<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>
<div>Hi all, </div>
<div>I found the source of the problem: the ldap configuration settings had a wrong indentation and they were ignored.</div>
<div>The wiki would work without reporting the error, but the AD authentication would silently fail…</div>
<div>Regards,</div>
<div><br>
</div>
<div>Davide</div>
<div><br>
</div>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span><Poccecai>, Davide Poccecai <<a href="mailto:davide.poccecai@kcl.ac.uk">davide.poccecai@kcl.ac.uk</a>><br>
<span style="font-weight:bold">Date: </span>Friday, 28 June 2013 11:20<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:moin-user@lists.sourceforge.net">moin-user@lists.sourceforge.net</a>" <<a href="mailto:moin-user@lists.sourceforge.net">moin-user@lists.sourceforge.net</a>><br>
<span style="font-weight:bold">Subject: </span>[Moin-user] Active Directory authentication settings ignored<br>
</div>
<div><br>
</div>
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;">
<div>
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
Hi all,</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
I set up a moinmoin wiki on Ubuntu 12.04 server, and I wanted to configure AD authentication to a AD domain running on Win 2003 server.</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
Initially I used the ubuntu python-moinmoin package, and to configure AD authentication I followed the instructions to this webpage:</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<a href="http://moinmo.in/HowTo/UbuntuAD">http://moinmo.in/HowTo/UbuntuAD</a></div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
but it wouldn't work. So I removed the ubuntu package and I downloaded the latest distribution from MonMoin (1.9.7).</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
I looked at several other sources of info about moin+AD authentication to check if there was something different, but they were all very similar and my wiki still wouldn't authenticate with AD.</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
>From the same wiki server, I can successfully contact the AD domain controller using ldapsearch and I can get info about accounts, however, when using the wiki, the ldap authentication configuration in my wikiconfig.py is completely ignored. </div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
This is confirmed by the fact that the log file for my wiki doesn't throw any message about the ldap_authentication: </div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>2013-06-28 09:30:29,705 MoinMoin.log INFO using logging configuration read from "/usr/local/share/moin/config/logging/logfile_debug_auth"</div>
<div>2013-06-28 09:30:29,706 MoinMoin.log INFO Running MoinMoin 1.9.7 release code from /usr/local/lib/python2.7/dist-packages/MoinMoin</div>
<div>2013-06-28 09:30:51,282 MoinMoin.auth DEBUG session started for user None</div>
<div>2013-06-28 09:30:51,282 MoinMoin.auth DEBUG setup_suid returns None, None</div>
<div>2013-06-28 09:31:05,914 MoinMoin.auth DEBUG session started for user None</div>
<div>2013-06-28 09:31:05,915 MoinMoin.auth DEBUG setup_suid returns None, None</div>
<div>2013-06-28 09:31:05,916 MoinMoin.auth DEBUG moin: performing login action</div>
<div>2013-06-28 09:31:06,174 MoinMoin.auth DEBUG moin: could not authenticate user u'poce' (not valid)</div>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
while in the moinmoin ldap_login module ( /usr/local/lib/python2.7/dist-packages/MoinMoin/auth/ldap_login.py) there should be some messages thrown to the log:</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<br>
</div>
<div>
<blockquote style="margin: 0px 0px 0px 40px; border: none; padding: 0px; ">
<div style="color: rgb(0, 0, 0); font-size: 14px; "><font face="Courier">try:</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px; "><font face="Courier"> try:</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px; "><font face="Courier"> u = None</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px; "><font face="Courier"> dn = None</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px; "><font face="Courier"> server = self.server_uri</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px; "><font face="Courier"> coding = self.coding</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px; "><font face="Courier"> <b>
logging.debug("Setting misc. ldap options...")</b></font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px; "><font face="Courier"> ldap.set_option(ldap.OPT_PROTOCOL_VERSION, ldap.VERSION3) # ldap v2 is outdated</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px; "><font face="Courier"> ldap.set_option(ldap.OPT_REFERRALS, self.referrals)</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px; "><font face="Courier"> ldap.set_option(ldap.OPT_NETWORK_TIMEOUT, self.timeout)</font></div>
<div style="color: rgb(0, 0, 0); font-size: 14px; "><font face="Courier"> ...</font></div>
</blockquote>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
Also, running tcpdump on the wiki server I cannot see any traffic going towards the AD server, while I can see traffic when I do an ldapsearch towards the same AD server.</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
The wiki configuration file is reported below:</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; ">
<div><font face="Courier"># -*- coding: iso-8859-1 -*-</font></div>
<div><font face="Courier"># IMPORTANT! This encoding (charset) setting MUST be correct! If you live in a</font></div>
<div><font face="Courier"># western country and you don't know that you use utf-8, you probably want to</font></div>
<div><font face="Courier"># use iso-8859-1 (or some other iso charset). If you use utf-8 (a Unicode</font></div>
<div><font face="Courier"># encoding) you MUST use: coding: utf-8</font></div>
<div><font face="Courier"># That setting must match the encoding your editor uses when you modify the</font></div>
<div><font face="Courier"># settings below. If it does not, special non-ASCII chars will be wrong.</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier">"""</font></div>
<div><font face="Courier"> MoinMoin - Configuration for a single wiki</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> If you run a single wiki only, you can omit the farmconfig.py config</font></div>
<div><font face="Courier"> file and just use wikiconfig.py - it will be used for every request</font></div>
<div><font face="Courier"> we get in that case.</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> Note that there are more config options than you'll find in</font></div>
<div><font face="Courier"> the version of this file that is installed by default; see</font></div>
<div><font face="Courier"> the module MoinMoin.config.multiconfig for a full list of names and their</font></div>
<div><font face="Courier"> default values.</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> Also, the URL <a href="http://moinmo.in/HelpOnConfiguration">
http://moinmo.in/HelpOnConfiguration</a> has</font></div>
<div><font face="Courier"> a list of config options.</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> ** Please do not use this file for a wiki farm. Use the sample file</font></div>
<div><font face="Courier"> from the wikifarm directory instead! **</font></div>
<div><font face="Courier">"""</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier">import os</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier">from MoinMoin.config import multiconfig, url_prefix_static</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier">class Config(multiconfig.DefaultConfig):</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Critical setup ---------------------------------------------------</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Directory containing THIS wikiconfig:</font></div>
<div><font face="Courier"> wikiconfig_dir = os.path.abspath(os.path.dirname(__file__))</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # We assume that this config file is located in the instance directory, like:</font></div>
<div><font face="Courier"> # instance_dir/</font></div>
<div><font face="Courier"> # wikiconfig.py</font></div>
<div><font face="Courier"> # data/</font></div>
<div><font face="Courier"> # underlay/</font></div>
<div><font face="Courier"> # If that's not true, feel free to just set instance_dir to the real path</font></div>
<div><font face="Courier"> # where data/ and underlay/ is located:</font></div>
<div><font face="Courier"> #instance_dir = '/where/ever/your/instance/is'</font></div>
<div><font face="Courier"> instance_dir = wikiconfig_dir</font></div>
<div><font face="Courier"> #instance_dir = '/usr/share/moin'</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Where your own wiki pages are (make regular backups of this directory):</font></div>
<div><font face="Courier"> data_dir = os.path.join(instance_dir, 'data', '') # path with trailing /</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Where system and help pages are (you may exclude this from backup):</font></div>
<div><font face="Courier"> data_underlay_dir = os.path.join(instance_dir, 'underlay', '') # path with trailing /</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # The URL prefix we use to access the static stuff (img, css, js).</font></div>
<div><font face="Courier"> # Note: moin runs a static file server at url_prefix_static path (relative</font></div>
<div><font face="Courier"> # to the script url).</font></div>
<div><font face="Courier"> # If you run your wiki script at the root of your site (/), just do NOT</font></div>
<div><font face="Courier"> # use this setting and it will automatically work.</font></div>
<div><font face="Courier"> # If you run your wiki script at /mywiki, you need to use this:</font></div>
<div><font face="Courier"> #url_prefix_static = '/mywiki' + url_prefix_static</font></div>
<div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Wiki identity ----------------------------------------------------</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Site name, used by default for wiki name-logo [Unicode]</font></div>
<div><font face="Courier"> sitename = u'MyWiki'</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Wiki logo. You can use an image, text or both. [Unicode]</font></div>
<div><font face="Courier"> # For no logo or text, use '' - the default is to show the sitename.</font></div>
<div><font face="Courier"> # See also url_prefix setting below!</font></div>
<div><font face="Courier"> logo_string = u'<img src="%s/common/moinmoin.png" alt="MoinMoin Logo">' % url_prefix_static</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # name of entry page / front page [Unicode], choose one of those:</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # a) if most wiki content is in a single language</font></div>
<div><font face="Courier"> #page_front_page = u"MyStartingPage"</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # b) if wiki content is maintained in many languages</font></div>
<div><font face="Courier"> page_front_page = u"Home"</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # The interwiki name used in interwiki links</font></div>
<div><font face="Courier"> #interwikiname = u'UntitledWiki'</font></div>
<div><font face="Courier"> # Show the interwiki name (and link it to page_front_page) in the Theme,</font></div>
<div><font face="Courier"> # nice for farm setups or when your logo does not show the wiki's name.</font></div>
<div><font face="Courier"> #show_interwiki = 1</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Security ----------------------------------------------------------</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # This is checked by some rather critical and potentially harmful actions,</font></div>
<div><font face="Courier"> # like despam or PackageInstaller action:</font></div>
<div><font face="Courier"> #superuser = [u"YourName", ]</font></div>
<div><font face="Courier"> superuser = [u"WikiAdmin", ]</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # IMPORTANT: grant yourself admin rights! replace YourName with</font></div>
<div><font face="Courier"> # your user name. See HelpOnAccessControlLists for more help.</font></div>
<div><font face="Courier"> # All acl_rights_xxx options must use unicode [Unicode]</font></div>
<div><font face="Courier"> acl_rights_before = u"WikiAdmin:read,write,delete,revert,admin poce:read,write,delete,revert,admin"</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # The default (ENABLED) password_checker will keep users from choosing too</font></div>
<div><font face="Courier"> # short or too easy passwords. If you don't like this and your site has</font></div>
<div><font face="Courier"> # rather low security requirements, feel free to DISABLE the checker by:</font></div>
<div><font face="Courier"> #password_checker = None # None means "don't do any password strength checks"</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Link spam protection for public wikis (Uncomment to enable)</font></div>
<div><font face="Courier"> # Needs a reliable internet connection.</font></div>
<div><font face="Courier"> #from MoinMoin.security.antispam import SecurityPolicy</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Mail --------------------------------------------------------------</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Configure to enable subscribing to pages (disabled by default)</font></div>
<div><font face="Courier"> # or sending forgotten passwords.</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # SMTP server, e.g. "mail.provider.com" (None to disable mail)</font></div>
<div><font face="Courier"> mail_smarthost = "my_smtp_server.mydomain.org"</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # The return address, e.g u"J<FC>rgen Wiki <<a href="mailto:noreply@mywiki.org">noreply@mywiki.org</a>>" [Unicode]</font></div>
<div><font face="Courier"> mail_from = u"I<noreply@</font><span style="font-family: Courier; ">mydomain.org</span><font face="Courier">"</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # "user pwd" if you need to use SMTP AUTH</font></div>
<div><font face="Courier"> #mail_login = ""</font></div>
<div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # User interface ----------------------------------------------------</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Add your wikis important pages at the end. It is not recommended to</font></div>
<div><font face="Courier"> # remove the default links. Leave room for user links - don't use</font></div>
<div><font face="Courier"> # more than 6 short items.</font></div>
<div><font face="Courier"> # You MUST use Unicode strings here, but you need not use localized</font></div>
<div><font face="Courier"> # page names for system and help pages, those will be used automatically</font></div>
<div><font face="Courier"> # according to the user selected language. [Unicode]</font></div>
<div><font face="Courier"> navi_bar = [</font></div>
<div><font face="Courier"> # If you want to show your page_front_page here:</font></div>
<div><font face="Courier"> #u'%(page_front_page)s',</font></div>
<div><font face="Courier"> u'RecentChanges',</font></div>
<div><font face="Courier"> u'FindPage',</font></div>
<div><font face="Courier"> u'HelpContents',</font></div>
<div><font face="Courier"> ]</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # The default theme anonymous or new users get</font></div>
<div><font face="Courier"> theme_default = 'modern'</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Attachment enabled - davide 20080314</font></div>
<div><font face="Courier"> allowed_actions = ['AttachFile']</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Language options --------------------------------------------------</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # See <a href="http://moinmo.in/ConfigMarket">http://moinmo.in/ConfigMarket</a> for configuration in</font></div>
<div><font face="Courier"> # YOUR language that other people contributed.</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # The main wiki language, set the direction of the wiki pages</font></div>
<div><font face="Courier"> language_default = 'en'</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # the following regexes should match the complete name when used in free text</font></div>
<div><font face="Courier"> # the group 'all' shall match all, while the group 'key' shall match the key only</font></div>
<div><font face="Courier"> # e.g. CategoryFoo -> group 'all' == CategoryFoo, group 'key' == Foo</font></div>
<div><font face="Courier"> # moin's code will add ^ / $ at beginning / end when needed</font></div>
<div><font face="Courier"> # You must use Unicode strings here [Unicode]</font></div>
<div><font face="Courier"> page_category_regex = ur'(?P<all>Category(?P<key>(?!Template)\S+))'</font></div>
<div><font face="Courier"> page_dict_regex = ur'(?P<all>(?P<key>\S+)Dict)'</font></div>
<div><font face="Courier"> page_group_regex = ur'(?P<all>(?P<key>\S+)Group)'</font></div>
<div><font face="Courier"> page_template_regex = ur'(?P<all>(?P<key>\S+)Template)'</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Content options ---------------------------------------------------</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Show users hostnames in RecentChanges</font></div>
<div><font face="Courier"> show_hosts = 1</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> # Enable graphical charts, requires gdchart.</font></div>
<div><font face="Courier"> #chart_options = {'width': 600, 'height': 300}</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"> tz_offset = 1.0 # default time zone offset in hours from UTC</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier"># -------- LDAP authentication ------------------</font></div>
<div><font face="Courier"><br>
</font></div>
<div><font face="Courier">from MoinMoin.auth.ldap_login import LDAPAuth</font></div>
<div><font face="Courier">ldap_authenticator1 = LDAPAuth(</font></div>
<div><font face="Courier"> ###server_uri='ldap://</font><span style="font-family: Courier; ">my_ad_server</span><font face="Courier">', # ldap / active directory server URI - you can use the server name</font></div>
<div><font face="Courier"> server_uri = 'ldaps://my_ad_server:636', # ldap / active directory server URI - you can use the server name</font></div>
<div><font face="Courier"> # use ldaps://server:636 url for ldaps,</font></div>
<div><font face="Courier"> # use ldap://server for ldap without tls (and set start_tls to 0),</font></div>
<div><font face="Courier"> # use ldap://server for ldap with tls (and set start_tls to 1 or 2).</font></div>
<div><font face="Courier"> bind_dn = 'active_ad_user', # DN we use for first bind (AD)</font></div>
<div><font face="Courier"> bind_pw = '*********', # password we use for first bind</font></div>
</div>
</div>
<div>
<div><font face="Courier"> ###bind_dn = '%(username)<a href="mailto:s@mydomain.org">s@mydomain.org</a>', # DN we use for first bind (AD)</font></div>
<div><font face="Courier"> ###bind_pw = '%(password)s', # password we use for first bind</font></div>
<div><font face="Courier"> base_dn='CN=Users,DC=gipl', # base DN we use for searching</font></div>
<div><font face="Courier"> scope=2, # scope of the search we do (2 == ldap.SCOPE_SUBTREE)</font></div>
<div><font face="Courier"> referrals=0, # LDAP REFERRALS (0 needed for AD)</font></div>
<div><font face="Courier"> search_filter='(sAMAccountName=%(username)s)', # ldap filter used for searching:</font></div>
<div><font face="Courier"> #search_filter = '(sAMAccountName=%(username)s)' # (AD)</font></div>
<div><font face="Courier"> #search_filter = '(uid=%(username)s)' # (OpenLDAP)</font></div>
<div><font face="Courier"> # you can also do more complex filtering like:</font></div>
<div><font face="Courier"> # "(&(cn=%(username)s)(memberOf=CN=WikiUsers,OU=Groups,DC=example,DC=org))"</font></div>
<div><font face="Courier"> # some attribute names we use to extract information from LDAP (if not None,</font></div>
<div><font face="Courier"> # if None, the attribute won't be extracted from LDAP):</font></div>
<div><font face="Courier"> givenname_attribute='givenName', # often 'givenName' - ldap attribute we get the first name from</font></div>
<div><font face="Courier"> surname_attribute='sn', # often 'sn' - ldap attribute we get the family name from</font></div>
<div><font face="Courier"> aliasname_attribute='displayName', # often 'displayName' - ldap attribute we get the aliasname from</font></div>
<div><font face="Courier"> email_attribute='mail', # often 'mail' - ldap attribute we get the email address from</font></div>
<div><font face="Courier"> email_callback=None, # callback function called to make up email address</font></div>
<div><font face="Courier"> coding='utf-8', # coding used for ldap queries and result values</font></div>
<div><font face="Courier"> timeout=10, # how long we wait for the ldap server [s]</font></div>
<div><font face="Courier"> start_tls=0, # usage of Transport Layer Security 0 = No, 1 = Try, 2 = Required</font></div>
<div><font face="Courier"> tls_require_cert=0, # 0 == ldap.OPT_X_TLS_NEVER (needed for self-signed certs)</font></div>
<div><font face="Courier"> bind_once=True, # set to True to only do one bind - useful if configured to bind as the user on the first attempt</font></div>
<div><font face="Courier"> autocreate=True, # set to True to automatically create/update user profiles</font></div>
<div><font face="Courier">)</font></div>
<div><font face="Courier">auth = [ldap_authenticator1, ] # this is a list, you may have multiple ldap authenticators</font></div>
<div><font face="Courier"> # as well as other authenticators</font></div>
<div><font face="Courier"># ------------------------------------- End of LDAP authentication -------------------------------</font></div>
</div>
<div style="font-family: Calibri, sans-serif; "><br>
</div>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
I also tried to authenticate with ldap instead of ldaps, but the result is the same, and by the way, ldaps works fine with ldapsearch…</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
Am I missing something? Any idea why the auth option is totally ignored?</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
Many thanks,</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
Davide</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div><br>
</div>
</div>
</div>
</div>
</blockquote>
</span>
</body>
</html>