Need some help with ldap #2383

DunklerPhoenix · 2023-05-08T12:11:13Z

DunklerPhoenix
May 8, 2023

Heho
I try to configure ldap, but it seems that mealie doesn't try to connect to the openldap container.
Mealie is installed as docker container too.

The openLDAP container log doesn't show any connection attempt.

There are two things that confuse me a bit.

not all configs are listed in "------APP SETTINGS------".
e.g. LDAP_ADMIN_FILTER is listed, but LDAP_USER_FILTER is not.
"LDAP_BIND_TEMPLATE": null, is in the log output, but not in the documentation. What is that?

Does anybody see an error in the config? (I also tried to connect via IP instead of Hostname. no change)

      - LDAP_AUTH_ENABLED=true
      - LDAP_SERVER_URL=ldap://ldap:389
      - LDAP_BASE_DN=ou=people,dc=domain,dc=com
      - LDAP_QUERY_BIND=cn=readonly,dc=domain,dc=com
      - LDAP_QUERY_PASSWORD=pass
      - LDAP_USER_FILTER=(memberOf=cn=mealie,ou=groups,dc=domain,dc=com)
      - LDAP_ADMIN_FILTER=(memberOf=cn=admin_mealie,ou=groups,dc=domain,dc=com)
      - LDAP_ID_ATTRIBUTE=uid
      - LDAP_NAME_ATTRIBUTE=cn
      - LDAP_MAIL_ATTRIBUTE=mail

Production

    User uid:    1000
    User gid:    1000
    
INFO: 08-May-23 14:00:57 	Database connection established.
INFO: 08-May-23 14:00:57 	Context impl PostgresqlImpl.
INFO: 08-May-23 14:00:57 	Will assume transactional DDL.
INFO: 08-May-23 14:00:57 	Migration not needed.
WARNING: 08-May-23 14:00:57 	"get_all" method is deprecated; use "page_all" instead
INFO: 08-May-23 14:00:58 	Database exists
INFO: 08-May-23 14:00:58 	No food found with slug: 'dairy-products-and-dairy-substitutes' skipping fix
---- Gunicorn Configuration ---- {
    "loglevel": "info",
    "workers": 1,
    "bind": "127.0.0.1:9000",
    "graceful_timeout": 120,
    "timeout": 120,
    "keepalive": 5,
    "errorlog": "-",
    "accesslog": "-",
    "workers_per_core": 1.0,
    "use_max_workers": "1",
    "host": "127.0.0.1",
    "port": "9000"
}
[2023-05-08 14:01:16 +0200] [28] [INFO] Starting gunicorn 20.1.0
[2023-05-08 14:01:16 +0200] [28] [INFO] Listening at: http://0.0.0.0:9000 (28)
[2023-05-08 14:01:16 +0200] [28] [INFO] Using worker: uvicorn.workers.UvicornWorker
[2023-05-08 14:01:16 +0200] [29] [INFO] Booting worker with pid: 29
[2023-05-08 14:01:17 +0200] [29] [INFO] Started server process [29]
[2023-05-08 14:01:17 +0200] [29] [INFO] Waiting for application startup.
INFO: 08-May-23 14:01:17 	Registering daily callback: purge_group_registration
INFO: 08-May-23 14:01:17 	Registering daily callback: purge_password_reset_tokens
INFO: 08-May-23 14:01:17 	Registering daily callback: purge_group_data_exports
INFO: 08-May-23 14:01:17 	Registering minutely callback: post_group_webhooks
INFO: 08-May-23 14:01:17 	Daily job: purge_group_registration
INFO: 08-May-23 14:01:17 	Daily job: purge_password_reset_tokens
INFO: 08-May-23 14:01:17 	Daily job: purge_group_data_exports
INFO: 08-May-23 14:01:17 	Minutely job: post_group_webhooks
INFO: 08-May-23 14:01:17 	-----SYSTEM STARTUP----- 

INFO: 08-May-23 14:01:17 	------APP SETTINGS------
INFO: 08-May-23 14:01:17 	{
    "PRODUCTION": true,
    "BASE_URL": "https://domain.com",
    "IS_DEMO": false,
    "API_PORT": 9000,
    "API_DOCS": true,
    "TOKEN_TIME": 48,
    "GIT_COMMIT_HASH": "13850cda1f9cb02a8c788030ba6cfa96bba33571",
    "ALLOW_SIGNUP": true,
    "DB_ENGINE": "postgres",
    "DB_PROVIDER": {
        "POSTGRES_USER": "mealie",
        "POSTGRES_PASSWORD": "postgres",
        "POSTGRES_SERVER": "postgres",
        "POSTGRES_PORT": "5432",
        "POSTGRES_DB": "mealie"
    },
    "DEFAULT_GROUP": "Home",
    "DEFAULT_EMAIL": "changeme@email.com",
    "SMTP_HOST": "postfix",
    "SMTP_PORT": "25",
    "SMTP_FROM_NAME": "DB",
    "SMTP_FROM_EMAIL": "mail@domain.con",
    "SMTP_AUTH_STRATEGY": "none",
    "LDAP_AUTH_ENABLED": true,
    "LDAP_SERVER_URL": "ldap://ldap:389",
    "LDAP_BIND_TEMPLATE": null,
    "LDAP_ADMIN_FILTER": "(memberOf=cn=admin_mealie,ou=groups,dc=domain,dc=com)",
    "TESTING": false
}
[2023-05-08 14:01:17 +0200] [29] [INFO] Application startup complete.
127.0.0.1:54790 - "GET /docs HTTP/1.1" 200
172.18.0.34:51098 - "POST /api/auth/token HTTP/1.1" 500
[2023-05-08 14:01:29 +0200] [29] [ERROR] Exception in ASGI application
Traceback (most recent call last):
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/uvicorn/protocols/http/httptools_impl.py", line 398, in run_asgi
    result = await app(self.scope, self.receive, self.send)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/uvicorn/middleware/proxy_headers.py", line 45, in __call__
    return await self.app(scope, receive, send)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/fastapi/applications.py", line 269, in __call__
    await super().__call__(scope, receive, send)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/starlette/applications.py", line 124, in __call__
    await self.middleware_stack(scope, receive, send)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/starlette/middleware/errors.py", line 184, in __call__
    raise exc
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/starlette/middleware/errors.py", line 162, in __call__
    await self.app(scope, receive, _send)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/starlette/middleware/gzip.py", line 24, in __call__
    await responder(scope, receive, send)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/starlette/middleware/gzip.py", line 43, in __call__
    await self.app(scope, receive, self.send_with_gzip)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/starlette/exceptions.py", line 93, in __call__
    raise exc
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/starlette/exceptions.py", line 82, in __call__
    await self.app(scope, receive, sender)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/fastapi/middleware/asyncexitstack.py", line 21, in __call__
    raise e
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/fastapi/middleware/asyncexitstack.py", line 18, in __call__
    await self.app(scope, receive, send)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/starlette/routing.py", line 670, in __call__
    await route.handle(scope, receive, send)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/starlette/routing.py", line 266, in handle
    await self.app(scope, receive, send)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/starlette/routing.py", line 65, in app
    response = await func(request)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/fastapi/routing.py", line 227, in app
    raw_response = await run_endpoint_function(
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/fastapi/routing.py", line 162, in run_endpoint_function
    return await run_in_threadpool(dependant.call, **values)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/starlette/concurrency.py", line 41, in run_in_threadpool
    return await anyio.to_thread.run_sync(func, *args)
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/anyio/to_thread.py", line 31, in run_sync
    return await get_asynclib().run_sync_in_worker_thread(
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/anyio/_backends/_asyncio.py", line 937, in run_sync_in_worker_thread
    return await future
  File "/opt/pysetup/.venv/lib/python3.10/site-packages/anyio/_backends/_asyncio.py", line 867, in run
    result = context.run(func, *args)
  File "/app/mealie/routes/auth/auth.py", line 56, in get_token
    user = authenticate_user(session, email, password)  # type: ignore
  File "/app/mealie/core/security/security.py", line 88, in authenticate_user
    return user_from_ldap(db, session, email, password)
  File "/app/mealie/core/security/security.py", line 51, in user_from_ldap
    user_dn = settings.LDAP_BIND_TEMPLATE.format(username)
AttributeError: 'NoneType' object has no attribute 'format'

EDIT:
after upgrade from beta-4 to beta-5 the log shows some more settings:

    [...]
    "SMTP_AUTH_STRATEGY": "none",
    "LDAP_AUTH_ENABLED": true,
    "LDAP_SERVER_URL": "ldap://ldap:389",
    "LDAP_TLS_INSECURE": false,
    "LDAP_TLS_CACERTFILE": null,
    "LDAP_BIND_TEMPLATE": null,
    "LDAP_BASE_DN": "ou=people,dc=domain,dc=com",
    "LDAP_ADMIN_FILTER": "(memberOf=cn=admin_mealie,ou=groups,dc=domain,dc=com)",
    [...]

EDIT2:
after logging in the first time with the admin account I saw this message:

LDAP Ready
Not all LDAP Values are configured. This can be ignored if you are not using LDAP Authentication.

But I don't know what should be missing. Just the LDAP_BIND_TEMPLATE, but this is missing in the documentation too

EDIT3:
I stole LDAP_BIND_TEMPLATE from another discussion and now it shows ldap should be ready. But connection is still not possible (#2385)

EDIT4:
I get a new error after upgrade. See #2386

DunklerPhoenix · 2023-05-09T09:12:57Z

DunklerPhoenix
May 9, 2023
Author

With lastest nightly everything works. LDAP_BIND_TEMPLATE is not needed anymore

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Need some help with ldap #2383

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Replies: 1 comment

{{title}}

Select a reply

Need some help with ldap #2383

DunklerPhoenix May 8, 2023

Replies: 1 comment

DunklerPhoenix May 9, 2023 Author

DunklerPhoenix
May 8, 2023

DunklerPhoenix
May 9, 2023
Author