{"action":"created","issue":{"url":"https://api.github.com/repos/rundeck/rundeck/issues/4326","repository_url":"https://api.github.com/repos/rundeck/rundeck","labels_url":"https://api.github.com/repos/rundeck/rundeck/issues/4326/labels{/name}","comments_url":"https://api.github.com/repos/rundeck/rundeck/issues/4326/comments","events_url":"https://api.github.com/repos/rundeck/rundeck/issues/4326/events","html_url":"https://github.com/rundeck/rundeck/issues/4326","id":392673998,"node_id":"MDU6SXNzdWUzOTI2NzM5OTg=","number":4326,"title":"Can't set up LDAP authentification","user":{"login":"rgarrigue","id":1872031,"node_id":"MDQ6VXNlcjE4NzIwMzE=","avatar_url":"https://avatars1.githubusercontent.com/u/1872031?v=4","gravatar_id":"","url":"https://api.github.com/users/rgarrigue","html_url":"https://github.com/rgarrigue","followers_url":"https://api.github.com/users/rgarrigue/followers","following_url":"https://api.github.com/users/rgarrigue/following{/other_user}","gists_url":"https://api.github.com/users/rgarrigue/gists{/gist_id}","starred_url":"https://api.github.com/users/rgarrigue/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rgarrigue/subscriptions","organizations_url":"https://api.github.com/users/rgarrigue/orgs","repos_url":"https://api.github.com/users/rgarrigue/repos","events_url":"https://api.github.com/users/rgarrigue/events{/privacy}","received_events_url":"https://api.github.com/users/rgarrigue/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-12-19T16:14:39Z","updated_at":"2018-12-19T16:42:57Z","closed_at":null,"author_association":"NONE","body":"**Describe the bug**\r\n\r\nGetting the following log\r\n\r\n```\r\n2018-12-19 16:02:14.511 DEBUG --- [qtp943079062-22] ailsUsernamePasswordAuthenticationFilter : Request is to process authentication\r\n2018-12-19 16:02:14.962 DEBUG --- [qtp943079062-22] c.d.r.j.j.JettyCachingLdapLoginModule    : Found user?: true\r\n2018-12-19 16:02:14.962 DEBUG --- [qtp943079062-22] c.d.r.j.j.JettyCachingLdapLoginModule    : Searching for users with filter: '(&(objectClass={0})({1}={2}))' from base dn: ou=people,dc=fr,dc=cozycloud,dc=cc\r\n2018-12-19 16:02:14.966 DEBUG --- [qtp943079062-22] c.d.r.j.j.JettyCachingLdapLoginModule    : Found user?: true\r\n2018-12-19 16:02:14.968 DEBUG --- [qtp943079062-22] c.d.r.j.j.JettyCachingLdapLoginModule    : user cred is present: false\r\n```\r\n\r\nWhile ldapsearch is OK for exactly the same creds, both dedicated rundeck account and my own \r\n\r\n```\r\nldapsearch -LLL -x -D \"cn=rundeck,ou=services,dc=fr,dc=company,dc=com\" -b \"ou=groups,dc=fr,dc=company,dc=com\" -H ldaps://ldap.dc=company,dc=com -W | head -n1\r\nEnter LDAP Password: \r\ndn: ou=groups,dc=fr,dc=company,dc=com\r\n```\r\n\r\n```\r\nldapsearch -LLL -x -D \"uid=me,ou=people,dc=fr,dc=company,dc=com\" -b \"ou=groups,dc=fr,dc=company,dc=com\" -H ldaps://ldap.dc=company,dc=com -W | head -n1\r\nEnter LDAP Password: \r\ndn: ou=groups,dc=fr,dc=company,dc=com\r\n```\r\n\r\n**My Rundeck detail**\r\n\r\n* Rundeck version: Rundeck 3.0.9-20181127 \r\n* install type: deb\r\n* OS Name/version: debian stretch\r\n* DB Type/version: default\r\n\r\n**To Reproduce**\r\n\r\nPlugged in to LDAP\r\n\r\n```\r\nroot@rundeck:/etc/rundeck# cat jaas-ldap.conf \r\nldap {\r\n    com.dtolabs.rundeck.jetty.jaas.JettyCachingLdapLoginModule required\r\n      debug=\"false\"\r\n      contextFactory=\"com.sun.jndi.ldap.LdapCtxFactory\"\r\n      providerUrl=\"ldaps://ldap.company.com\"\r\n      bindDn=\"cn=rundeck,ou=services,dc=fr,dc=company,dc=com\"\r\n      bindPassword=\"XXXXXXXXXXXXXXXXXXXYYYYYYYYYYYYYYZZZZZZZZZZZZZ\"\r\n      authenticationMethod=\"simple\"\r\n      forceBindingLogin=\"false\"\r\n      userBaseDn=\"ou=people,dc=fr,dc=company,dc=com\"\r\n      userRdnAttribute=\"memberOf\"\r\n      userIdAttribute=\"uid\"\r\n      userPasswordAttribute=\"userPassword\"\r\n      userObjectClass=\"inetOrgPerson\"\r\n      roleBaseDn=\"ou=groups,dc=fr,dc=company,dc=com\"\r\n      roleNameAttribute=\"cn\"\r\n      roleMemberAttribute=\"member\"\r\n      roleObjectClass=\"groupOfNames\"\r\n      cacheDurationMillis=\"300000\"\r\n      supplementalRoles=\"user\"\r\n      reportStatistics=\"false\"\r\n      timeoutRead=\"10000\"\r\n      timeoutConnect=\"20000\"\r\n      nestedGroups=\"true\";\r\n};\r\n```\r\n\r\n`/etc/default/rundeckd`\r\n\r\n```\r\nRDECK_JVM_OPTS=\"-Drundeck.jaaslogin=true \\\r\n       -Djava.security.auth.login.config=/etc/rundeck/jaas-ldap.conf \\\r\n       -Dloginmodule.name=ldap\"\r\n```\r\n\r\nTry to log in, doesn't work, service.log display the error `user cred is present: false`\r\n\r\n**Expected behavior**\r\n\r\nJust for it to work\r\n\r\n**Desktop (please complete the following information):**\r\n - OS: [e.g. iOS]\r\n - Browser [e.g. chrome, safari]\r\n - Version [e.g. 22]\r\n\r\n**Additional context**\r\nAdd any other context about the problem here.\r\n"},"comment":{"url":"https://api.github.com/repos/rundeck/rundeck/issues/comments/448662627","html_url":"https://github.com/rundeck/rundeck/issues/4326#issuecomment-448662627","issue_url":"https://api.github.com/repos/rundeck/rundeck/issues/4326","id":448662627,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0ODY2MjYyNw==","user":{"login":"sjrd218","id":36643360,"node_id":"MDQ6VXNlcjM2NjQzMzYw","avatar_url":"https://avatars3.githubusercontent.com/u/36643360?v=4","gravatar_id":"","url":"https://api.github.com/users/sjrd218","html_url":"https://github.com/sjrd218","followers_url":"https://api.github.com/users/sjrd218/followers","following_url":"https://api.github.com/users/sjrd218/following{/other_user}","gists_url":"https://api.github.com/users/sjrd218/gists{/gist_id}","starred_url":"https://api.github.com/users/sjrd218/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sjrd218/subscriptions","organizations_url":"https://api.github.com/users/sjrd218/orgs","repos_url":"https://api.github.com/users/sjrd218/repos","events_url":"https://api.github.com/users/sjrd218/events{/privacy}","received_events_url":"https://api.github.com/users/sjrd218/received_events","type":"User","site_admin":false},"created_at":"2018-12-19T16:42:57Z","updated_at":"2018-12-19T16:42:57Z","author_association":"CONTRIBUTOR","body":"What Java version are you running?"}}
{"actor":{"display_login":"sjrd218"}}