Anyone tried LDAP authentication against OS X Open Directory ?

201 views
Skip to first unread message

Benjamin Ruoff

unread,
Jul 29, 2013, 9:20:56 AM7/29/13
to gitl...@googlegroups.com
Has anyone successfully tried to do that?

I simply can't get it to work. 

My current configuration looks like this.

  ldap:
    enabled: true
    host: 'myhost'
    base: 'dc=subdomain,dc=domain,dc=tld'
    port: 636
    uid:  'uid'
    method: 'plain'
    bind_dn: 'cn=users,dc=subdomain,dc=domain,dc=tld'
    password: ''

When I try to login I always get the message that it couldn't bind.

Anyone has a clue whats wrong ?  

Benjamin Ruoff

unread,
Jul 30, 2013, 4:33:27 AM7/30/13
to gitl...@googlegroups.com
Got it.

On OS X the port is 389 not 636, as stated in the sample config.

David Drouin-Prince

unread,
Aug 2, 2013, 12:35:05 AM8/2/13
to gitl...@googlegroups.com
389 is the default port for Windows Active Directory too. I think 636 is the default secure connection port using SSL (I think). 

Benjamin Ruoff

unread,
Feb 13, 2014, 9:52:03 AM2/13/14
to gitl...@googlegroups.com
Uuuh and here we go again.

After updating from Snow Lion to Mavericks and installing the new OS X Server, LDAP Login isn't working anymore.

Anyone else having this Problem? I searched for hours now on Google, but I had no luck finding a solution.
 

Am Montag, 29. Juli 2013 15:20:56 UTC+2 schrieb Benjamin Ruoff:

David

unread,
Feb 13, 2014, 10:26:42 AM2/13/14
to gitl...@googlegroups.com
Which GitLab version? Is it 6.5? If so, something has changed since last version concerning authentication in general. Please take a look at this issue: https://github.com/gitlabhq/gitlabhq/issues/6119. It might be your problem. 

Dave


--
You received this message because you are subscribed to a topic in the Google Groups "GitLab" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/gitlabhq/Ds5Sjaa3fn4/unsubscribe.
To unsubscribe from this group and all its topics, send an email to gitlabhq+u...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Message has been deleted

Benjamin Ruoff

unread,
Feb 13, 2014, 10:39:53 AM2/13/14
to gitl...@googlegroups.com
Hi Dave,

no its 6.1.0 b595503. But I take a look at your link.

Ben

David

unread,
Feb 13, 2014, 11:28:34 AM2/13/14
to gitl...@googlegroups.com
What is the configuration in your gitlab.yml file? Same as the first post? If so, instead of using the DNS name of your domain for the "host" entry, try using the IP address of the server. 

Dave


On Thu, Feb 13, 2014 at 10:38 AM, Benjamin Ruoff <benjami...@meetnow.eu> wrote:
Hi Dave,

no its 6.1.0 b595503. But I take a look at your link.

Ben

Am 13.02.2014 um 16:26 schrieb David <dda...@gmail.com>:

__________________________________

Benjamin Ruoff

MeetNow! GmbH
Kohlmeisenweg 6
D-72458 Albstadt

Tel.: +49 7431 / 54 923 92
Fax: +49 7431 / 54 923 99

http://www.meetnow.eu
_________________________________

Handelsregister: Amtsgericht Stuttgart HRB 729623
Umsatzsteuer-ID: DE269167434
Geschäftsführer: Michael Krieger, Patrick Schneider, Benjamin Ruoff

Notice: This transmittal and/or attachments may be privileged or confidential. If you are not the intended recipient, you are hereby notified that you have received this transmittal in error; any review, dissemination, or copying is strictlyprohibited.




Benjamin Ruoff

unread,
Feb 13, 2014, 11:39:05 AM2/13/14
to gitl...@googlegroups.com
Already tried the IP Adress instead of the DNS name but nothing changed. I'm still getting "Invalid Credentials". I also tried different users, in case I forgot my password ;) 

Benjamin Ruoff

unread,
Feb 13, 2014, 11:46:55 AM2/13/14
to gitl...@googlegroups.com
Well but I really think it is more a problem of OS X Server instead of GitLab anyways.

David

unread,
Feb 13, 2014, 11:49:51 AM2/13/14
to gitl...@googlegroups.com
Check the production.log file. Maybe you'll see why you can't login. Please insure that your user does have an email address already setted into the LDAP server. If you think this is a problem with OS X, maybe you got yourself the answer! ;) 
Reply all
Reply to author
Forward
0 new messages