LDAP Addon is not working with Plone6 Docker Setup

Plone Support
, ,
1

Hi,

I want to add the pas.plugins.ldap Addon to the backend container of my nginx-volto-plone Docker Setup.

When I add it via the ADDONS environment variable in the compose file, the container doesn't start, because of a missing dependency on plone.app.widgets:
ModuleNotFoundError: No module named 'plone.app.widgets

When I also add this addon, there is another dependency that cannot be met:
ImportError: cannot import name 'get_ajaxselect_options' from 'plone.app.widgets.utils' (unknown location)

Can someone tell me how to get the ldap Addon working? Maybe it doesn't really need the widgets Addon and i can comment this dependency out somewhere?

Any help is appreciated!

2

This happens when you are use the old dependencies of yafowil packages, you need

yafowil.plone==5.0.0a2
yafowil.bootstrap==2.0.0a1
yafowil.widget.array==2.0a1
yafowil.widget.dict==2.0a1
3

Thank you!
Worked like a charm.

It took a while to get the configuration working, but now the LDAP Inspector shows the users and groups.
But somehow when I search for LDAP users in the Users tab, I don't get any results.

Do I need to enable the LDAP source somewhere?
I also cannot login with LDAP users.

4

Have you enable "many users" and "many groups" in the registry?

5

No. I tried enabling it -> same result.
The local users are displayed when its disabled and I can also search for those.

6

Enable debug mode and disable memcache and take a look in the logfile. Perhaps more infos inside.

7

Here is what works for us.

Screenshot from 2024-10-14 17-51-27
Screenshot from 2024-10-14 17-51-27722×906 59.4 KB

Screenshot from 2024-10-14 17-53-20
Screenshot from 2024-10-14 17-53-20519×618 31.2 KB

8

Perhaps the order of Authentication Plugins in the acl_user tool is wrong. Go to the ZMI and check the order in the different plugins e.g. User_enumeration, User_adder, Groups Plugins in /acl_users/plugins/manage_plugins

9

I enabled debug mode - where can I view the logfiles?

The plugin order seems right. The pasldap plugin is always on top of the active plugins.

10

normally the logfiles exists under var/client*/event.log or var/instance/instance.log or var/log/instance.log, depending on your configuration

11

Sorry, but I don't have any client or instance folders in the container.
Do I have to specify the location in the compose file or somewhere else?

12

Are you using the official docker image? We had a problem with the trust store in version plone/plone-backend:6.0.11.1.

The plugin would not connect to our openldap server (which uses a Let's Encrypt cert) because it did not have the appropriate root certificate in its trust store. I got a current certificate store from Mozilla, added it to a folder in /app and exported LDAPTLS_CACERT. IIRC that fixed it for me.

13

Yes, I'm using the official images with the latest 6.0 release.
In our case it can connect, as I already mentioned, but in the 'Users' setting and in the 'Share' page I don't get any results when I search for any LDAP objects.

14

have you check this command: docker logs --follow ?

15

Yes. Here I only see the http requests, which look normal and are not really helpful.