Skip to content

GitLab

  • Menu
Projects Groups Snippets
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • G gitlabhq1
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 21
    • Issues 21
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 12
    • Merge requests 12
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Packages & Registries
    • Packages & Registries
    • Package Registry
    • Infrastructure Registry
  • Analytics
    • Analytics
    • CI/CD
    • Repository
    • Value stream
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • gpt
  • large_projects
  • gitlabhq1
  • Issues
  • #5734

Closed
Open
Created Nov 30, 2013 by Administrator@rootOwner

LDAP fails on long results

Created by: volfco

I am working on getting GitLab setup in a university environment, and I am having trouble getting LDAP login to work. There are two types of accounts, Student and Service accounts. I am able to login with a service account, but I am not able with a student account. With the student account, I get an error upon entering my credentials "(ldap) account must provide an uid and email address." I have no such problem with the service accounts. Both types of accounts provide an email address in the response and work on other services, so the only think I can think is that GitLab is choking up on the length of the response.

ldap config is as follows: ldap: enabled: true host: 'ldap.theuni.edu' base: 'ou=people,dc=theuni,dc=edu' port: 636 uid: 'uid' #'sAMAccountName' method: 'ssl' # "ssl" or "plain" allow_username_or_email_login: true email_domain: 'theuni.edu'

Here is a dump from both types of accounts. Student account: {'uniEduStudent': ['0000-XXXX-000-000', '0000-XXXX-000-00', '0000-XXXX-000-00', '0000-XXXX-000-00', '0000-XXXX-000-00', '0000-XXXX-000-00', '0000-XXXX-000-00', '0000-XXXX-000-00', '0000-XXXX-000-00', '0000-XXXX-000-00', '0000-XXXX-000-00', 'registered:current'], 'uniEduVanityName': ['colum'], 'displayName': ['Colum Mcgaley (Student)'], 'uid': ['cxm0000'], 'uniEduAccountType': ['Student'], 'title': ['Student'], 'objectClass': ['uniObject', 'uniEduIdentity', 'inetOrgPerson', 'person', 'organizationalPerson', 'uniEduEnrollment', 'uniEduOrganization', 'posixAccount', 'uniEduAuth'], 'loginShell': ['/bin/tcsh'], 'uniEduAffiliation': ['XXXXXXXXX', XXXXXXXXX', 'XXXXX', 'XXXXXXXX', 'XXXXX', 'XXXXXXXXXXXXXXXXX', 'Student', 'XXXXXXXX', 'XXXXXXXX'], 'uniEduPrimaryAffiliation': ['Student'], 'uidNumber': ['00000'], 'initials': ['CM'], 'mobile': ['900-5555-0000'], 'gidNumber': ['0000'], 'sn': ['Mcgaley'], 'homeDirectory': ['/home/cxm0000'], 'mail': ['[email protected]'], 'ou': ['Student'], 'givenName': ['Colum'], 'cn': ['Colum Mcgaley']}

Service Account {'departmentNumber': ['undefined'], 'displayName': ['Colum McGaley'], 'cn': ['Colum McGaley'], 'uniEduAccountType': ['Studemp'], 'uniEduPrimaryAffiliation': ['Student'], 'objectClass': ['uniObject', 'uniEduIdentity', 'inetOrgPerson', 'person', 'organizationalPerson', 'uniEduEnrollment', 'posixAccount', 'uniEduAuth', 'uniEduOrganization'], 'uniEduAffiliation': ['Admissions', XXXXXXXX', 'XXXXX', 'XXXXXXXX', 'XXXXXX', 'XXXXXXXXXXXXXXXXX', 'XXXXXXX', 'XXXXXXXX', 'XXXXXXXX'], 'uidNumber': ['0000'], 'initials': ['CM'], 'mobile': ['000-000-0000'], 'gidNumber': ['0000'], 'sn': ['McGaley'], 'homeDirectory': ['/home/xxxxxx'], 'mail': ['[email protected]'], 'ou': ['Studemp'], 'givenName': ['Colum'], 'uid': ['something']}

Assignee
Assign to
Time tracking