Ldap user can not clone code!

Clone:

    $ git clone http://version.**.com/**/test.git
    Cloning into 'test'...
    Username for 'http://version.**.com': **
    Password for 'http://**@version.**.com': 
    fatal: unable to access 'http://version.**.com/**/test.git/': The requested URL returned error: 500

production.log:


Started GET "/***/test.git/info/refs?service=git-upload-pack" for 10.0.3.223 at 2016-10-14 17:05:15 +0800
Processing by Projects::GitHttpController#info_refs as */*
  Parameters: {"service"=>"git-upload-pack", "namespace_id"=>"***", "project_id"=>"test.git"}
  ActiveRecord::SchemaMigration Load (1.1ms)  SELECT `schema_migrations`.* FROM `schema_migrations`
  Project Load (1.1ms)  SELECT  `projects`.* FROM `projects` INNER JOIN `namespaces` ON `namespaces`.`id` = `projects`.`namespace_id` AND `namespaces`.`deleted_at` IS NULL WHERE `projects`.`pending_delete` = 0 AND ((namespaces.path = '***'
          AND projects.path = 'test'))  ORDER BY (CASE WHEN BINARY namespaces.path = '***' AND BINARY projects.path = 'test' THEN 0 ELSE 1 END) LIMIT 1
  ProjectFeature Load (0.7ms)  SELECT  `project_features`.* FROM `project_features` WHERE `project_features`.`project_id` = 6 LIMIT 1
Filter chain halted as :authenticate_user rendered or redirected
Completed 401 Unauthorized in 27ms (Views: 0.4ms | ActiveRecord: 4.4ms)
Started GET "/***/test.git/info/refs?service=git-upload-pack" for 10.0.3.223 at 2016-10-14 17:05:15 +0800
Processing by Projects::GitHttpController#info_refs as */*
  Parameters: {"service"=>"git-upload-pack", "namespace_id"=>"***", "project_id"=>"test.git"}
  ActiveRecord::SchemaMigration Load (10.4ms)  SELECT `schema_migrations`.* FROM `schema_migrations`
  Project Load (1.0ms)  SELECT  `projects`.* FROM `projects` INNER JOIN `namespaces` ON `namespaces`.`id` = `projects`.`namespace_id` AND `namespaces`.`deleted_at` IS NULL WHERE `projects`.`pending_delete` = 0 AND ((namespaces.path = '***'
          AND projects.path = 'test'))  ORDER BY (CASE WHEN BINARY namespaces.path = '***' AND BINARY projects.path = 'test' THEN 0 ELSE 1 END) LIMIT 1
  ProjectFeature Load (0.6ms)  SELECT  `project_features`.* FROM `project_features` WHERE `project_features`.`project_id` = 6 LIMIT 1
  User Load (0.8ms)  SELECT  `users`.* FROM `users` WHERE (`username` = '***') LIMIT 1
  Identity Exists (0.7ms)  SELECT  1 AS one FROM `identities` WHERE `identities`.`user_id` = 2 AND (provider LIKE 'ldap%' AND extern_uid IS NOT NULL) LIMIT 1
  Identity Load (0.9ms)  SELECT  `identities`.* FROM `identities` WHERE `identities`.`provider` = 'ldapmain' AND (`extern_uid` = 'CN=***,OU=***,DC=**,DC=local')  ORDER BY `identities`.`id` ASC LIMIT 1
  User Load (0.8ms)  SELECT  `users`.* FROM `users` WHERE `users`.`id` = 2  ORDER BY `users`.`id` DESC LIMIT 1
  U2fRegistration Exists (0.6ms)  SELECT  1 AS one FROM `u2f_registrations` WHERE `u2f_registrations`.`user_id` = 2 LIMIT 1
Completed 500 Internal Server Error in 766ms (ActiveRecord: 42.8ms)
** [Raven] Nil JSON web token excluded from capture due to environment or should_capture callback

JWT::DecodeError (Nil JSON web token):
  lib/gitlab/workhorse.rb:120:in `verify_api_request!'
  app/controllers/projects/git_http_client_controller.rb:154:in `verify_workhorse_api!'
  lib/gitlab/request_profiler/middleware.rb:15:in `call'
  lib/gitlab/middleware/go.rb:16:in `call'

gitlab check:

Checking GitLab Shell ...

GitLab Shell version >= 3.6.1 ? ... OK (3.6.1)
Repo base directory exists?
default... yes
cephfs... yes
Repo storage directories are symlinks?
default... no
cephfs... no
Repo paths owned by git:git?
default... yes
cephfs... yes
Repo paths access is drwxrws---?
default... yes
cephfs... yes
hooks directories in repos are links: ... 
*** / *** ... repository is empty
*** / test ... repository is empty
Running /opt/gitlab/embedded/service/gitlab-shell/bin/check
Ignoring mysql2-0.4.4 because its extensions are not built.  Try: gem pristine mysql2 --version 0.4.4
Ignoring mysql2-0.3.20 because its extensions are not built.  Try: gem pristine mysql2 --version 0.3.20
Check GitLab API access: OK
Access to /var/opt/gitlab/.ssh/authorized_keys: Ignoring mysql2-0.4.4 because its extensions are not built.  Try: gem pristine mysql2 --version 0.4.4
Ignoring mysql2-0.3.20 because its extensions are not built.  Try: gem pristine mysql2 --version 0.3.20
OK
Send ping to redis server: OK
gitlab-shell self-check successful

Checking GitLab Shell ... Finished

Checking Sidekiq ...

Running? ... yes
Number of Sidekiq processes ... 1

Checking Sidekiq ... Finished

Checking Reply by email ...

Reply by email is disabled in config/gitlab.yml

Checking Reply by email ... Finished

Checking LDAP ...

LDAP users with access to your GitLab server (only showing the first 100 results)
Server: ldapmain

some ldpa info the CN and OU is chinese

Checking LDAP ... Finished

Checking GitLab ...

Git configured with autocrlf=input? ... yes
Database config exists? ... yes
All migrations up? ... yes
Database contains orphaned GroupMembers? ... no
GitLab config exists? ... yes
GitLab config outdated? ... no
Log directory writable? ... yes
Tmp directory writable? ... yes
Uploads directory setup correctly? ... yes
Init script exists? ... skipped (omnibus-gitlab has no init script)
Init script up-to-date? ... skipped (omnibus-gitlab has no init script)
projects have namespace: ... 
*** / *** ... yes
*** / test ... yes
Redis version >= 2.8.0? ... yes
Ruby version >= 2.1.0 ? ... yes (2.3.1)
Your git bin path is "/opt/gitlab/embedded/bin/git"
Git version >= 2.7.3 ? ... yes (2.7.4)
Active users: 7

Checking GitLab ... Finished
Edited by 🤖 GitLab Bot 🤖