LDAP fails with no details in the logs

[Daniel Watrous]

Hi,

I'm trying to use LDAP authentication, but I can't get it to work and I don't see anything in the logs to help. Here's the only thing I get from a failed login.

Apr 14, 2017 3:29:19 PM jenkins.security.SecurityListener fireFailedToLogIn

FINE: failed to log in: my....@company.com

I can't even get to the point where I can debug the LDAP settings because it just fails like this every time.

Is there some way I can get more details about what's happening and why this is failing?

[Stephen Connolly]

Try building my PR against the ldap plugin that adds a validate button and using that. See if the validate button helps diagnose and fix the issue!

--
You received this message because you are subscribed to the Google Groups "Jenkins Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-use...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/8dcee899-491f-4366-b2ff-d28c42dcfb94%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--

Sent from my phone

[Daniel Watrous]

I'm not sure how to do that. I assume you mean a pull request, but I think this might be beyond me at this point.

[Stephen Connolly]

Oh well, it will be Wednesday before I am back at computer... maybe some kind soul will help you out

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/c49d06b3-92da-4c7c-9b4a-85adc357f97a%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Mark Waite]

I cloned the master branch of the ldap-plugin, then pulled PR18 into it and built it.

If it helps you, the code can be downloaded from https://drive.google.com/open?id=0B9GyYWyfT1N5c1pabnBkbnVyRjA 

Thanks,

Mark Waite

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/CA%2BnPnMyRJ%2BXQVQFap0SdoUDtOPimj2aM6iH6DeY6qWB3Ag9zdg%40mail.gmail.com.

[Daniel Watrous]

Thank you for this. I downloaded and installed this plugin, but I'm still unable to make progress on my problem. 

There is now a "Test LDAP settings" button. When I click this it produces a popover window that says "undefined" with an X to close the popover.

I tried logging in and see the same two lines in the logs.

[Stephen Connolly]

What browser?

If it's not working on your browser I'll need to know.

Works on Chrome for me

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/edab696c-2a2a-4a16-86c5-02beaa7e696a%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

[Stephen Connolly]

I was able to reproduce the "undefined" modal dialog issue and I believe I have fixed it. Please try this -SNAPSHOT build:

https://www.dropbox.com/s/p457a5ieud7t1l4/ldap-a258feee8ef904ac557b9c29ef1bd4e71e27d713.hpi

which was built from https://github.com/jenkinsci/ldap-plugin/pull/18/commits/a258feee8ef904ac557b9c29ef1bd4e71e27d713 and has my claimed fix for the dialog issue you encountered

Let me know how you get on.

-Stephen

To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-users+unsubscribe@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/edab696c-2a2a-4a16-86c5-02beaa7e696a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Daniel Watrous]

I noticed that I only got undefined if I wasn't showing the advanced options. The updated plugin shows the dialog even when the advanced options aren't visible. Thanks.

This did give me some additional detail to work with the AD team and see if I can get LDAP auth working. It seems I need a different management DN.

To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-users/edab696c-2a2a-4a16-86c5-02beaa7e696a%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.