{"id":176,"date":"2018-05-22T15:30:30","date_gmt":"2018-05-22T13:30:30","guid":{"rendered":"http:\/\/fred151.net\/site\/?p=176"},"modified":"2021-03-29T17:23:29","modified_gmt":"2021-03-29T15:23:29","slug":"fix-ldap-login-openproject-7-4-6","status":"publish","type":"post","link":"https:\/\/fred151.net\/site\/2018\/05\/22\/fix-ldap-login-openproject-7-4-6\/","title":{"rendered":"Fix NET::LDAP:Error Login in OpenProject 7.4.6"},"content":{"rendered":"<p>If you upgrade OpenProject from 6 to 7 maybe you will have some trouble with SSL certificate.<\/p>\n<h4>Symptons<\/h4>\n<p>&#8211; can&#8217;t login into openproject with LDAP method configured<\/p>\n<p>After the upgrade the log reports:<\/p>\n<pre>\"NET::LDAP:Error (hostname \"yourhostname\" does not match the server certificate)\".<\/pre>\n<p>After some emails with openporject support we did not find any solutions, so i decided to investigate and find a workaround. I had a server CentOS 7 with openproject 6 and a self signed certicate installed.<\/p>\n<h4>How to fix<\/h4>\n<p>To fix the login error i have commented the line 291 in the file \/opt\/openproject\/vendor\/ruby-2.4.4\/lib\/ruby\/2.4.0\/ssl.rb near the line &#8220;raise SSLError&#8230;&#8221;<\/p>\n<pre>Unless OpenSSL::SSL.verify_certificate_identity(peer_cert, hostname)\r\n\r\n# raise SSLError, \"hostname \\\"#{hostname}\\\" does not match the server certificate\"\r\n\r\nend\r\n<\/pre>\n<p>So i do not throw the exception if the SSL is not valid. The best solution is to investigate how the check&#8217;s function works but if you do not have time the workaround is helpfulest.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>If you upgrade OpenProject from 6 to 7 maybe you will have some trouble with SSL certificate. Symptons &#8211; can&#8217;t login into openproject with LDAP method configured After the upgrade the log reports: &#8220;NET::LDAP:Error (hostname &#8220;yourhostname&#8221; does not match the server certificate)&#8221;. After some emails with openporject support we did not find any solutions, so [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":183,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[18,17,19],"class_list":["post-176","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sysadmin","tag-ldap","tag-openproject","tag-openssl"],"_links":{"self":[{"href":"https:\/\/fred151.net\/site\/wp-json\/wp\/v2\/posts\/176","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fred151.net\/site\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fred151.net\/site\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fred151.net\/site\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fred151.net\/site\/wp-json\/wp\/v2\/comments?post=176"}],"version-history":[{"count":5,"href":"https:\/\/fred151.net\/site\/wp-json\/wp\/v2\/posts\/176\/revisions"}],"predecessor-version":[{"id":182,"href":"https:\/\/fred151.net\/site\/wp-json\/wp\/v2\/posts\/176\/revisions\/182"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fred151.net\/site\/wp-json\/wp\/v2\/media\/183"}],"wp:attachment":[{"href":"https:\/\/fred151.net\/site\/wp-json\/wp\/v2\/media?parent=176"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fred151.net\/site\/wp-json\/wp\/v2\/categories?post=176"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fred151.net\/site\/wp-json\/wp\/v2\/tags?post=176"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}