[racktables-users] Re: ldap configuration not working

  • From: Denis Ovsienko <denis@xxxxxxxxxxxxx>
  • To: <racktables-users@xxxxxxxxxxxxx>
  • Date: Wed, 25 Feb 2015 23:35:12 +0000

---- On Wed, 25 Feb 2015 23:20:12 +0000 Craig Gill  wrote ---- 
>Ah, 
> 
>In that case, have you added a domain group which your account is a member of 
>to the Configuration -> Permissions page in Racktables? By default only the 
>local admin account is on the list, therefore only that account can log in. 
> 
>To add a new group to the allowed list, add a new line 'allow 
>{$lgcn_Groupname}' and then save the changes. 
> 
>I believe there's also a way to directly add your domain user account to the 
>allowed list with 'allow {$username_yourusername}' 

This definitely makes sense for the authorisation phase, but in this case the 
repeated username/password prompt indicates the client does not pass the 
authentication phase. If it was an authorisation issue, there would be just one 
username/password prompt followed with a "you are not allowed to access here" 
HTML message.

If the LDAP exchange concludes OK the most likely reason for the authentication 
to fail is $require_local_account not being aligned with the list of local 
accounts in RackTables.

-- 
    Denis Ovsienko


Other related posts: