Hi,
We are facing the problem when trying to authenticate AWX-users via OpenLDAP:
- LDAP-bind : OK
- User-Search return correct LDAP dn (return value is lower case)
- User-bind fails because OpenLDAP is case sensitive on this field and therefore rejects the user.
Trace from awx_web:
2018-01-12 12:36:04,529 DEBUG django_auth_ldap search_s(‘ou=people,OuId=BBA,dc=example,dc=org’, 1, ‘(&(uid=%(user)s)(objectClass=inetOrgPerson))’) returned 1 objects: gvgid=rainer_xxxxx,ou=people,ouid=bba,dc=example,dc=org
2018-01-12 12:36:04,530 DEBUG django_auth_ldap Authentication failed for rainer.franzel@example.org: user DN/password rejected by LDAP server.
2018-01-12 12:36:04,599 WARNING awx.api.views Login failed for user rainer.franzel@example.org
In the first line auth_ldap_search finds the correct user DN but attribute OuId=BBA is returned in lowercase!
Therefore ldap auth fails in the next step
Is this a know issue and/or a way to solve this?
Thank you for any support,
Rainer