{"action":"created","issue":{"url":"https://api.github.com/repos/vmware/harbor/issues/254","repository_url":"https://api.github.com/repos/vmware/harbor","labels_url":"https://api.github.com/repos/vmware/harbor/issues/254/labels{/name}","comments_url":"https://api.github.com/repos/vmware/harbor/issues/254/comments","events_url":"https://api.github.com/repos/vmware/harbor/issues/254/events","html_url":"https://github.com/vmware/harbor/issues/254","id":155703183,"number":254,"title":"Fails to authenticate user with MS AD as LDAP server","user":{"login":"tonardo2015","id":1166721,"avatar_url":"https://avatars.githubusercontent.com/u/1166721?v=3","gravatar_id":"","url":"https://api.github.com/users/tonardo2015","html_url":"https://github.com/tonardo2015","followers_url":"https://api.github.com/users/tonardo2015/followers","following_url":"https://api.github.com/users/tonardo2015/following{/other_user}","gists_url":"https://api.github.com/users/tonardo2015/gists{/gist_id}","starred_url":"https://api.github.com/users/tonardo2015/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tonardo2015/subscriptions","organizations_url":"https://api.github.com/users/tonardo2015/orgs","repos_url":"https://api.github.com/users/tonardo2015/repos","events_url":"https://api.github.com/users/tonardo2015/events{/privacy}","received_events_url":"https://api.github.com/users/tonardo2015/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-05-19T10:24:04Z","updated_at":"2016-06-06T22:43:13Z","closed_at":null,"body":"Hi Guys,\r\n\r\nWe tried to integrate Harbor with MS AD in our enviornment, however it seems Harbor could not properly authenticate the user from Active Directory.\r\n\r\nBelow is the requested info in our environment:\r\n1)Version of docker engine and docker-compose\r\n[root@starhost ~]# docker-compose -version\r\ndocker-compose version 1.7.0rc2, build ea2d526\r\n[root@starhost ~]# docker version\r\nClient:\r\n Version:      1.10.3\r\n API version:  1.22\r\n Go version:   go1.5.3\r\n Git commit:   20f81dd\r\n Built:        Thu Mar 10 15:39:25 2016\r\n OS/Arch:      linux/amd64\r\n\r\nServer:\r\n Version:      1.10.3\r\n API version:  1.22\r\n Go version:   go1.5.3\r\n Git commit:   20f81dd\r\n Built:        Thu Mar 10 15:39:25 2016\r\n OS/Arch:      linux/amd64\r\n\r\n2)Config files of harbor, you can get them by packaging \"Deploy/config\" directory\r\n/opt/harbor-0.1.1/Deploy/harbor.cfg\r\n\r\nauth_mode = ldap_auth\r\nldap_url = ldap://10.32.167.175:389\r\nldap_basedn = cn=%s,dc=centera,dc=com\r\n\r\nAfter change the configuration, we restart the service to ensuare the configuration takes effect.\r\nThen we try to login the Harbor GUI with Active Directory user, e.g:  ee1@centera.com, however it failed with error Invalid credentials.\r\n\r\n3)Log files, you can get them by package the /var/log/harbor/ \r\n\r\nLogs  when login via GUI or docker client,\r\n\r\n==> /var/log/harbor/2016-05-19/docker_ui.log <==\r\nMay 19 05:02:10 starhost docker/ui[66486]: 2016/05/19 09:02:10 #033[1;34m[router.go:828][D] | GET        | /signIn                                  | 4.811597ms       | match      | /signIn                                  | #033[0m\r\nMay 19 05:02:11 starhost docker/ui[66486]: 2016-05-19T09:02:11Z [WARNING] No user id in session, canceling request\r\nMay 19 05:02:21 starhost docker/ui[66486]: 2016-05-19T09:02:21Z [DEBUG] [authenticator.go:52]: Current AUTH_MODE is ldap_auth\r\nMay 19 05:02:21 starhost docker/ui[66486]: 2016-05-19T09:02:21Z [DEBUG] [ldap.go:47]: ldapURL:ldap://10.32.167.175:389\r\nMay 19 05:02:21 starhost docker/ui[66486]: 2016-05-19T09:02:21Z [DEBUG] [ldap.go:69]: baseDn:cn=ee1,dc=centera,dc=com\r\nMay 19 05:02:21 starhost docker/ui[66486]: 2016-05-19T09:02:21Z [ERROR] [login.go:54]: Error occurred in UserLogin: LDAP::Bind() error (49) : Invalid credentials\r\n\r\nWe also tried with openldap, it works fine.\r\n"},"comment":{"url":"https://api.github.com/repos/vmware/harbor/issues/comments/224111367","html_url":"https://github.com/vmware/harbor/issues/254#issuecomment-224111367","issue_url":"https://api.github.com/repos/vmware/harbor/issues/254","id":224111367,"user":{"login":"tonardo2015","id":1166721,"avatar_url":"https://avatars.githubusercontent.com/u/1166721?v=3","gravatar_id":"","url":"https://api.github.com/users/tonardo2015","html_url":"https://github.com/tonardo2015","followers_url":"https://api.github.com/users/tonardo2015/followers","following_url":"https://api.github.com/users/tonardo2015/following{/other_user}","gists_url":"https://api.github.com/users/tonardo2015/gists{/gist_id}","starred_url":"https://api.github.com/users/tonardo2015/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tonardo2015/subscriptions","organizations_url":"https://api.github.com/users/tonardo2015/orgs","repos_url":"https://api.github.com/users/tonardo2015/repos","events_url":"https://api.github.com/users/tonardo2015/events{/privacy}","received_events_url":"https://api.github.com/users/tonardo2015/received_events","type":"User","site_admin":false},"created_at":"2016-06-06T22:43:13Z","updated_at":"2016-06-06T22:43:13Z","body":"Any progress for this issue?"}}
{"actor":{"display_login":"tonardo2015"}}