP settings:

do you have python (2.x) ldap module installed?

$ pip2 list | egrep ldap
DEPRECATION: Python 2.7 reached the end of its life on January 1st,
2020. Please upgrade your Python as Python 2.7 is no longer
maintained. pip 21.0 will drop support for Python 2.7 in January 2021.
More details about Python 2 support in pip, can be found at
https://pip.pypa.io/en/latest/development/release-process/#python-2-support
python-ldap  2.4.15

-- 
Supercharge your Review Board with Power Pack: 
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: 
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"Review Board Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/reviewboard/CAMukpcBh52M_TxbihdKpZD%3D08p44-nF4NLbOBC6PcLV%2BsWqHmw%40mail.gmail.com.

Re: LDAP authentication error

[Adam Weremczuk]

On Thu, 21 May 2020 at 12:06, Paul Mansfield 
wrote:

>
> do you have python (2.x) ldap module installed?
>
>
pip2 list | egrep ldap
DEPRECATION: The default format will switch to columns in the future. You
can use --format=(legacy|columns) (or define a format=(legacy|columns) in
your pip.conf under the [list] section) to disable this warning.
python-ldap (3.2.0)

-- 
Supercharge your Review Board with Power Pack: 
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: 
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"Review Board Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/reviewboard/CALC-DAGXdmn_g-noPJnh1BZHBHDwZMdsRscLATdhYZkCDzyy7w%40mail.gmail.com.

Re: LDAP authentication error

[Adam Weremczuk]

pip2 install python-ldap
Requirement already satisfied: python-ldap in
/usr/local/lib/python2.7/dist-packages
Requirement already satisfied: pyasn1>=0.3.7 in
/usr/local/lib/python2.7/dist-packages (from python-ldap)
Requirement already satisfied: pyasn1-modules>=0.1.5 in
/usr/local/lib/python2.7/dist-packages (from python-ldap)

Is my version (3.2.0) known to be problematic and are you suggesting 2.4.15
?

>

-- 
Supercharge your Review Board with Power Pack: 
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: 
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"Review Board Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/reviewboard/CALC-DAHM5VA7wzupBU3bTQTC4VZvrCfMjksFmLDK1eVMroxphQ%40mail.gmail.com.

Re: LDAP authentication error

[Paul Mansfield]

On Thu, 21 May 2020 at 13:35, Adam Weremczuk  wrote:
> Is my version (3.2.0) known to be problematic and are you suggesting 2.4.15 ?

No, I just wanted to be sure that reviewboard would be able to load
python ldap if it needed it.

if you run "sudo netstat -anp | grep -E '389|636' " and then "tcpdump
port 389 or port 686" can you verify that reviewboard is actually
making a connection to the ldap server?

-- 
Supercharge your Review Board with Power Pack: 
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: 
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"Review Board Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/reviewboard/CAMukpcAiWa2EobdaxWasaG_XoH5Ba8Yy2oGq5aDV%2BqZJByNZSA%40mail.gmail.com.

Re: LDAP authentication error

[Adam Weremczuk]

The LDAP server listens on both 389 / 636 and I can telnet to either port 
from Review Board client fine.

A logging in attempt generates traffic with 13 packets being exchanged:

RB - Review Board client
LD - LDAP server
[ ] - flag


   1. RB -> LD   [S]
   2. LD -> RB   [S.]
   3. RB -> LD   [.]
   4. RB -> LD   [P.]
   5. LD -> RB   [.]
   6. LD -> RB   [P.]
   7. RB -> LD   [.]
   8. RB -> LD   [P.]
   9. LD -> RB   [P.]
   10. RB -> LD   [P.]
   11. RB -> LD   [F.]
   12. LD -> RB   [F.]
   13. RB -> LD   [.]

-- 
Supercharge your Review Board with Power Pack: 
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: 
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"Review Board Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/reviewboard/f48bd2ed-31b2-44d8-a72e-2263cd0c1932%40googlegroups.com.

ChangeLog: May 21, 2020 — Trial Limit Increases, New Releases, Student Wrap-Up

[Christian Hammond]

Hi everyone,

Been a while since our last ChangeLog. We're probably going to be doing
these semi-monthly as we work through the releases and testing that's on
our plate, and assisting paid support 
customers who are dealing with their own backlogs. The plan is to get back
to a weekly format once things settle down.

Here's this month's ChangeLog
, covering:


   - Increases in Power Pack  and
   RBCommons  trial lengths (from 1 month to 2)
   - Recent releases (RBTools
   , kgb
   , and babel-plugin-django-gettext
   )
   - Review Board 3.0.18 release preparation
   - Review Board 4.0 and RBTools 2.0 beta status
   - Wrap-up of our semester with the CANOSP student program


Stay healthy, everyone.

Christian

-- 
Christian Hammond
President/CEO of Beanbag 
Makers of Review Board 

-- 
Supercharge your Review Board with Power Pack: 
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: 
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"Review Board Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/reviewboard/CAE7Vnd%3DHF-_rvgiyMu%2B%3D7takihSz-2rFHo32JOMfyQSq2gNGSw%40mail.gmail.com.