Could not authorize you from LDAP because "Invalid credentials" (again)
Hello all, it's my first post on gitab :)
Im working with the followings systems :
- Red Hat Enterprise Linux Server release 7.1 (Maipo)
- GITLAB version : gitlab-ce-7.13.5-ce.0.el7.x86_64.rpm
Ive read the issues gitlab-ce#655 gitlab-ce#615 gitlab-ce#639 bit it did not yield anything... First of all, i don't understand why Ive got several Gitlab files in :
- /etc/gitlab (in gitlab.rb => all is commented)
- /opt/gitlab <= it'a normal place for gitlab ?
- /var/opt/gitlab
Which config file I have to use ? /etc/gitlab/gitlab.rb
or /var/opt/gitlab/gitlab-rails/etc/gitlab.yml
?? I suppose the second one but seeing that Ive got some problems, Ive some doubts :)
Secondly, I think I have well-set /var/opt/gitlab/gitlab-rails/etc/gitlab.yml
but from the docs, if I do some modifications, I should do a gitlab-ctl reconfigure ?? but if I do that, my gitlab.yml is reseted, is it normal ?
And thridly, Ive got this message when I attempt to connect to the AD server from my Gitlab :
Could not authorize you from LDAP because "Invalid credentials"
If I do a gitlab-rake gitlab:ldap:check RAILS_ENV=production
, it yields lot of resultat (till 100 I think)
Checking LDAP ...
LDAP users with access to your GitLab server (only showing the first 100 results)
Server: ldapmain
DN: CN=artifactory,OU=Comptes de service,OU=Administration,DC=<my_company_name>,DC=fr sAMAccountName: artifactory
[ lines ... ]
DN: CN=svc_exchange,OU=Comptes de service,OU=Administration,DC=<my_company_name>,DC=fr sAMAccountName: svc_exchange
Checking LDAP ... Finished
So far, everything is ""ok"" but if I do a "gitlab-ctl tail" it yields that :
I, [2015-08-25T12:55:36.726054 #27391] INFO -- omniauth: (ldapmain) Callback phase initiated.
E, [2015-08-25T12:55:36.727195 #27391] ERROR -- omniauth: (ldapmain) Authentication failure! missing_credentials encountered.
Idem from the UI.
Otherwise, may I bring a credential from the AD server ? The AD admin has given to me a .pdx file (I asked him) and Ive extracted from there the private key that Ive passed into /opt/gitlab/embedded/ssl/certs/<servername>.pem
but it yields me a new error :
I, [2015-08-25T13:47:35.965352 #28600] INFO -- omniauth: (ldapmain) Callback phase initiated.
E, [2015-08-25T13:47:35.971833 #28600] ERROR -- omniauth: (ldapmain) Authentication failure! ldap_error: Errno::ECONNRESET, Connection reset by peer @ io_fillbuf - fd:17
Could you guide me on the right way please :D I begin to dispair ;(