Opened 10 years ago

Last modified 10 years ago

#11558 closed defect

LdapAuthStore not storing email address in session_attribute from ldap — at Version 5

Reported by: anonymous Owned by: igoltz
Priority: highest Component: LdapAuthStorePlugin
Severity: critical Keywords:
Cc: Trac Release:

Description (last modified by Ryan J Ollos)

The plugin LdapAuthStore works for the login against ldap, but does not seeem to be storing the email address from ldap. Indeed after the succesful login, in the database the session_attribute table is empty.

This is a problem because the AnnouncerPlugin logs as follows

Trac[mail] DEBUG: EmailDistributor was unable to find an address for:

an no mail is sent for notification.

The trac.ini is configured like the example in LdapAuthStorePlugin

and the values are aligned to ldap, like this

[account-manager]
password_store = LdapAuthStore
email_attr = mail
name_attr = cn

How to troubleshoot this? The trac log is enabled at debug level, but the LdapAuthStorePlugin seems silent, how to make it more verbose?

Change History (5)

comment:1 Changed 10 years ago by anonymous

using

Trac 0.12.5
LdapAuthStorePlugin 0.3.0
LdapPlugin 0.7.0dev
TracAccountManager 0.4.3
TracLDAPAuth 1.2.1
Last edited 10 years ago by Ryan J Ollos (previous) (diff)

comment:2 Changed 10 years ago by anonymous

From comment:1 disabled TracLDAPAuth 1.2.1 still the issue: login works but the email address of users are not stored in session_attribute.

comment:3 Changed 10 years ago by anonymous

Tried to add manually an entry into session_attribute (sid|authenticated|name|value) with did set to login name, authenticated set to 1, name set to 'email' and value set with an address. AnnouncerPlugin works and sends the notification email to the address.

So the problem is isolated: LdapAuthStorePlugin and LdapPlugin do authenticate against ldap, but do not store email attribute from ldap into session_attribute.

Please let me know what can be done. This is urging and I am wondering how long is it needed to fix this issue? days? weeks? months? years?

comment:4 Changed 10 years ago by anonymous

I have not tried it, but AccountLdapPlugin sounds like it has the functionality you require. It says "moved the basic properties of LDAP (user and mail) to the corresponding properties in Trac".

comment:5 Changed 10 years ago by Ryan J Ollos

Description: modified (diff)
Note: See TracTickets for help on using tickets.