I can't connect with Ldap
ulrichnansi opened this issue · 2 comments
Hello,
I'm trying to connect with Ldap. I have this error :
error: cannot bind with sTasCfmgmt: unable to read LDAP response packet: read tcp 10.254.4.186:47404->10.211.196.85:636: read: connection reset by peer
I have tested my credentials in Ldap Browser. There worked fine.
That is my vars.yml file :
your git repo uri
git_repo_uri: ((repo))
git_repo_branch: master
your cf system domain
system_domain: ((system-domain))
user account with permission to create orgs/spaces
user_id: "cf-mgmt"
DEPRECATED - Use client_secret - password of user account with permission to create orgs/spaces
password: ""
client secret for uaa for user_id
client_secret: ((cf-mgmt-client-secret))
logging level for cf-mgmt commands in the pipeline
log_level: DEBUG
time interval to trigger update/delete jobs on
time-trigger: 50m
configuration directory
config_dir: config-repo
allow specifying ldap server in pipeline vs in ldap.yml only needed if using LDAP
ldap_server: ((ldap-server))
allow specifying ldap bind user in pipeline vs in ldap.yml only needed if using LDAP
ldap_user: sTasCfmgmt
password to bind to ldap - only needed if using LDAP
ldap_password: ((cfmgmt-pass))
Below the ldap.yml file :
enabled: true
ldapHost: xxx
ldapPort: 636
use_tls: true
bindDN: uid=xxx,ou=Utilisateurs
userSearchBase: ou=Utilisateurs,ou=xxxx,dc=mvt,dc=xxxx,dc=dev
userNameAttribute: sTasCfmgmt
userMailAttribute: xxx@xxx.com
userObjectClass: top,person,organizationalPerson,user
groupSearchBase: ou=Groupes,ou=xxx,dc=mvt,dc=xxx,dc=dev
groupAttribute: member
groupObjectClass: top, person
origin: ldap
insecure_skip_verify: true
ca_cert: |
-----BEGIN CERTIFICATE-----
MIIGHzCCBQegAwIBAgINAJLy5Acu55chLRp0MzANBgkqhkiG9w0BAQsFADBNMR0w
GwYDVQQKDBRNb3V2ZW1lbnQgRGVzamFyZGluczEsMCoGA1UEAwwjQUMgU3ViIFBy
XXXX
4vP5cxZ8Mh4pm6L/2VZvwSp9Svm9AovtNUXgX9vjkn4uvMtx+Xmg5OQIrLlaY5Pg
Fbzr8Iy38GmV0Bbon7C1S2kPLr+cuw3VPLko173IJ+D0GkkM+BUW2i7wa6rnrZ7P
t8MenXoNvSdV/cXbpGpKV0FOaB6sQyqlHDGpBOIbddDl/kCuK4rCEVHKCuObIX5P
4fxJepakk1bKi7emt26AApmntDtJXV86k83jATLGIBbDnDNJpOhw2nAxViNFSiCi
XXXX
-----END CERTIFICATE-----
useIDForSAMLUser: false
minTLSVersion: 1.0
maxTLSVersion: 1.3
Please, can U help me?
Thanks
We have created an issue in Pivotal Tracker to manage this. Unfortunately, the Pivotal Tracker project is private so you may be unable to view the contents of the story.
The labels on this github issue will be updated when the story is started.
It's now OK. This issue occurs with version < 1.0.50. I change the cf-mgmt version and it's now OK