How to install OpenERP 6 on Zentyal 2.2

[onthego]

Dear All,

I was install OpenERP 6.03 on Zentyal 2.2 follow this guide by Alan Lord: http://www.theopensourcerer.com/2011/04/19/how-to-install-openerp-6-on-ubuntu-10-04-lts-server-part-1/.

And everything work well thanks Alan Lord! but LDAP apps connect to Zentyal from openerp not work.

Regards.
Sorry for my English!

Lam nguyen

[christian]

Did you get error message while trying to authenticate against LDAP?
Or do you try to do more than authentication with custom schema? (sorry, I didn't look yet at this doc)

[onthego]

Dear Christian,

I used App: users_ldap - Authenticate users with LDAP server from:
http://apps.openerp.com/addon/740?filter={%22order_by%22%3A+%22click_counter+desc%22%2C+%22text_search%22%3A+%22Ldap%22}&page=0
and configure as app owner recommend, but it doesn't work and I don't know where to see log.

Thanks for you repply.

lam nguyen

[christian]

I looked at this link but it doesn't provide any information regarding what you did in term of LDAP config 
For what concerns Zentyal LDAP log, this is shown in syslog but required to tweak log level in LDAP conf if you need more detail in log file.

[onthego]

I looked at this link but it doesn't provide any information regarding what you did in term of LDAP config 
For what concerns Zentyal LDAP log, this is shown in syslog but required to tweak log level in LDAP conf if you need more detail in log file.

This picture are my config:

[christian]

clearer.

1 - You don't need to set ldap binddn (and associated password) as this is used only for LDAP servers not authorizing anonymous search before binding
2 - ensure you do not select "create users" because entry creation rule may not fit Zentyal requirements
3 - you ldap filter is wrong. what you put here is a baseDN instead. it should be something like (objectclass=inetorgperson) and your ldap base should be what you put in ldap filter.

[onthego]

Dear Christian,

This is my log:

[2011-09-28 16:31:19,845][Lamnguyen] WARNING:orm.ldap:Cannot auth

Traceback (most recent call last):

  File "/opt/openerp/server/bin/addons/users_ldap/users_ldap.py", line 90, in login

    if l.simple_bind_s(res_company_ldap['ldap_binddn'], res_company_ldap['ldap_password']):

  File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 207, in simple_bind_s

    return self.result(msgid,all=1,timeout=self.timeout)

  File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 436, in result

    res_type,res_data,res_msgid = self.result2(msgid,all,timeout)

  File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 440, in result2

    res_type, res_data, res_msgid, srv_ctrls = self.result3(msgid,all,timeout)

  File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 446, in result3

    ldap_result = self._ldap_call(self._l.result3,msgid,all,timeout)

  File "/usr/lib/python2.6/dist-packages/ldap/ldapobject.py", line 96, in _ldap_call

    result = func(*args,**kwargs)

INVALID_DN_SYNTAX: {'info': 'invalid DN', 'desc': 'Invalid DN syntax'}

[2011-09-28 16:31:19,845][Lamnguyen] INFO:web-service:bad login or password from 'info' using database 'lamnguyen'

 
And my config because binddn and pass are require:

[christian]

I'm a bit confused. Have you edited previous post because config picture looks different now or did I read it wrong the first time?

Anyway, your DN (used ot bind and required  ) is wrong.
What is expected here is DN, not login. I thought you were using ebox DN first time I saw the picture. Am I wrong?

[onthego]

I'll reconfig again, and let you now.


thanks

[onthego]

When I reconfig, field LDAP bindn and LDAP pass are require!
Yes first time I had using ebox DN, but it is same log as above log.
Any suggestion?

Thanks.

Lam

[christian]

My suggestion is that at least you do not edit previous post just to make it "cleaner" because it makes tracking and understanding difficult, for us but also for other who may try to read it later 

This said, did you try config with right fields at the right place as suggested?
If yes, could you tell what you put where?

[onthego]

As you suggested, I config like first time when you said "cleaner":


I don't know it is right or not, just guest and config.
sorry for my English i'm Vietnamese .

Regards.

Lam

[christian]

No problem with language  I'm not English neither but French 

As you said, bindDN is mandatory, so you do have to fill it.

"LDAP binddn":  put here your Zentyal DN (you will find it, like password in Zentyal GUI, in user & group section, ldap settings)
"LDAP based" look ok
"LDAP filter": I'm pretty sure this doesn't work. If %s is for user's login, then you should put here "uid=%s"  I'm pretty sure you got this from Active Directory How To. In Microsoft world, "cn" has to be unique within a branch!!! There is no homonyms 

[onthego]

Dear Christian,

woaaaaaaaaaaaaaaaaaaaaaaaaaa!!!!!!!!!!!

Thanks you very much, finally it worked when I had config as you suggested.
For those who come after:

Module users_ldap on OpenERP work with users who were exiting created in Zentyal, and login to OpenERP  without create user again.

Thanks for Christian again!

This picture is what I had config:

[christian]

Glad to see it works  I had no doubt 
It's just a matter of using the right value at the right place.

Since what is done her is VERY dangerous because this application is thinking that account for user can be created in LDAP from the ERP itself which is a total misconception.
This is the reason why I strongly suggest that you deactivate this "create user" option until you understand how to customize the "model user" to be used.