You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@cloudstack.apache.org by "Winkler Marc (ID)" <ma...@id.ethz.ch> on 2023/12/15 13:15:33 UTC
LDAP Auto Import Problem
Hi All
We are in the process of building a Cloudstack instance for our vocational training program and have a problem with the LDAP settings. We configured the ldap settings under “Global Settings” according to our environment (we have a Active Directory as a LDAP source). I’ve attached a screenshot with the relevant config settings (the user account names and passwords are left blank for security reasons).
We want to use the ldap auto imprt functionality on a domain in Cloudstack and configured this according to the documentation (https://docs.cloudstack.apache.org/en/latest/adminguide/accounts.html).
If we enter the correct credentials of a ldap user and domain and press “Login” Button, Cloudstack authenticates the user but then the browser hangs forever. In the logs we see the following error messages:
2023-12-15 13:49:44,220 DEBUG [c.c.u.AccountManagerImpl] (qtp1970436060-411:ctx-bce3da53) (logid:c72db9fb) Creating user: marc, accountId: 19 timezone:null
2023-12-15 13:49:44,231 ERROR [c.c.u.PasswordPolicyImpl] (qtp1970436060-411:ctx-bce3da53) (logid:c72db9fb) User [marc] informed a new password that does not match with regex [.+]. Refusing the user's new password.
2023-12-15 13:49:44,246 ERROR [c.c.a.ApiServlet] (qtp1970436060-411:ctx-bce3da53) (logid:c72db9fb) unknown exception writing api response
com.cloud.exception.InvalidParameterValueException: User password does not match with password policy regex.
Does anybody have an idea how to fix this? I’ve attached the whole log file containing all relevant information to the request.
I’d be happy for any idea how to debug this.
Cheers
Marc
RE: LDAP Auto Import Problem
Posted by "Winkler Marc (ID)" <ma...@id.ethz.ch>.
> Empty the password.policy.regex setting under domain will solve the problem.
Awesome Stuff, that worked. Thanks Levin
Do you happen to know what the "ldap.nested.groups.enable" feature is for? We
have nested groups in our LDAP but even though this feature is enabled, we are
unable to login with a user, that is in a nested group.
Thanks a lot and Cheers
Re: LDAP Auto Import Problem
Posted by Levin Ng <le...@gmail.com>.
Empty the password.policy.regex setting under domain will solve the problem.
On 15 Dec 2023 at 13:15 +0000, Winkler Marc (ID) <ma...@id.ethz.ch>, wrote:
> Hi All
>
> We are in the process of building a Cloudstack instance for our vocational training program and have a problem with the LDAP settings. We configured the ldap settings under “Global Settings” according to our environment (we have a Active Directory as a LDAP source). I’ve attached a screenshot with the relevant config settings (the user account names and passwords are left blank for security reasons).
>
> We want to use the ldap auto imprt functionality on a domain in Cloudstack and configured this according to the documentation (https://docs.cloudstack.apache.org/en/latest/adminguide/accounts.html).
>
> If we enter the correct credentials of a ldap user and domain and press “Login” Button, Cloudstack authenticates the user but then the browser hangs forever. In the logs we see the following error messages:
>
> 2023-12-15 13:49:44,220 DEBUG [c.c.u.AccountManagerImpl] (qtp1970436060-411:ctx-bce3da53) (logid:c72db9fb) Creating user: marc, accountId: 19 timezone:null
> 2023-12-15 13:49:44,231 ERROR [c.c.u.PasswordPolicyImpl] (qtp1970436060-411:ctx-bce3da53) (logid:c72db9fb) User [marc] informed a new password that does not match with regex [.+]. Refusing the user's new password.
> 2023-12-15 13:49:44,246 ERROR [c.c.a.ApiServlet] (qtp1970436060-411:ctx-bce3da53) (logid:c72db9fb) unknown exception writing api response
> com.cloud.exception.InvalidParameterValueException: User password does not match with password policy regex.
>
> Does anybody have an idea how to fix this? I’ve attached the whole log file containing all relevant information to the request.
>
> I’d be happy for any idea how to debug this.
>
> Cheers
>
> Marc
RE: LDAP Auto Import Problem
Posted by "Winkler Marc (ID)" <ma...@id.ethz.ch>.
sorry, the logfile was dropped from the previous message.
Cheers
Marc