Ldap Posix Authentication incorrect username or password

Problem: Ldap integration wiht Foreman

Foreman and Proxy versions: 1.17.1-1

Hi guys, i feel completely hopeless now. The very first time (couple months ago) i deployed foreman using foreman-installer package i was able to integrate it with openldap. However, i don’t know what’s going on now but it doesn’t work anymore for some reason.

Test connection checks out as GOOD. But everytime i am trying to login with uid and password i am getting incorrect username or password and log file looks like this:

> 2018-06-06T14:36:55 bdfeb309 [app] [I] Started POST "/users/login" for 192.168.196.85 at 2018-06-06 14:36:55 -0400
2018-06-06T14:36:55 bdfeb309 [app] [I] Processing by UsersController#login as HTML
2018-06-06T14:36:55 bdfeb309 [app] [I]   Parameters: {"utf8"=>"✓", "authenticity_token"=>"s7r9JigkFX5KUvt953dXy/zjvtXcloWnjL/zN9iIITd8xnWlOssmm6t4UPPBsgPihV2cH6m/fCpzmwGDzMlspA==", "login"=>{"login"=>"ysibirski", "password"=>"[FILTERED]"}, "commit"=>"Log In"}
2018-06-06T14:36:56 bdfeb309 [app] [I] Redirected to https://techops02.dev.int.luminoso.com/users/login
2018-06-06T14:36:56 bdfeb309 [app] [I] Completed 302 Found in 81ms (ActiveRecord: 67.0ms)
2018-06-06T14:36:56 9ca22485 [app] [I] Started GET "/users/login" for 192.168.196.85 at 2018-06-06 14:36:56 -0400
2018-06-06T14:36:56 9ca22485 [app] [I] Processing by UsersController#login as HTML
2018-06-06T14:36:56 9ca22485 [app] [I]   Rendering users/login.html.erb within layouts/login
2018-06-06T14:36:56 9ca22485 [app] [I]   Rendered users/_welcome_box.html.erb (4.0ms)
2018-06-06T14:36:56 9ca22485 [app] [I]   Rendered users/login.html.erb within layouts/login (6.3ms)
2018-06-06T14:36:56 9ca22485 [app] [I]   Rendering layouts/base.html.erb
2018-06-06T14:36:56 9ca22485 [app] [I]   Rendered layouts/base.html.erb (3.0ms)
2018-06-06T14:36:56 9ca22485 [app] [I] Completed 200 OK in 15ms (Views: 11.0ms | ActiveRecord: 0.8ms)
2018-06-06T14:36:56 d84ee761 [app] [I] Started GET "/javascripts/locale/en/app.js" for 192.168.196.85 at 2018-06-06 14:36:56 -0400
2018-06-06T14:36:56 d84ee761 [app] [F]   
2018-06-06T14:36:56 d84ee761 [app] [F] ActionController::RoutingError (No route matches [GET] "/javascripts/locale/en/app.js"):
2018-06-06T14:36:56 d84ee761 [app] [F]   
2018-06-06T14:36:56 d84ee761 [app] [F] lib/middleware/tagged_logging.rb:18:in `call'
2018-06-06T14:36:56 f8449f2e [app] [I] Started GET "/javascripts/locale/en/app.js" for 192.168.196.85 at 2018-06-06 14:36:56 -0400
2018-06-06T14:36:56 f8449f2e [app] [F]   
2018-06-06T14:36:56 f8449f2e [app] [F] ActionController::RoutingError (No route matches [GET] "/javascripts/locale/en/app.js"):
2018-06-06T14:36:56 f8449f2e [app] [F]   
2018-06-06T14:36:56 f8449f2e [app] [F] lib/middleware/tagged_logging.rb:18:in `call'

Here is my ldap config:

Account:

Account Username  
uid=ysibirski,ou=People,dc=luminoso-llc,dc=com
Use this account to authenticate, optional
Account Password

********
Use this account to authenticate, optional
Base DN
dc=luminoso-llc,dc=com
Groups base DN  
ou=Groups,dc=luminoso-llc,dc=com
 
Attribute mappings: 

Login Name Attribute
uid

First Name Attribute
givenName

Surname Attribute
sn

Email Address Attribute
mail

I know this account has read rights to LDAP server and i tried many other accounts and with no account. I can’t find what’s wrong. I feel hopeless and frustrated. Could you please help me with this? Thank you in advance, Yuri

Never mind it was expecting LDAPS and check mark on “Create user in foreman on first login” That fixed the issue for me.

2 Likes