[CPS-devel] Re: CPSLDAPSetup with Windows AD

[Olivier Grisel]

RAAD Umar a écrit :
> Hello... Sorry for the late answer... I was sick (and not at work...)
> 
> Back to the problem...
> 
>> > -          Tried to login to the site with the standard “admin” user
>> > defined during the creation of the site (Error message without any 
> detail)

As mentionned in the README file, all users previously stored in the CPS 
directories are deleted when you import the CPSLDAPSetup profile.

http://svn.nuxeo.org/trac/pub/browser/CPS3/products/CPSLDAPSetup/tags/1.0.0/README.txt

To go in the ZMI you should use some user defined in the Zope root acl_users 
(with the Manager role) instead.

>>Which error message?
>
> It's simply written:
> 
>   *"CPS a rencontré une erreur*
> 
> Veuillez nous excuser pour la gêne occasionnée."
> 
> Nothing is written in the sections "error type" or "error value"

There should be something : try to scroll the window. Otherwise edit 
etc/zope.conf, change the loglevel for event.log to DEBUG or TRACE and set the 
debug-mode to "on" and watch the event.log file to get the traceback.

>>Go to the ZMI in portal_directories/members_ldap/manage_main and using the
>>"Search" tab try to see if you can reach you directory server.
> 
> When I go to the ZMI I can find portal_directories/members_ldap/ but 
> there is no manage_main section there.

I meant :

http://server:port/cps/portal_directories/members_ldap/manage_main

> However I tried a search of any 
> user in it and a CPS page opens with the same error as described before.
> 
>   *"CPS a rencontré une erreur*
> 
> Veuillez nous excuser pour la gêne occasionnée."
> 
> Nothing is written in the sections "error type" or "error value"

Same as above.

>> > In the installation procedure it is written that : “you'll need to give
>> > each member the Member role for her CPS  login to succeed.” But due to
>> > the fact that I havn’t found any way to give this role that doesn’t work
>> > too :-(
> 
>>Go to the Roles directory and give the Member role to you users.
> 
> Everywhere I could do this I recieve the same error as before :

You should do that as an admin user defined in Zope (at the top level), not in 
your LDAP server.

> 
> Here is the log of the login attempt with local "admin"

This user does not exist any longer.

> Here is the log of the login attempt with a user from AD "cpsuser1"
> 
> + + + + + ++ + + + + ++ + + + + ++ + + + + ++ + + + + ++ + + + + +
> 
> 2006-06-14T09:48:16 ERROR getUserWithAuthentication Got 
> ConfigurationError(Directory 'members_ldap': Invalid credentials) while 
> authenticating cpsuser1

This means either your password is wrong or that the schema configuration you 
sat up does not feed your LDAP server with the right credentials.

By the way, did you really adapt the settings to match the Active Directories 
specifics? As said earlier on this list, the CPSLDAPSetup default configuration 
is meant to work on LDAP directories that work with the inetOrgPerson schema 
with uid as rdn. To work with AD you need to adapt the configuration to match AD 
expectations.

Here is a sample conf that was reported to work on AD: 
http://svn.nuxeo.org/trac/pub/ticket/1661

-- 
Olivier