Bugzilla 4.2.4 - Turning Off LDAP authentication - ldap

I installed Bugzilla 4.2.4. After the install I was asked to create a admin account.
So I put in a email address and a password. Opened Bugzilla and logged in as Admin. Went through the admin configuration. I want to use LDAP to authorize my users. so I set up the LDAP configuration.
I logged out and when I tried to log back in using my LDAP password. I got the following error:
Failed to bind to the LDAP server. The error message was: No such object
Traceback:
at Bugzilla/Auth/Verify/LDAP.pm line 168
Bugzilla::Auth::Verify::LDAP::_bind_ldap_for_search(...) called atBugzilla/Auth/Verify/LDAP.pm line 60
Bugzilla::Auth::Verify::LDAP::check_credentials(...) called at Bugzilla/Auth/Verify/Stack.pm line 62
Bugzilla::Auth::Verify::Stack::check_credentials(...) called at Bugzilla/Auth.pm line 72
Bugzilla::Auth::login(...) called at Bugzilla.pm line 345
Bugzilla::login(...) called at /www/https/htdocs/bugzilla/index.cgi line 40
I might have put a LDAP variable in wrong. But now I can not get back in to Bugzilla. I went to ./checksetup and recreated the admin password. But still Bugzilla is trying to authenticate through LDAP.
How can I tell Bugzilla not to use LDAP authentication so I can log back in and check my LDAP variables?

Inside Bugzilla/data/params file, you can set the value for 'user_verify_class' back to DB, LDAP

Related

LDAP Authentication failed for Citrix Netscaler showing ("Error: '10.0.1.4' is a valid LDAP server. Valid Credentials are not provided)

I have tried every possible method starting from checking connection to resetting password with no special characters.
Couldn't solve the error of Invalid credentials in Citrix ADC 13.0 .
While adding LDAP authentication servers facing the same error over and over again. Have verified the account name, Base DN, Administrator Bind DN but nothing seems to work.
Server '10.0.1.4' is reachable.
port '389/tcp' is open.
'10.0.1.4' is a valid LDAP server.
Valid Credentials are not provided.
Even I could successfully bind from ldp.exe with simple auth (not using SSL) using the same creds. DC running on Windows Server 2016.
Base DN (location of users)= CN=Users,DC=#####,DC=local
Administrator Bind DN = CN=useradmin,CN=Users,DC=#####,DC=local
I had to contact Citrix technical support to get this resolved. He had me downgrade Netscaler to version 13.0.71.44 which fixed the issue. He said it was only a bug in the GUI but I have my doubts. I was originally at 13.0.79.64.

Sonar with ldap plugin does not use LDAP without domain prefix

I'm using sonar 5.6 LTS with LDAP plugin 2.1.0.
The basic LDAP configuation is working fine. Sonar can connect to LDAP (in my case active directory). sonar.log:
Test LDAP connection on ldaps://ldap.mycompany:636: OK
My user mapping is
ldap.user.baseDn=OU=Users,OU=Accounts,DC=mycompany
ldap.user.request=(&(objectClass=user)(sAMAccountName={login}))
When I try to login with mycompany\tobi sonar logs:
DEBUG web[o.s.p.l.LdapUsersProvider] Requesting details for user mycompany\tobi
...
DEBUG web[o.s.p.l.LdapUsersProvider] User mycompany\tobi not found in <default>
This makes sense as sAMAccountName contains the value tobi and not mycompany\tobi. But when using just tobi as login, sonarqube does not connect to LDAP for authentication. I just get "Authentication failed" and the log file contains only
DEBUG web[http] POST /sonar/sessions/login | time=235ms
Any ideas why sonarqube does not always use LDAP? Thanks, Tobi
Thanks to Godin, I've finally found the answer:
The root cause is that I had a local account with the same login credentials before using LDAP. When removing users using the web interface, they are not removed permanently from the database. Instead, they are just deactivated.
I connected to the (postgresql) database and in the users table there were still all old local accounts. So I just changed the login column of all deprecated local accounts with
UPDATE users SET login='username_local' WHERE login='username'
As those accounts are deactivated, they cannot be used to login into sonarqube but should not be removed as some other tables might still have references to them.

Liferay LDAP Authentication does not work properly

I am using Liferay 6.2 and I am trying to do LDAP Authentication. The LDAP Server is provided by another organization and I do not have access to any configuration, I just have credentials for a system account to look up the directory. When I try to log in Liferay with user credentials from the LDAP Server the authentication fails with the following error code:
13:54:05,738 ERROR [http-bio-8080-exec-3][LDAPAuth:341] Problem accessing LDAP server
javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr:
DSID-0315270B, problem 2001 (NO_OBJECT), data 0, best match of:
'O=uni,C=de' remaining name 'ou=people,o=uni,c=de'
The same error that occurs when trying to log in with a user that does not exist in the LDAP directory. Nevertheless, the mapping still works. After trying to log in with valid user credentials there is an entry in the liferay database with the corresponding user data. Accessing Liferay is not possible though.
These are my settings in portal-ext.properties (Test LDAP connections returns success, connection settings are pseudonymised):
ldap.base.provider.url=ldaps://ldap.ldap-server
ldap.base.dn=ou=people,o=uni,c=de
ldap.security.principal=uid=prox,ou=prox,o=uni,c=de
ldap.security.credentials=secret
#auth.pipeline.enable.liferay.check=false
ldap.auth.enabled=true
ldap.auth.required=true
ldap.auth.method=bind
ldap.import.enabled=false
ldap.import.on.startup=false
ldap.import.interval=10
ldap.export.enabled=false
ldap.export.group.enabled=false
ldap.auth.search.filter=(uid=#screen_name#)
ldap.import.user.search.filter=(objectClass=inetOrgPerson)
ldap.attrs.transformer.impl=com.liferay.portal.security.ldap.DefaultAttributesTransformer
ldap.user.mappings=screenName=cn\npassword=userPassword\nfirstName=givenNam\nlastName=sn\njobTitle=title\ngroup=groupMembership
users.email.address.required=false
users.email.address.auto.suffix=#no-emailaddress.com
users.email.address.generator=com.liferay.portal.security.auth.DefaultEmailAddressGenerator
users.email.address.validator=com.liferay.portal.security.auth.DefaultEmailAddressValidator
ldap.password.policy.enabled=false
ldap.import.user.password.enabled=true
ldap.import.user.password.autogenerated=false
ldap.import.user.password.default=test
Check the FQDN on the LDAP side, including the prefixes (cn, ou, etc.), and ensure that it matches the directory configuration within Liferay.
You can try configuring it from the control panel it will be easier for you as it allows to check whether the connection is made or not. You can check the users are fetched or not and it doesnt even need a server restart.
It works now. There were two issues:
I changed ldap.base.dn=ou=people,o=uni,c=de to ldap.base.dn=o=uni,c=de and
ldap.import.user.search.filter=(objectClass=inetOrgPerson) to ldap.import.user.search.filter=(objectClass=*)

IntelliJ PAM Authentication Failure on CVS Update after updating password

When I'm forced to change my Windows AD account password IntelliJ is no longer able to perform any CVS action (e.g. update) on any checked out class files.
Right-click on class file->CVS->Update
Then the Messages console appears with "Error: Authentication failed. Response from server was: PAM authenticate error: Authentication failure"
I manage to workaround this by clearing the .cvspass file referenced under Settings->Version Control->CVS. It doesn't feel like a very elegant solution. I would have expected a prompt of some sort to re-enter my new password.
Is this the only way to getting cvs to work after updating the password?
I did find a compromise (somewhat). No need to delete the entire .cvspass file. I just open it and remove the line that has the repo that's giving me problems at the time.

Openfire database settings issue in mac

I have Openfire 3.7.1 installed on my Mac and have XAMPP installed aswell. I am having trouble configuring OpenFire. In the server settings I have given san-imac.local.lan as the domain name. The selected Standard database connection and picked MySql Database Driver. This is the databse URL jdbc:mysql://localhost:3306/test and given the username password of XAMPP phpmyadmin. But it says
A connection to the database could not be made. View the error message by opening the "/logs/error.log" log file, then go back to fix the problem.
First of all there is no such file in the /logs folder. What should I do to get this working and follow the procedures to get OpenFire up and running.
I need to build an app to connect to openfire for IM chatting like Gmail, Facebook, Yahoo using XMPP. If anybody could provide any guidance aswell, it will be very helpful.
Make Sure that your database is setup correctly including the name of your database, database username, and user's password. If you have this correctly configured then your opens ire should work just fine. Note that it will not accept if the database username has an empty password or not enough access rights to the database.
I hope that those hints will solve your problem.
check your password and username, I had the same error and it took me a while to figure out that I had my username wrong.
Resolved the issue.
log file is not getting created due to file write permission. To resolve this run OF server as follows
Run the openfire.sh file from terminal with sudo. This will start the OF with root access Now the error log file will be created.
My log file has error message as access denied to user #localhost. As I kept the user field blank in db connection page of openfire set up.
Keep the user field as root#localhost if u are using localhost.