We are trying to authenticate our users with LDAP for the ood and we have encountered some issues.
I should mention that, our LDAP service doesn’t provide uid/shell/home/directory, rather it only provides specific groups and user authentication. What we want here is that users get authenticated with LDAP and just use the cluster uid/gids/home-dirs that were assigned to them. This should be similar to the “/opt/rh/httpd24/root/etc/httpd/.htpasswd” $USER where $USER configs are defined already in the cluster. All we need here is to switch the authentication part to the LDAP server, not using uid/gid/etc from LDAP.
We are able to search the ldap database and retrive information on the users. We bind ldap with a permitted user first, and then retrieve information from ldap. The problem occurs when we modify /etc/ood/config/ood_portal.yml
update and restart, no user can authenticate. Looking at /var/log/httpd24/error_log I can see this message:
user … not found: /pun/sys/dashboard
Which means the binding part went OK, but then ldap cannot find the user? while it appears in ldap search query?
We would really appreciate any comment/feedback/help on how we can go about debugging this.