Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

LDAP Connection #85

Closed
yuriprawucki1 opened this issue Oct 24, 2023 · 4 comments
Closed

LDAP Connection #85

yuriprawucki1 opened this issue Oct 24, 2023 · 4 comments

Comments

@yuriprawucki1
Copy link

yuriprawucki1 commented Oct 24, 2023

Hi, I'm building my environment like this:

version: '3.5'

services:
  cockpit:
    image: passwordcockpit/passwordcockpit:1.3.5
    volumes:
      - /passwordcockpit/upload:/var/www/html/upload
    user: '$UID:$GID'
    environment:
      TZ: America/Sao_Paulo
      APACHE_RUN_USER: www-data
      APACHE_RUN_GROUP: www-data
      PASSWORDCOCKPIT_DATABASE_USERNAME: passwordcockpituser
      PASSWORDCOCKPIT_DATABASE_PASSWORD: pass123
      PASSWORDCOCKPIT_DATABASE_HOSTNAME: database
      PASSWORDCOCKPIT_DATABASE_DATABASE: passwordcockpit
      PASSWORDCOCKPIT_BLOCK_CIPHER_KEY: pass123
      PASSWORDCOCKPIT_AUTHENTICATION_SECRET_KEY: pass123
      PASSWORDCOCKPIT_BASEHOST: https://192.168.1.2
      PASSWORDCOCKPIT_SWAGGER: enable
      PASSWORDCOCKPIT_SSL: enable
      PASSWORDCOCKPIT_AUTHENTICATION_TYPE: ldap
      PASSWORDCOCKPIT_ADMIN_PASSWORD: pass123
      PASSWORDCOCKPIT_UPLOAD_ACCEPTED_MIMETYPES: 'pdf'
      PASSWORDCOCKPIT_LDAP_HOST: 192.168.1.200
      PASSWORDCOCKPIT_LDAP_PORT: 389
      PASSWORDCOCKPIT_LDAP_USERNAME: CN=svcLdap,CN=Users,DC=domain,DC=local
      PASSWORDCOCKPIT_LDAP_PASSWORD: pass123
      PASSWORDCOCKPIT_LDAP_BASEDN: DC=domain,DC=local
      PASSWORDCOCKPIT_LDAP_ACCOUNTFILTERFORMAT: (&(memberOf=CN=PassUsers,OU=MyGroups,DC=domain,DC=local)(samaccountname=%s))
      PASSWORDCOCKPIT_LDAP_BINDREQUIRESDN: 'false'
      PASSWORDCOCKPIT_LDAP_USER_ATTR_UNIQUE_IDENTIFIER: 'samaccountname'
      PASSWORDCOCKPIT_LDAP_USER_ATTR_NAME: 'givenname'
      PASSWORDCOCKPIT_LDAP_USER_ATTR_SURNAME: 'sn'
      PASSWORDCOCKPIT_LDAP_USER_ATTR_MAIL: 'mail'
      PASSWORDCOCKPIT_LDAP_USER_ATTR_PHONE: 'telephonenumber'
      PASSWORDCOCKPIT_DEBUG: 'true'
    ports:
      - "443:4343"
    depends_on:
      - database
    deploy:
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure

  database:
    image: mariadb:10.11.2
    #volumes:
      #/passwordcockpit/database:/var/lib/mysql
      #/passwordcockpit/backups:/backups
    user: '$UID:$GID'
    environment:
      MARIADB_ROOT_PASSWORD: pass123
      MARIADB_DATABASE: passwordcockpit
      MARIADB_USER: passwordcockpituser
      MARIADB_PASSWORD: pass123
    command: --character-set-server=utf8 --collation-server=utf8_unicode_ci
    deploy:
      mode: replicated
      replicas: 1
      restart_policy:
        condition: on-failure

However, I cannot log in to the system, neither with the user I entered to integrate with LDAP nor with another AD user.

image

@yuriprawucki1
Copy link
Author

Using an LDAP Search tool I confirm that my filter is correct:
image

@bu3tt1
Copy link
Contributor

bu3tt1 commented Mar 28, 2024

Try with: PASSWORDCOCKPIT_LDAP_BASEDN: CN=Users,DC=domain,DC=local

@bu3tt1
Copy link
Contributor

bu3tt1 commented Apr 3, 2024

Has the problem been solved?

@bu3tt1
Copy link
Contributor

bu3tt1 commented May 16, 2024

This issue was closed because it has been inactive for 14 days since being marked as stale.

@bu3tt1 bu3tt1 closed this as completed May 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants