LDAP backend doesn't work

[zulip]

LDAP backend doesn't work

[galexrt]

Can you run, I think it should be docker exec ZULIP_CONTAINER_NAME cat /var/log/supervisor/*zulip* and post the output as a gist please. That will help debugging the problem.

[Seinth]

https://gist.github.com/Seinth/8bd99e3098d740280dd4

No additional log appear after unsuccessfully login attempt.

[galexrt]

@Seinth Can you provide the output of all zulip-* log files from the container.
Please run tail -n +1 /var/log/supervisor/zulip-* inside the container and post the output.

Could you post your docker-compose.yml (without passwords, secrets), so I can take a look at it and see if there's a problem.

[Seinth]

Other log files are empty (have a look at ls -la output, 5th column contains size). I'll post docker-compose.yml tommorow morning.

[Seinth]

docker-compose.yml
https://gist.github.com/Seinth/b43fa5e1278cae3e819f

[galexrt]

The ZULIP_AUTH_BACKENDS must be for LDAP ZULIP_AUTH_BACKENDS=zproject.backends.ZulipLDAPAuthBackend, see https://github.com/zulip/zulip/blob/master/zproject/local_settings_template.py#L24.

Please try again using the current dev image.

Also see the wiki page https://github.com/Galexrt/docker-zulip/wiki/Zulip-LDAP-Authentication.
BTW The containers doesn't need to be privileged.

[Seinth]

Tested, now I'm getting 500:

500: Internal server error.

Well oops. This one's probably our fault. Sorry about that! Updates on service availability are posted to @ZulipStatus on Twitter.

If you'd like, you can drop us a line to let us know what happened.

No new logs in /var/log/supervisor

AUTH_BACKEND line in docker composer:
- ZULIP_AUTH_BACKENDS=zproject.backends.ZulipLDAPAuthBackend

Container was recreated, stored data were removed.

I'm using privileged mode, because volume is setted to nfs partition.

[galexrt]

@Seinth Are you 100% sure there are no new log lines in /var/log/zulip* and /var/log/supervisor/zulip*?

I try to reproduce.

[Seinth]

So far I was checking only /var/log/supervisor/zulip
In /var/log/zulip 4 file changed after access attempt:
https://gist.github.com/Seinth/051eab3430f368a5e515

[galexrt]

@Seinth Just that you know, I'm looking into this problem. But a fix will take some time, sry bout that.

[galexrt]

BTW I updated the LDAP wiki page https://github.com/Galexrt/docker-zulip/wiki/Zulip-LDAP-Authentication.

I added an env var ZULIP_LDAP_ENABLED to enable the configuration of the LDAP settings (Currently in the latest dev image that is being built). You would need to set ZULIP_LDAP_ENABLED to True in your `docker-compose.yml´.

ZULIP_LDAP_ENABLED enables the configuration of LDAP from now on.

[galexrt]

@Seinth I pushed some changes to the dev branch.
Can you repull the image quay.io/galexrt/zulip:dev and try again with the mentioned ZULIP_LDAP_ENABLED set to True.
Thanks for testing this, I personally don't have an LDAP server to test with.

[Seinth]

Thanks! But I have bad news:

I pulled new image, stopped and removed containers, clean volume content and execute docker-compose up.
- ZULIP_LDAP_ENABLED=True is added.

Sam error on web site (500).
https://gist.github.com/Seinth/d33876b50a3532cc299e

[galexrt]

I think I'll see the error now. ImportError: No module named zproject.backends
Thanks for the log. This should be fixed soon.

[galexrt]

@Seinth Can you try again with ZULIP_AUTH_BACKENDS set to ZulipLDAPAuthBackend.

- ZULIP_AUTH_BACKENDS=ZulipLDAPAuthBackend

[Seinth]

Login screen now appear, while trying to log in I got:
Please enter a correct email and password. Note that both fields may be case-sensitive.
The only interesting part of log:
https://gist.github.com/Seinth/d310543d6ec9a46ece4f

Do you know where I can look for LDAP log?

[Seinth]

I was able to get another 500 while trying to "register":
https://gist.github.com/Seinth/6bb07da8a6f6e54ba991

[galexrt]

@Seinth In the log https://gist.github.com/Seinth/6bb07da8a6f6e54ba991 the problem is that you didn't configure a working/reachable smtp server. A working smtp server is needed from zulip.

I don't see a problem with docker-zulip in the log https://gist.github.com/Seinth/d310543d6ec9a46ece4f.
I can't really help you with LDAP, because I don't have a LDAP server.
I would therefore advise you to create a ticket at the official zulip/zulip project and ask for help about LDAP authentication problem there.

I'm closing this as I can't really help with what seems like a problem on zulip's side. I hope I could help a bit by fixing the bugs with the image.