[CPS-devel] Re: CPSLDAPsetup problem

[Florent Guillaume]

On 11 Apr 2006, at 14:55, Olivier Grisel wrote:
> lopez adrian a écrit :
>> Here the Trace log of an attempt to authenticate with LDAP :
>> 2006-04-11T14:41:25 TRACE searchLDAP Searching cache for  
>> {'filter': '(&(objectClass=inetOrgPerson)(uid=alopezrufian))',  
>> 'scope': 2, 'base': 'ou=Labege,ou=People,o=Astek,dc=robinson',  
>> 'attrs': ['cn', 'cpsGroups', 'cpsRoles', 'dn', 'givenName',  
>> 'mail', 'o', 'ou', 'postalAddress', 'sn', 'telephoneNumber',  
>> 'title', 'uid', 'userPassword']}
>> ------
>> 2006-04-11T14:41:25 TRACE searchLDAP search_s  
>> base=ou=Labege,ou=People,o=Astek,dc=robinson scope=2
>                              ^^^^^
> [snip]
>> 2006-04-11T14:41:25 DEBUG getUserWithAuthentication KeyError  
>> ('uid=alopezrufian,ou=Labege,ou=People,o=ASTEK,dc=robinson') for user
>                                            ^^^^^
> LDAP is a case sensitive protocol.

Actually it depends on the attributeTypes and matchingRoles of the  
LDAP attributes. Many are case insensitive in LDAP itself. However  
CPS does case sensitive comparisons for the cases where it has to, so  
it's a good idea to be consistent.

Florent

> Change the configuration of the search base so that it actually  
> matches you LDAP settings.
>
>> 2006-04-11T14:41:25 TRACE txn.508 commit
>> authentification failed... but the password was correct.
>> Did LDAPSetup attempt to load the password and to compare it with  
>> the one given with the user?
>> I see something strange in my members_LDAP folder, the Password  
>> encryption is "none" and i cant change it to SMD5. Is that normal??
>
> This has been fixed in recent CPSDirectory (ie nightly builds).  
> However MD5 is not yet supported (just SSHA and plain text so far).
>

-- 
Florent Guillaume, Nuxeo (Paris, France)   Director of R&D
+33 1 40 33 71 59   http://nuxeo.com   fg at nuxeo.com