{"action":"created","issue":{"url":"https://api.github.com/repos/Mashape/kong/issues/1821","repository_url":"https://api.github.com/repos/Mashape/kong","labels_url":"https://api.github.com/repos/Mashape/kong/issues/1821/labels{/name}","comments_url":"https://api.github.com/repos/Mashape/kong/issues/1821/comments","events_url":"https://api.github.com/repos/Mashape/kong/issues/1821/events","html_url":"https://github.com/Mashape/kong/issues/1821","id":189316770,"number":1821,"title":"Kong with LDAP auth","user":{"login":"geostant","id":8279339,"avatar_url":"https://avatars.githubusercontent.com/u/8279339?v=3","gravatar_id":"","url":"https://api.github.com/users/geostant","html_url":"https://github.com/geostant","followers_url":"https://api.github.com/users/geostant/followers","following_url":"https://api.github.com/users/geostant/following{/other_user}","gists_url":"https://api.github.com/users/geostant/gists{/gist_id}","starred_url":"https://api.github.com/users/geostant/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/geostant/subscriptions","organizations_url":"https://api.github.com/users/geostant/orgs","repos_url":"https://api.github.com/users/geostant/repos","events_url":"https://api.github.com/users/geostant/events{/privacy}","received_events_url":"https://api.github.com/users/geostant/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"shashiranjan84","id":8146958,"avatar_url":"https://avatars.githubusercontent.com/u/8146958?v=3","gravatar_id":"","url":"https://api.github.com/users/shashiranjan84","html_url":"https://github.com/shashiranjan84","followers_url":"https://api.github.com/users/shashiranjan84/followers","following_url":"https://api.github.com/users/shashiranjan84/following{/other_user}","gists_url":"https://api.github.com/users/shashiranjan84/gists{/gist_id}","starred_url":"https://api.github.com/users/shashiranjan84/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/shashiranjan84/subscriptions","organizations_url":"https://api.github.com/users/shashiranjan84/orgs","repos_url":"https://api.github.com/users/shashiranjan84/repos","events_url":"https://api.github.com/users/shashiranjan84/events{/privacy}","received_events_url":"https://api.github.com/users/shashiranjan84/received_events","type":"User","site_admin":false},"assignees":[{"login":"shashiranjan84","id":8146958,"avatar_url":"https://avatars.githubusercontent.com/u/8146958?v=3","gravatar_id":"","url":"https://api.github.com/users/shashiranjan84","html_url":"https://github.com/shashiranjan84","followers_url":"https://api.github.com/users/shashiranjan84/followers","following_url":"https://api.github.com/users/shashiranjan84/following{/other_user}","gists_url":"https://api.github.com/users/shashiranjan84/gists{/gist_id}","starred_url":"https://api.github.com/users/shashiranjan84/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/shashiranjan84/subscriptions","organizations_url":"https://api.github.com/users/shashiranjan84/orgs","repos_url":"https://api.github.com/users/shashiranjan84/repos","events_url":"https://api.github.com/users/shashiranjan84/events{/privacy}","received_events_url":"https://api.github.com/users/shashiranjan84/received_events","type":"User","site_admin":false}],"milestone":null,"comments":7,"created_at":"2016-11-15T07:14:35Z","updated_at":"2016-11-15T16:26:44Z","closed_at":null,"body":"### Summary\r\n\r\nLDPA plugin response 200 OK only with admin credentials\r\n\r\n### Steps To Reproduce\r\n\r\n1. Installed LDAP plug on kong with the following setup:\r\n```\r\nname:ldap-auth\r\nconfig.hide_credentials:false\r\nconfig.ldap_host:192.168.100.135\r\nconfig.ldap_port:389\r\nconfig.base_dn:dc=company,dc=net\r\nconfig.attribute:cn\r\nconfig.cache_ttl:3600\r\nconfig.start_tls:false\r\n```\r\n2. run LDAP locally (it's a docker container)\r\n3. create 'admin' user with password '1234' user during the installation\r\n4. create ou (organization unit) = users\r\n5. create cn for a user un the ou - lets call it 'test' with password '1234'\r\n6. Try to auth a request with kong with user 'admin' will response 200 OK\r\n7. Try to auth a request with user 'test' will response 403 Forbidden\r\n\r\n### Additional Details & Logs\r\n\r\n- Kong version (0.9)\r\n- Access log\r\n```\r\n172.17.0.1 - - [14/Nov/2016:18:15:39 +0000] \"GET /cybereye HTTP/1.1\" 200 1054 \"-\" \"PostmanRuntime/3.0.1\"\r\n172.17.0.1 - - [14/Nov/2016:18:23:04 +0000] \"GET /cybereye HTTP/1.1\" 403 60 \"-\" \"PostmanRuntime/3.0.1\"\r\n```\r\n- Kong error logs \r\n``` no errors ```\r\n- Kong configuration (registered APIs/Plugins & configuration file)\r\n```LDAP Plugin```\r\n- Operating System\r\n```Dockerized```"},"comment":{"url":"https://api.github.com/repos/Mashape/kong/issues/comments/260690071","html_url":"https://github.com/Mashape/kong/issues/1821#issuecomment-260690071","issue_url":"https://api.github.com/repos/Mashape/kong/issues/1821","id":260690071,"user":{"login":"shashiranjan84","id":8146958,"avatar_url":"https://avatars.githubusercontent.com/u/8146958?v=3","gravatar_id":"","url":"https://api.github.com/users/shashiranjan84","html_url":"https://github.com/shashiranjan84","followers_url":"https://api.github.com/users/shashiranjan84/followers","following_url":"https://api.github.com/users/shashiranjan84/following{/other_user}","gists_url":"https://api.github.com/users/shashiranjan84/gists{/gist_id}","starred_url":"https://api.github.com/users/shashiranjan84/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/shashiranjan84/subscriptions","organizations_url":"https://api.github.com/users/shashiranjan84/orgs","repos_url":"https://api.github.com/users/shashiranjan84/repos","events_url":"https://api.github.com/users/shashiranjan84/events{/privacy}","received_events_url":"https://api.github.com/users/shashiranjan84/received_events","type":"User","site_admin":false},"created_at":"2016-11-15T16:26:44Z","updated_at":"2016-11-15T16:26:44Z","body":"try to bind Admin too using `ldapsearch`\r\n\r\n```\r\nldapsearch -x -D \"cn=admin,dc=company,dc=net\" \\\r\n           -W -H ldap://localhost -b \"ou=users,dc=company,dc=net\" \\\r\n            -s sub \"(cn=*)\" cn sn\r\n```"}}
{"actor":{"display_login":"shashiranjan84"}}