Project

General

Profile

Ldap user cannot access projects

Added by ximeng wang over 8 years ago

Hello-
Let me thank you for the great software.
I have one question. I use openldap authentication mode.
I have already at "setting--member" add new members, but user can't access projects, when user click projects name the page show "The page you were trying to access doesn't exist or has been removed.".
Only administrator have permission to access it.

Who can help me?
Thanks.

The production.log show:
......................
Started GET "/projects/test" for 192.168.0.20 at 2015-08-06 09:05:21 +0800
Processing by ProjectsController#show as HTML
Parameters: {"id"=>"test"}
(0.5ms) SELECT MAX FROM `settings`
User Load (0.6ms) SELECT `users`.* FROM `users` WHERE `users`.`type` IN ('User', 'AnonymousUser') AND `users`.`status` = 1 AND `users`.`id` = 11 LIMIT 1
Current user: wangm (id=11)
Project Load (0.6ms) SELECT `projects`.* FROM `projects` WHERE `projects`.`identifier` = 'test' LIMIT 1
(0.5ms) SELECT `enabled_modules`.`name` FROM `enabled_modules` WHERE `enabled_modules`.`project_id` = 15
Member Load (0.6ms) SELECT `members`.* FROM `members` INNER JOIN `projects` ON `projects`.`id` = `members`.`project_id` WHERE `members`.`user_id` = 11 AND (projects.status<>9) AND `members`.`project_id` = 15 ORDER BY projects.name LIMIT 1
Project Load (0.5ms) SELECT `projects`.* FROM `projects` WHERE `projects`.`id` IN (15)
MemberRole Load (0.5ms) SELECT `member_roles`.* FROM `member_roles` WHERE `member_roles`.`member_id` IN (9)
Role Load (0.5ms) SELECT `roles`.* FROM `roles` WHERE `roles`.`id` IN (3, 4, 5)
Role Load (1.5ms) SELECT DISTINCT `roles`.* FROM `roles` INNER JOIN `member_roles` ON `roles`.`id` = `member_roles`.`role_id` WHERE `member_roles`.`member_id` = 9
SQL (1.5ms) SELECT `members`.`id` AS t0_r0, `members`.`user_id` AS t0_r1, `members`.`project_id` AS t0_r2, `members`.`created_on` AS t0_r3, `members`.`mail_notification` AS t0_r4, `users`.`id` AS t1_r0, `users`.`login` AS t1_r1, `users`.`hashed_password` AS t1_r2, `users`.`firstname` AS t1_r3, `users`.`lastname` AS t1_r4, `users`.`admin` AS t1_r5, `users`.`status` AS t1_r6, `users`.`last_login_on` AS t1_r7, `users`.`language` AS t1_r8, `users`.`auth_source_id` AS t1_r9, `users`.`created_on` AS t1_r10, `users`.`updated_on` AS t1_r11, `users`.`type` AS t1_r12, `users`.`identity_url` AS t1_r13, `users`.`mail_notification` AS t1_r14, `users`.`salt` AS t1_r15, `users`.`must_change_passwd` AS t1_r16, `users`.`passwd_changed_on` AS t1_r17, `users`.`apps` AS t1_r18, `roles`.`id` AS t2_r0, `roles`.`name` AS t2_r1, `roles`.`position` AS t2_r2, `roles`.`assignable` AS t2_r3, `roles`.`builtin` AS t2_r4, `roles`.`permissions` AS t2_r5, `roles`.`issues_visibility` AS t2_r6, `roles`.`users_visibility` AS t2_r7 FROM `members` INNER JOIN `users` ON `users`.`id` = `members`.`user_id` INNER JOIN `member_roles` ON `member_roles`.`member_id` = `members`.`id` INNER JOIN `roles` ON `roles`.`id` = `member_roles`.`role_id` LEFT OUTER JOIN `users` `users_members` ON `users_members`.`id` = `members`.`user_id` AND `users_members`.`type` IN ('User', 'AnonymousUser') WHERE `members`.`project_id` = 15 AND (users.type='User' AND users.status=1)
Role Load (0.5ms) SELECT `roles`.* FROM `roles` WHERE `roles`.`builtin` = 1 ORDER BY `roles`.`id` ASC LIMIT 1
Member Load (0.3ms) SELECT `members`.* FROM `members` INNER JOIN `projects` ON `projects`.`id` = `members`.`project_id` INNER JOIN `users` ON `users`.`id` = `members`.`user_id` WHERE (projects.status <> 9) AND (members.user_id = 11 OR (projects.is_public = 1 AND users.type = 'GroupNonMember'))
Project Load (0.2ms) SELECT `projects`.* FROM `projects` WHERE `projects`.`id` IN (15, 18)
MemberRole Load (0.2ms) SELECT `member_roles`.* FROM `member_roles` WHERE `member_roles`.`member_id` IN (9, 15)
CACHE (0.0ms) SELECT `roles`.* FROM `roles` WHERE `roles`.`id` IN (3, 4, 5)
Project Load (0.3ms) SELECT `projects`.* FROM `projects` WHERE `projects`.`parent_id` = 15 AND (((projects.status <> 9) AND (projects.is_public = 1 OR projects.id IN (15,18) OR projects.id IN (15) OR projects.id IN (15)))) ORDER BY `projects`.`lft` ASC
News Load (0.2ms) SELECT `news`.* FROM `news` WHERE `news`.`project_id` = 15 ORDER BY news.created_on DESC LIMIT 5
Tracker Load (0.4ms) SELECT DISTINCT `trackers`.* FROM `trackers` INNER JOIN `projects_trackers` ON `projects_trackers`.`tracker_id` = `trackers`.`id` INNER JOIN `projects` ON `projects`.`id` = `projects_trackers`.`project_id` JOIN enabled_modules ON enabled_modules.project_id = projects.id AND enabled_modules.name = 'issue_tracking' WHERE (projects.lft >= 7 AND projects.rgt <= 8 AND projects.status <> 9) ORDER BY `trackers`.`position` ASC
Group Load (0.3ms) SELECT `users`.* FROM `users` INNER JOIN `groups_users` ON `users`.`id` = `groups_users`.`group_id` WHERE `users`.`type` IN ('Group', 'GroupBuiltin', 'GroupAnonymous', 'GroupNonMember') AND `groups_users`.`user_id` = 11
(0.5ms) SELECT COUNT() AS count_all, tracker_id AS tracker_id FROM `issues` INNER JOIN `projects` ON `projects`.`id` = `issues`.`project_id` INNER JOIN `issue_statuses` ON `issue_statuses`.`id` = `issues`.`status_id` WHERE (((projects.status <> 9 AND projects.id IN (SELECT em.project_id FROM enabled_modules em WHERE em.name='issue_tracking')) AND ((projects.is_public = 1 AND ((issues.is_private = 0 OR issues.author_id = 11 OR issues.assigned_to_id IN (11)))) OR projects.id IN (15,18) OR (projects.id IN (15) AND ((issues.is_private = 0 OR issues.author_id = 11 OR issues.assigned_to_id IN (11)))) OR (projects.id IN (15) AND ((issues.is_private = 0 OR issues.author_id = 11 OR issues.assigned_to_id IN (11))))))) AND (issue_statuses.is_closed = 0) AND ((projects.id = 15 OR (projects.lft > 7 AND projects.rgt < 8))) GROUP BY `issues`.`tracker_id`
Tracker Load (0.2ms) SELECT `trackers`.
FROM `trackers` WHERE `trackers`.`id` = 2 LIMIT 1
(0.4ms) SELECT COUNT() AS count_all, tracker_id AS tracker_id FROM `issues` INNER JOIN `projects` ON `projects`.`id` = `issues`.`project_id` WHERE (((projects.status <> 9 AND projects.id IN (SELECT em.project_id FROM enabled_modules em WHERE em.name='issue_tracking')) AND ((projects.is_public = 1 AND ((issues.is_private = 0 OR issues.author_id = 11 OR issues.assigned_to_id IN (11)))) OR projects.id IN (15,18) OR (projects.id IN (15) AND ((issues.is_private = 0 OR issues.author_id = 11 OR issues.assigned_to_id IN (11)))) OR (projects.id IN (15) AND ((issues.is_private = 0 OR issues.author_id = 11 OR issues.assigned_to_id IN (11))))))) AND ((projects.id = 15 OR (projects.lft > 7 AND projects.rgt < 8))) GROUP BY `issues`.`tracker_id`
CACHE (0.0ms) SELECT `trackers`.
FROM `trackers` WHERE `trackers`.`id` = 2 LIMIT 1 "id", 2
CACHE (0.0ms) SELECT DISTINCT `roles`.* FROM `roles` INNER JOIN `member_roles` ON `roles`.`id` = `member_roles`.`role_id` WHERE `member_roles`.`member_id` = 9 "member_id", 9
Project Load (0.2ms) SELECT `projects`.* FROM `projects` WHERE `projects`.`id` = 0 LIMIT 1
Completed 404 Not Found in 73ms (ActiveRecord: 11.1ms)

ActiveRecord::RecordNotFound (Couldn't find Project with 'id'=0):
app/models/project.rb:296:in `find'
app/models/time_entry.rb:49:in `block in <class:TimeEntry>'
app/controllers/projects_controller.rb:147:in `show'
..................

redmine version :
Environment:
Redmine version 3.0.4.stable
Ruby version 2.1.5-p273 (2014-11-13) [x86_64-linux]
Rails version 4.2.3
Environment production
Database adapter Mysql2
SCM:
Subversion 1.6.11
Mercurial 1.4
Git 1.8.3.1
Filesystem
Redmine plugins:
advanced_roadmap_v2 2.4.2
redmine_app__space 1.0.3
redmine_app_timesheets 1.5.3
redmine_checklists 3.1.1
redmine_ckeditor 1.1.0
redmine_code_review 0.7.0
redmine_image_clipboard_paste 1.0.0
redmine_work_time 0.3.1
scrum 0.11.1

OpenLDAP version: slapd 2.4.39


Replies (5)

RE: Ldap user cannot access projects - Added by Leonel Iturralde over 8 years ago

hi,
did you give them permission to access the projects?

RE: Ldap user cannot access projects - Added by ximeng wang over 8 years ago

hi Leonel,
Thanks for your reply.
I have added a user in the projects.
What does the "permission" mean?

RE: Ldap user cannot access projects - Added by Leonel Iturralde over 8 years ago

Yeah that what I meant adding the user to the project.

RE: Ldap user cannot access projects - Added by ximeng wang over 8 years ago

I have already at "setting--member" add new members.

    (1-5/5)