Re: NAV authentication with LDAP + MS AD

-- Mischa Diehm | Network Operations Center (NOC) UniBasel | UniRechenZentrum (URZ) Klingebergstr. 70 | CH-4056 Basel Tel. +41 61 267 1574 | http://urz.unibas.ch From: Morten Brekkevold morten.brekkevold@uninett.no Date: Donnerstag, 3. April 2014 10:07 To: Mischa Diehm mischa.diehm@unibas.ch Cc: "nav-users@uninett.no" nav-users@uninett.no Subject: Re: NAV authentication with LDAP + MS AD > On Wed, 2 Apr 2014 16:12:41 +0000 Mischa Diehm mischa.diehm@unibas.ch wrote: > >> I pulled the fix from: >> >> https://nav.uninett.no/hg/stable/rev/23d774154094 >> >> this makes the login with wrong credentials work (before we had an error) >> but in case of good credentials the system still crashes. Debug output >> below: > > [snip] >> File "/usr/lib/pymodules/python2.7/nav/web/ldapauth.py", line 280, in >> is_group_member >> result = self.ldap.search_s(group_dn, ldap.SCOPE_BASE, filterstr) > [snip] >> UnicodeEncodeError: 'ascii' codec can't encode character u'\xfc' in position >> 26: ordinal not in range(128) > > This actually looks like the same kind of encoding problem while > verifying your group memberships. > > Unicode is hard *sigh*. > > > I posted this as https://bugs.launchpad.net/nav/+bug/1301794 and will be > pushing a patch within a few minutes. Attempting, for once, due > diligence, I also wrote a regression test for the problem :) > > > -- > Morten Brekkevold > UNINETT >