Problem with Active Directory authentication on vOneCloud

Hi
I have read the previous posts on this topic and have not been able to resolve the issue.

My LDAP setup for simple LDAP-Active Directory on port 389. The DC is on the same network as the vonecloud server so Firewalls are not an issue.


:order:

  • DChostname
    DChostname:
    :mapping_generate: true
    :mapping_timeout: 300
    :mapping_filename: server1.yaml
    :mapping_key: GROUP_DN
    :mapping_default: 1
    :auth_method: :simple
    :host: DChostname
    :port: 389
    :base: ou=users,ou=infrastructure,ou=users,ou=business services,ou=mydomain,dc=tld
    :user_field: sAMAccountName

Output of ‘ruby -wd /var/lib/one/remotes/auth/ldap/authenticate poceallaigh - MyPassword’

Exception LoadError' at /usr/share/rubygems/rubygems.rb:1096 - cannot load such file -- rubygems/defaults/ruby ExceptionLoadError’ at /usr/share/rubygems/rubygems/core_ext/kernel_require.rb:55 - cannot load such file – abrt
Exception LoadError' at /usr/share/rubygems/rubygems/core_ext/kernel_require.rb:141 - cannot load such file -- abrt /var/lib/one/remotes/auth/ldap/authenticate:42: warning: assigned but unused variable - pass ExceptionNameError’ at /usr/share/ruby/psych/core_ext.rb:16 - method to_yaml' not defined in Object ExceptionNameError’ at /usr/share/ruby/psych/core_ext.rb:29 - method yaml_as' not defined in Module ExceptionNameError’ at /usr/share/ruby/psych/deprecated.rb:80 - undefined method to_yaml_properties' for classObject’
/usr/lib/one/ruby/opennebula/xml_utils.rb:90: warning: -' after local variable is interpreted as binary operator /usr/lib/one/ruby/opennebula/xml_utils.rb:90: warning: even though it seems like unary operator /usr/lib/one/ruby/opennebula/xml_pool.rb:25: warning: method redefined; discarding old initialize /usr/lib/one/ruby/opennebula/xml_element.rb:406: warning: previous definition of initialize was here /usr/lib/one/ruby/opennebula/xml_pool.rb:31: warning: method redefined; discarding old each_element /usr/lib/one/ruby/opennebula/xml_element.rb:412: warning: previous definition of each_element was here ExceptionLoadError’ at /usr/share/rubygems/rubygems/core_ext/kernel_require.rb:55 - cannot load such file – nokogiri
Exception LoadError' at /usr/share/rubygems/rubygems/core_ext/kernel_require.rb:55 - cannot load such file -- ox ExceptionLoadError’ at /usr/share/rubygems/rubygems/core_ext/kernel_require.rb:55 - cannot load such file – xmlparser
Exception LoadError' at /usr/share/rubygems/rubygems/core_ext/kernel_require.rb:141 - cannot load such file -- xmlparser /usr/lib/one/ruby/opennebula/virtual_machine_pool.rb:297: warning: assigned but unused variable - acct_hash /usr/lib/one/ruby/opennebula/host.rb:125: warning: ambiguous first argument; put parentheses or even spaces /usr/lib/one/ruby/opennebula/vdc.rb:176: warning: method redefined; discarding old add_host /usr/lib/one/ruby/opennebula/vdc.rb:164: warning: previous definition of add_host was here /usr/lib/one/ruby/opennebula/vdc.rb:192: warning: method redefined; discarding old del_host /usr/lib/one/ruby/opennebula/vdc.rb:186: warning: previous definition of del_host was here ExceptionLoadError’ at /usr/share/rubygems/rubygems/core_ext/kernel_require.rb:55 - cannot load such file – net/ldap
/usr/local/share/gems/gems/net-ldap-0.11/lib/net/ldap/password.rb:22: warning: assigned but unused variable - attribute_value
/usr/local/share/gems/gems/net-ldap-0.11/lib/net/ldap/instrumentation.rb:15: warning: shadowing outer local variable - payload
/usr/local/share/gems/gems/net-ldap-0.11/lib/net/ldap/connection.rb:366: warning: assigned but unused variable - sort_control
Trying server kolsdc
Exception Errno::EAGAIN' at /usr/share/ruby/net/protocol.rb:153 - Resource temporarily unavailable - read would block ExceptionErrno::EAGAIN’ at /usr/share/ruby/net/protocol.rb:153 - Resource temporarily unavailable - read would block
User poceallaigh not found
Could not authenticate user poceallaigh

From the oned.log:

Thu Feb 4 16:56:40 2016 [Z0][AuM][D]: Message received: LOG I 132 Command execution fail: /var/lib/one/remotes/auth/ldap/authenticate poceallaigh - ****

Thu Feb 4 16:56:40 2016 [Z0][AuM][I]: Command execution fail: /var/lib/one/remotes/auth/ldap/authenticate poceallaigh - ****
Thu Feb 4 16:56:40 2016 [Z0][AuM][D]: Message received: LOG I 132 Trying server kolsdc

Thu Feb 4 16:56:40 2016 [Z0][AuM][I]: Trying server kolsdc
Thu Feb 4 16:56:40 2016 [Z0][AuM][D]: Message received: LOG I 132 User poceallaigh not found

Thu Feb 4 16:56:40 2016 [Z0][AuM][I]: User poceallaigh not found
Thu Feb 4 16:56:40 2016 [Z0][AuM][D]: Message received: LOG I 132 Could not authenticate user poceallaigh

Thu Feb 4 16:56:40 2016 [Z0][AuM][I]: Could not authenticate user poceallaigh
Thu Feb 4 16:56:40 2016 [Z0][AuM][D]: Message received: LOG I 132 ExitCode: 255

Thu Feb 4 16:56:40 2016 [Z0][AuM][I]: ExitCode: 255
Thu Feb 4 16:56:40 2016 [Z0][AuM][D]: Message received: AUTHENTICATE FAILURE 132 -

Thu Feb 4 16:56:40 2016 [Z0][AuM][E]: Auth Error:
Thu Feb 4 16:56:40 2016 [Z0][ReM][D]: Req:7600 UID:-1 UserInfo invoked , -1
Thu Feb 4 16:56:40 2016 [Z0][ReM][E]: Req:7600 UID:- UserInfo result FAILURE [UserInfo] User couldn’t be authenticated, aborting call.
Thu Feb 4 16:56:51 2016 [Z0][ReM][D]: Req:7760 UID:2 UserInfo invoked , -1

My account definitely exists and is active.

Any help or further diagnostics I can would be very helpful.

Cheers,
Paraic

Any takers on this one?

Still unable to login via AD.

Paraic

Apologies for not seeing this before, please forward vOneCloud questions to the vOneCloud support portal:

https://support.vonecloud.com/hc/communities/public/topics