Foreman 1.2 ldap debug

Is ruby_ldap required for ldap authentication in foreman or is it the
gem net-ldap?

I installed using the foreman installer and I think I have ldap
configured correctly to authenticate against MS AD but I have entries in
var/log/messages about being unable to load ruby_ldap but saw elsewhere
it was only a warning so I'm not sure

Is there a way to see if I have all the necessary ruby ldap gems
installed and working to rule out that side of the equation?

Should I download the
http://koji.katello.org/koji/buildinfo?buildID=4641 build here as
recommended in other posts regarding ldap in foreman 1.2 ?

Foreman-debug

OS: redhat

Release: 6.4

Foreman: 1.2.0

Ruby: 1.8.7 patchlevel 352

Puppet 3.2.3

Gem List on foreman/puppet master

Daemon_controller

Fastthread

Highline

Json

Passenger

Rack

Rack-test

Rkerberos

Sinatra

Hello Michael,

in Foreman 1.2 on RHEL6, we currently install net-ldap rubygem. The
build you are referring to is a SCL build.

According to rubygems net-ldap does not require ruby_ldap:

https://rubygems.org/gems/net-ldap

> Is ruby_ldap required for ldap authentication in foreman or is it the
> gem net-ldap?

So no. What ruby_ldap package are you referring to? I can't find this
package in RHEL6.

Please note this gem (and all the dependencies) are installed within an
SCL environment. Basically, these gems cannot "see" other (like system)
gems.

> I installed using the foreman installer and I think I have ldap
> configured correctly to authenticate against MS AD but I have entries in
> var/log/messages about being unable to load ruby_ldap but saw elsewhere
> it was only a warning so I'm not sure

Can you paste these?

Can you also paste foreman-debug tarball somewhere?

Also I am interested, how did you configure LDAP. Did you install any
other rubygems manually?

> Is there a way to see if I have all the necessary ruby ldap gems
> installed and working to rule out that side of the equation?

By default, this gem should be pulled automatically. Everything is ready
to be configured with LDAP. Please paste the errors to see what is going
on in more detail.

··· -- Later,

Lukas “lzap” Zapletal
irc: lzap #theforeman

I think you need net-ldap gem (at least version 0.3.1). Could you please post
the log output to see whether it's something familiar?

··· -- Marek

On Thursday 01 of August 2013 12:49:43 Michael.OBrien wrote:

Is ruby_ldap required for ldap authentication in foreman or is it the
gem net-ldap?

I installed using the foreman installer and I think I have ldap
configured correctly to authenticate against MS AD but I have entries in
var/log/messages about being unable to load ruby_ldap but saw elsewhere
it was only a warning so I’m not sure

Is there a way to see if I have all the necessary ruby ldap gems
installed and working to rule out that side of the equation?

Should I download the
http://koji.katello.org/koji/buildinfo?buildID=4641 build here as
recommended in other posts regarding ldap in foreman 1.2 ?

Foreman-debug

OS: redhat

Release: 6.4

Foreman: 1.2.0

Ruby: 1.8.7 patchlevel 352

Puppet 3.2.3

Gem List on foreman/puppet master

Daemon_controller

Fastthread

Highline

Json

Passenger

Rack

Rack-test

Rkerberos

Sinatra

Hi Marek, Lukas

The var/log/messages just states
"Failed to load ruby LDAP library. LDAP functionality will not be available"
I didn't install any gems myself, everything came from the foreman installer
I configured ldap using the foreman gui using ldap settings I previously
used before to authenticate against the same AD domain
Attached is the tarball

foreman1.2debug.tar.gz (10.4 KB)

··· On Thursday, 1 August 2013 15:25:08 UTC+1, Marek Hulán wrote: > > I think you need net-ldap gem (at least version 0.3.1). Could you please > post > the log output to see whether it's something familiar? > > -- > Marek > > On Thursday 01 of August 2013 12:49:43 Michael.OBrien wrote: > > Is ruby_ldap required for ldap authentication in foreman or is it the > > gem net-ldap? > > > > I installed using the foreman installer and I think I have ldap > > configured correctly to authenticate against MS AD but I have entries in > > var/log/messages about being unable to load ruby_ldap but saw elsewhere > > it was only a warning so I'm not sure > > > > > > > > Is there a way to see if I have all the necessary ruby ldap gems > > installed and working to rule out that side of the equation? > > > > Should I download the > > http://koji.katello.org/koji/buildinfo?buildID=4641 build here as > > recommended in other posts regarding ldap in foreman 1.2 ? > > > > > > > > Foreman-debug > > > > OS: redhat > > > > Release: 6.4 > > > > Foreman: 1.2.0 > > > > Ruby: 1.8.7 patchlevel 352 > > > > Puppet 3.2.3 > > > > > > > > Gem List on foreman/puppet master > > > > Daemon_controller > > > > Fastthread > > > > Highline > > > > Json > > > > Passenger > > > > Rack > > > > Rack-test > > > > Rkerberos > > > > Sinatra > >

Michael,

this error is not coming from Foreman, but puppet:

Jul 29 10:54:58 cdi-pup puppet-user[23079]: Failed to load ruby LDAP
library. LDAP functionality will not be available

There should be nothing wrong with our LDAP setup. Maybe you have
misconfiguration? Did you follow our instruction carefully?

http://theforeman.org/manuals/1.1/index.html#4.1WebInterface

What is your LDAP settings (unfortunately this is not collected in our
foreman-debug script - I will add that).

··· -- Later,

Lukas “lzap” Zapletal
irc: lzap #theforeman