Re: LDAPSearch Troubleshooting

1) I'm using a service account. I verified the DN's by connecting using Apache Directory Studio. 

2) I just promoted the service account user but I'm still facing the same error.

3) Logging is not helping: it's only reiterating what the original error is telling me: Caught LDAPError while authenticating ken: INVALID_CREDENTIALS({'desc': 'Invalid credentials'},) I added logging by adding this to the config:

import logging


logger = logging.getLogger('django_auth_ldap')
logger.addHandler(logging.StreamHandler())
logger.setLevel(logging.DEBUG)

On Sunday, October 8, 2017 at 11:06:20 PM UTC-4, James Schneider wrote:

On Oct 8, 2017 7:33 PM, "Ken Jenney" <kje...@gmail.com> wrote:

I've got LDAPSearch configured to work with my Synology Directory Server. Users can authenticate fine but when I try to map a user to a group I get INVALID_CREDENTIALS:

Are you binding to LDAP using the users' credentials, or do you have a service account? It appears you have a service account configured, but I can't tell whether or not it is in use based on the settings you provided.

Have you:

a) Verified the DN being used against the Synology NAS for the user and group authentication requests? This can be found in the Synology auth logs.

b) Verified that the account in use has permission to traverse that portion of the LDAP schema, including a user being able to query their own groups, or the service account being able to list other users' groups?

c) Increased the logging level for Django and specifically for the Django LDAP package you are using to examine what is happening?

This issue will likely be illuminated very easily by the detailed logs on each side of the connection.

-James

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/eb005b37-172c-4597-a477-90a8d288a935%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.