Project

General

Profile

Forums » Help »

AD authentification / Using Domain as host for load balancing/redundancy

Added by Guillaume Amgar over 8 years ago

Hi

On several web servers in my company i use as LDAP server my domain name "mycompany.com" instead of a particular server name/@IP to load balance and for redundancy if this Domain controler is unavailable

But for redmine, it not seems to work ... everyone have the same problem, a "known issue" maybe ?

thanks
regards


Replies (5)

RE: AD authentification / Using Domain as host for load balancing/redundancy - Added by Martin Denizet (redmine.org team member) over 8 years ago

Hello Guillaume,

What entry do you get in your log when the authentication fails with "mycompany.com" ?
You should find your log in /path/to/redmine/log/production.log.

Cheers,

-Martin

RE: AD authentification / Using Domain as host for load balancing/redundancy - Added by Guillaume Amgar over 8 years ago

HI martin

i an't find the "production.log" file .... i only see logs in /var/log/
I have a /var/log/redmine/default but seems to be empty

thansk for your helps

PS i m not a redmine admin sorry

regards

RE: AD authentification / Using Domain as host for load balancing/redundancy - Added by Guillaume Amgar over 8 years ago

hi

my mistake ..

it seems that this errror occur

Errno::ECONNRESET (Connection reset by peer - SSL_connect):
app/models/auth_source_ldap.rb:179:in `get_user_dn'
app/models/auth_source_ldap.rb:42:in `block in authenticate'
app/models/auth_source_ldap.rb:98:in `block in with_timeout'
app/models/auth_source_ldap.rb:97:in `with_timeout'
app/models/auth_source_ldap.rb:41:in `authenticate'
app/models/user.rb:272:in `check_password?'
app/models/user.rb:178:in `try_to_login'
app/controllers/account_controller.rb:191:in `password_authentication'
app/controllers/account_controller.rb:186:in `authenticate_user'
app/controllers/account_controller.rb:40:in `login'

RE: AD authentification / Using Domain as host for load balancing/redundancy - Added by Martin Denizet (redmine.org team member) over 8 years ago

Did you enable the LDAPS option in Redmine? LDAPS is port 636.
A good way to test the validity of your settings is to use a tool such as LDAP Browser: http://softerra-downloads.com/ldapadmin/ldapbrowser-4.5.13724.0-x64-eng.msi
Also you could have a look to: https://github.com/asanghi/omniauth-constantcontact2/issues/2

Cheers,

RE: AD authentification / Using Domain as host for load balancing/redundancy - Added by Guillaume Amgar over 8 years ago

Hi !

yes since it works with a direct host name or IP but nor with the domain name "mycompany.com" as my other websites LDAP authentication.
When you ping or resolve mycompany.com, it redirect to one of the Domain controler in the compagny so setting the hostname or the domaine name should be the same

i ll test again tomorrow and let you know

regards

    (1-5/5)