Project

General

Profile

Actions

Support #7056

closed

Login problem for CTA user Federico Di Pierro

Added by Barbier Cecile almost 10 years ago. Updated almost 10 years ago.

Status:
Closed
Priority:
Normal
Assigned To:
Admin redMine
Start date:
05/05/2014
Due date:
% Done:

0%

Estimated time:

Description

Could you please check Federico Di Pierro's Redmine account ?
He cannot login anymore to Redmine but he was able 2 or 3 weeks ago and he changed his CTA email recently.
Here is his information:
CTA login: dipierr
Old contact email:
Current contact email:
Thanks


Files

Actions #1

Updated by ROUET Jean-René almost 10 years ago

  • Status changed from New to Feedback
  • Assigned To changed from Admin redMine to ROUET Jean-René

hi

i changed his email to the new one.

could he checks if it works now ?

Actions #2

Updated by Barbier Cecile almost 10 years ago

Feedback from Federico : it still doesn't work even after closing the navigator and cleaning the cache:
"Internal Server Error" different from the message he had this morning when his email had not been changed yet in Redmine.

Actions #3

Updated by ROUET Jean-René almost 10 years ago

When i look at the application log files :
I'm not sure but i think he doesn't use the CAS login, he uses the redmine login form directly.

Actions #4

Updated by Barbier Cecile almost 10 years ago

Federico just explained that he also has a local account on Redmine, that would explain the problems.
Is it possible to merge both ?
Thanks

Actions #5

Updated by ROUET Jean-René almost 10 years ago

I see only one account :

dipierr Federico Di Pierro

the last success login date is 10/03/2014 14:37 (not 2 or 3 weeks ago)

i repeat, he should use the cas login with his cta account/password.

Actions #6

Updated by Barbier Cecile almost 10 years ago

Message from Federico :
I tried again to log-in after closing and clearing cache and all browser's offline contents, selecting (as always) "CAS sign in", then "CTA collaborator", then my CTA username (dipierr) and password.
And I again get "Internal Server Error", if I put a wrong password I get in the login page "Incorrect username or password".
I also tried to use a completely different machine (Win instead of Linux for instance) and I get again "Internal Server Error".

He's using Firefox 26.0 for Ubuntu Canonical 1.0

Actions #7

Updated by Barbier Cecile almost 10 years ago

  • Assigned To changed from ROUET Jean-René to Admin redMine

How could I help to fix this problem ?

It is becoming urgent for Federico whose last comments were :
I tried again to log-in after closing and clearing cache and all browser's offline contents, selecting (as always) "CAS sign in", then "CTA collaborator", then my CTA username (dipierr) and password.
And I again get "Internal Server Error", if I put a wrong password I get in the login page "Incorrect username or password".
I also tried to use a completely different machine (Win instead of Linux for instance) and I get again "Internal Server Error".

He's using Firefox 26.0 for Ubuntu Canonical 1.0

Thanks

Actions #8

Updated by ROUET Jean-René almost 10 years ago

Sorry, i miss the previous answer.

i try to understand this morning, no problem from redmine...
so i look to cas login, there's a problem with ldap read.
then, i look directly to ldap, i don't find the entry for this user when i browse the contents of CTA_Users.
but if i search it with ldapsearch, i find it. wery strange.

i think there's a misconfiguration with this user entry in ldap, could-you check it ?

Actions #9

Updated by Hoffmann Dirk almost 10 years ago

La seule différence que je vois entre

dn: uid=dipierr,ou=CTA-Users,dc=cta-observatory,dc=org
mail:
givenName: Federico
sn: Di Pierro

et par exemple

dn: uid=hoffmann,ou=CTA-Users,dc=cta-observatory,dc=org
mail:
givenName: Dirk
sn: Hoffmann

est qu'une entrée avec uid=dipierr existe ailleurs sous l'arbre dc=cta-observatory,dc=org dans notre annuaire LDAP.

Si cela aide à la compréhension, on peut l'effacer (mieux : renommer) bien sûr. Mais cela ne devrait pas gêner. Le système oupiou/redmine fait bien un scan SUBTREE à partir de CTA-Users,dc=cta-observatory,dc=org dans LDAP ???

Actions #10

Updated by Barbier Cecile almost 10 years ago

FYI, Federico just checked, he can connect to SharePoint and Indico with the same login/passwd, perfectly as always

Actions #11

Updated by ROUET Jean-René almost 10 years ago

Hoffmann Dirk wrote:

La seule différence que je vois entre

dn: uid=dipierr,ou=CTA-Users,dc=cta-observatory,dc=org
mail:
givenName: Federico
sn: Di Pierro

et par exemple

dn: uid=hoffmann,ou=CTA-Users,dc=cta-observatory,dc=org
mail:
givenName: Dirk
sn: Hoffmann

est qu'une entrée avec uid=dipierr existe ailleurs sous l'arbre dc=cta-observatory,dc=org dans notre annuaire LDAP.

Si cela aide à la compréhension, on peut l'effacer (mieux : renommer) bien sûr. Mais cela ne devrait pas gêner. Le système oupiou/redmine fait bien un scan SUBTREE à partir de CTA-Users,dc=cta-observatory,dc=org dans LDAP ???

oui pour sa fiche.

en fait l'erreur est lors de la récupération des groupes auquel il appartient, mais je n'ai pas réellement d'erreur d'ailleurs, c'est juste qu'il n'a aucun groupe.

je vais me replonger dans le code pour comprendre ce qu'il se passe exactement.

Actions #12

Updated by ROUET Jean-René almost 10 years ago

Ok, j'ai normalement compris et corrigé d'où venait le problème, j'ai déployé la correction sur forgedev.in2p3.fr mais pas encore en production.
C'était bien lié au fait qu'il ai 2 enregistrements dans le serveur LDAP.
Pouvez-vous tester et faire tester aussi par Federico sur https://forgedev.in2p3.fr/ ?
merci.
sans contre-ordre je déploierais demain en production.

Actions #13

Updated by Barbier Cecile almost 10 years ago

nswer from Federico :
"no way...after having cleaned the cache, I tried "CAS sign in", "CTA collaborator", my (elsewhere working) CTA credentials and I get "Internal error" as in the attached picture.

Actions #14

Updated by Barbier Cecile almost 10 years ago

I also tested and could login to forgedev using my CNRS certificate.
I can't test with my CTA credentials as the system remembers me after signing out

Actions #15

Updated by ROUET Jean-René almost 10 years ago

thanks for testing,

i read the log, forgedev wasn't at the same level than forge, i've just corrected it.

could you try again, because i can't reproduce your problem with my account ?

sorry and thank you for your patience

Actions #16

Updated by Barbier Cecile almost 10 years ago

From Federico:
Situation has improved but it still doesn't work completely...now my "user (dipierr) is authenticated but mail addresses doesn't match" (see picture).
Thanks,
Federico
PS: I have the feeling that we are close to a successful end!

Actions #17

Updated by ROUET Jean-René almost 10 years ago

Ok

it works, if the forgedev database we have an old database version with bad mail address for Federico

many thanks

i deploy the corrected version in production.

Actions #18

Updated by Di Pierro Federico almost 10 years ago

YES! It works!
Many thanks to all people involved!
Kind regards,
Federico

Actions #19

Updated by ROUET Jean-René almost 10 years ago

  • Status changed from Feedback to Resolved
  • Assigned To changed from Admin redMine to ROUET Jean-René
Actions #20

Updated by Barbier Cecile almost 10 years ago

  • Status changed from Resolved to Closed
  • Assigned To changed from ROUET Jean-René to Admin redMine
Actions

Also available in: Atom PDF