
fthomas49a at gmail
Aug 6, 2013, 4:06 PM
Post #1 of 1
(22 views)
Permalink
|
|
Active Directory and LDAP Plugin
|
|
Hello everyone, I have been tasked with integrating our Trac installation with our Active Directory (2008). However, I am running into some errors that I can't quite wrap my head around. The errors stop when I switch group_bind to false. My reading of it is that something is failing in the group search. Is this correct? Curiously, this doesn't seem to be affected when I intentionally mess up my password. I recall getting a specific error for bad credentials when I tried a few months back, so I think it is failing before it even tries to speak to the domain controller. Has anyone had any recent success with AD and Trac? The main Trac error is: TypeError: argument 2 must be string or read-only buffer, not None Traceback: Traceback (most recent call last): File "/usr/lib/python2.4/site-packages/Trac-0.12.2-py2.4.egg/trac/web/main.py", line 511, in _dispatch_request dispatcher.dispatch(req) File "/usr/lib/python2.4/site-packages/Trac-0.12.2-py2.4.egg/trac/web/main.py", line 237, in dispatch resp = chosen_handler.process_request(req) File "/usr/lib/python2.4/site-packages/Trac-0.12.2-py2.4.egg/trac/wiki/web_ui.py", line 120, in process_request req.perm(page.resource).require('WIKI_VIEW') File "/usr/lib/python2.4/site-packages/Trac-0.12.2-py2.4.egg/trac/perm.py", line 575, in require if not self._has_permission(action, resource): File "/usr/lib/python2.4/site-packages/Trac-0.12.2-py2.4.egg/trac/perm.py", line 566, in _has_permission decision = PermissionSystem(self.env). \ File "/usr/lib/python2.4/site-packages/Trac-0.12.2-py2.4.egg/trac/perm.py", line 454, in check_permission perm) File "/usr/lib/python2.4/site-packages/Trac-0.12.2-py2.4.egg/trac/perm.py", line 285, in check_permission permissions = PermissionSystem(self.env). \ File "/usr/lib/python2.4/site-packages/Trac-0.12.2-py2.4.egg/trac/perm.py", line 372, in get_user_permissions for perm in self.store.get_user_permissions(username) or []: File "/usr/lib/python2.4/site-packages/Trac-0.12.2-py2.4.egg/trac/perm.py", line 173, in get_user_permissions subjects.update(provider.get_permission_groups(username) or []) File "/usr/lib/python2.4/site-packages/LdapPlugin-0.7.0dev-py2.4.egg/ldapplugin/api.py", line 109, in get_permission_groups ldapgroups = self._get_user_groups(username) File "/usr/lib/python2.4/site-packages/LdapPlugin-0.7.0dev-py2.4.egg/ldapplugin/api.py", line 150, in _get_user_groups ldap_groups = self._ldap.get_groups() File "/usr/lib/python2.4/site-packages/LdapPlugin-0.7.0dev-py2.4.egg/ldapplugin/api.py", line 554, in get_groups groups = self.get_dn(self.basedn, 'objectclass=' + self.groupname) File "/usr/lib/python2.4/site-packages/LdapPlugin-0.7.0dev-py2.4.egg/ldapplugin/api.py", line 577, in get_dn sr = self._search(basedn, filterstr, ['dn'], ldap.SCOPE_SUBTREE) File "/usr/lib/python2.4/site-packages/LdapPlugin-0.7.0dev-py2.4.egg/ldapplugin/api.py", line 660, in _search self._open() File "/usr/lib/python2.4/site-packages/LdapPlugin-0.7.0dev-py2.4.egg/ldapplugin/api.py", line 645, in _open self._ds.simple_bind_s(self.bind_user, self.bind_passwd) File "/usr/lib/python2.4/site-packages/ldap/ldapobject.py", line 175, in simple_bind_s msgid = self.simple_bind(who,cred,serverctrls,clientctrls) File "/usr/lib/python2.4/site-packages/ldap/ldapobject.py", line 169, in simple_bind return self._ldap_call(self._l.simple_bind,who,cred,EncodeControlTuples(serverctrls),EncodeControlTuples(clientctrls)) File "/usr/lib/python2.4/site-packages/ldap/ldapobject.py", line 94, in _ldap_call result = func(*args,**kwargs) TypeError: argument 2 must be string or read-only buffer, not None [ldap] section of trac.ini: [ldap] bind_password = censored bind_user = CN=Administrator,CN=Users,DC=sandbox,DC=localdomain enable = true group_bind = true groupattr = cn groupname = group groupmember = member groupmemberisdn = true manage_group = false host = 10.41.0.83 port = 3268 use_tls = false uidattr = sAMAccountName basedn = dc=sandbox,dc=localdomain user_rdn = cn=Users group_rdn = cn=Users -- You received this message because you are subscribed to the Google Groups "Trac Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to trac-users+unsubscribe [at] googlegroups To post to this group, send email to trac-users [at] googlegroups Visit this group at http://groups.google.com/group/trac-users. For more options, visit https://groups.google.com/groups/opt_out.
|