Replies to This Discussion

Permalink Reply by agodber on March 12, 2008 at 1:34pm

One of our users has posted a quick HowTo showing how simple it is to integrate the Redmine JumpBox with your existing LDAP server.

Check it out here:
http://www.prestonlee.com/archives/218

Nice Job to Preston.

Austin

▶ Reply to This

Permalink Reply by marc on March 27, 2008 at 10:46am

Yep, the Redmine Jumpbox can authenticate account credentials against an an existing LDAP server. Unfortunately, the Subversion repositories do not.

By default, Apache is configured to authenticate Subversion users against the local Redmine database. If you open up /jumpbox/etc/apache2/jumpbox-app, you'll see a snippet which uses Perl to authenticate users. However, since Redmine is configured to work with LDAP, that code will effectively return false (no user with that password, right?), and you won't be able to talk to Subversion.

I did spend a few hours trying to set this up, and I came really close, but no cigar.

After setting up the necessary mod files and adding my own , running SVN operations would periodically fail:

On the server side my log looked like:

/var/log/apache2/error.log: [Wed Mar 26 20:38:24 2008] [error] [client 192.168.1.231] (104)Connection reset by peer: ap_content_length_filter: apr_bucket_read() failed

On my client machine, it would just state that the server closed the connection.

I was seeing nondeterministic behavior. Using svn, sometimes I could connect, sometimes I could not. Visiting the SVN url over a browser still worked, however.

I'm not sure what the problem is: either there's a fundamental step I'm missing, or the Apache instance that ships with the Redmine Jumpbox just doesn't like me.

Here's a breakdown of steps I took:

1. Symlink ./mods-available/ldap.load into ./mods-enabled/ldap.load

2. Symlink ./mods-available/authnz_ldap.load into ./mods-enabled/authnz_ldap.load

3. (You can use a2enmod to do those steps for you)

4. Modify /jumpbox/etc/apache2/jumpbox-app:

a. Comment out the existing entry for <Location /svn>

b. Add the following entry for
<Location /svn>
Dav svn
SVNParentPath "/var/data/svn"
AuthType Basic
AuthName "LDAP XServe Authentication"
AuthBasicProvider ldap
AuthzLDAPAuthoritative off
AuthLDAPURL "ldap://192.168.1.122:389/cn=users,dc=example,dc=com?uid?sub?(objectClass=*)"
require valid-user
# require ldap-user marc # specifically allowed users
</Location>

You're going to have to play around with the AuthLDAPURL string. Check out the Apache 2.2 notes.

Visiting the SVN repo over a browser worked: http://redmine/svn/example_svn

However, running svn operations (svn ls, svn co, svn ci) would periodically fail.

I hope someone else can take up the reins or perhaps suggest something I haven't considered.

▶ Reply to This

Permalink Reply by marc on April 3, 2008 at 10:09am

More follow up.

I found the following patch on Redmine.org that seems to do the authentication that I need against LDAP: http://redmine.org/issues/show/879. I believe it's going to be in redmine 0.7

Unfortunately GCC is one of the dependencies that the Authen::Simple::LDAP perl module requires (I think it was for some md5 c library). I decided not to pursue that route since it would just burn up too much of my time.

In addition to this, I tried experimenting with an SVN AuthUserFile. Not perfect since I'd have to update the file when new developers join the team, but I figured it's a stop gap until Redmine 0.7 comes out.

Here's what my jumpbox-app conf file looks like

<Location /svn>
Dav svn
SVNParentPath "/var/data/svn"
AuthType Basic
AuthName "Subversion repository"
AuthUserFile /jumpbox/etc/apache2/svn-auth-file
Require valid-user
<Location>

Here's what's interesting. I get the very same errors that I did with the AuthzLDAP authentication, which leads me to believe that there's definitely something misconfigured/not configured on the Apache instance that ships with the Jumpbox.

Thoughts?

▶ Reply to This

Permalink Reply by agodber on April 3, 2008 at 10:26am

OK, once 0.7 is released we will pay particular attention to LDAP interoperability and maybe get it better configured for people who want to authenticate against LDAP.

Austin

BTW: to bootstrab the basic build system on a JumpBox you just need to do:

sudo apt-get update
sudo apg-get install build-essential

that will get the core GNU development things. Then you can use
apt-cache search md5
to try and find the appropriate dev packages.

None of this is included by default because it bloats the JumpBox dramatically and once you know what to install, its not too much pain.

▶ Reply to This

Permalink Reply by Jean-Marie Dubille on April 9, 2008 at 3:57am

Hi,
I am searching for the registration key of the Redmine 0.6.1 beta jumpbox image that is usualy on the forum, but I can't find It... Could you please give it to me, because I need to access to the machine administration and I can't still I haven't been registrated.

Thanks in advance for your reply, best regards,

Jean-Marie ;-)

▶ Reply to This

Permalink Reply by Kimbro Staken on April 9, 2008 at 9:49am

You can retrieve keys here now. http://www.jumpbox.com/beta-license-keys

▶ Reply to This

Permalink Reply by Jean-Marie Dubille on April 11, 2008 at 12:53pm

Sorry Kimbro, I forgot to thank you for your reply... :-(
now it's repaired...

cheers ;-)

▶ Reply to This

Permalink Reply by Scott McNee on April 9, 2008 at 4:38am

Hi All ,

I have downloaded the lastest version of the redmine appliance.

I have attempted to use the SVN on a few of the new redmine appliances that we are testing. None of them will allow svn access. All we keep getting is.

svn: PROPFIND request failed on '/svn/test'
svn: PROPFIND of '/svn/test': 302 Found (http://192.168.2.40)

the svn command that was issued is :

svn co http://192.168.2.40/svn/test

the actual repository does not have any code commited to it . Any code commit fails. The repo. exists this is confirmed by visual inspection of the svn directory.

Any ideas?

Thanks.

▶ Reply to This

Permalink Reply by agodber on April 9, 2008 at 7:35am

Yeah, thats a known bug, we should have an update today. Thanks for reporting back to us.

Austin

▶ Reply to This

Permalink Reply by Omar Ramos on April 9, 2008 at 3:43pm

I manually set the Network Address information in the Admin area for JumpBox and after the settings had been made Firefox would not open up the Redmine page anymore (JumpBox Admin area still works fine however). The error Firefox gives me is "The page isn't redirecting properly", but I don't understand why this error would be given out because the network address settings were set manually. Maybe somebody can help shed some light on this for me?

Upon further inspection, I changed the settings back to use DHCP and let the settings go through and get a new IP address and still the same error. Then I stopped and then restarted the VM and after that I get a routing error on (no route found to match "/jberrordoc.cgi" with {:method=>:get}) on the Redmine page and a 503 Gateway error on the JumpBox Admin page.

▶ Reply to This

Permalink Reply by agodber on April 9, 2008 at 3:57pm

If you used the JumpBox Admin area to set a Static IP that should have worked. If you did it manually on the command line it would have likely broken it.

I will try to reproduce this on our recent internal builds.

Austin

▶ Reply to This

Permalink Reply by Omar Ramos on April 9, 2008 at 4:03pm

Thanks for the reply Austin, I'll also try this again on a new VM. I also wanted to mention that I was able to convert the JumpBox in the new Parallels Server to the newer pvs format without any trouble, but only if I tried adding the VM freshly unzipped from the package I downloaded (if I tried adding the existing machine I had been using earlier in the day on Parallels Workstation it would say that it couldn't complete the conversion...but this also seemed to have messed up the original format because after this I could no longer open up the VM in Parallels Workstation, but this is probably an issue with Parallels Server and not JumpBox I'm thinking...then again, both of the products I'm trying out are in Beta :-).

▶ Reply to This

• 1
• 2
• 3
• 4
• 5
• 6
• 7
• 8
• 9
• 10