DEX failed authentication message not what I expected

Get Help
1

I have Dex + LDAP installed on my OOD 3.0 test instance. It seems to work fine when I enter valid credentials, but if I type an invalid password, I get an error page with the text below in a nicely formatted box. Is that what I should get or should it be something nicer like a “login failed” message?

Internal Server Error

Login error: ldap: failed to bind as dn “uid=xxxx,ou=yyyy,ou=zzzz,o=xyz”: LDAP Result Code 11 “Admin Limit Exceeded”: Operation timed out

2

I believe Dex would be displaying you the message as it would handle the failed authentication and not OnDemand itself. So I’m not sure that’s an ondemand page you are referring to. Could you send a screenshot?

3

Here’s a screenshot of the page.

error_msg

Below is the “dex:” section of my ood_portal.yml

dex:
  connectors:
    - type: ldap
      id: ldap
      name: LDAP
      config:
        host: ldap.yyy.xyz:636
        #insecureSkipVerify: false
        insecureSkipVerify: true
        #insecureNoSSL: true
        bindDN: cn=abc,o=xyz
        bindPW: XXXXXXX
        rootCA: /etc/pki/dex/certs/ldap_cacert.crt
        userSearch:
          baseDN: ou=zzz,o=xyz
          filter: "(objectClass=posixAccount)"
          username: uid
          idAttr: uid
          emailAttr: mail
          nameAttr: gecos
          preferredUsernameAttr: uid
        groupSearch:
          baseDN: ou=Groups,o=xyz
          filter: "(objectClass=posixGroup)"
          userMatchers:
            - userAttr: DN
              groupAttr: member
          nameAttr: cn
  frontend:
    issuer: "TCNJ HPC OnDemand"
    theme: "tcnjhpc"
    extra:
#      navLogo: "/path/to/custom/nav-logo.png"
#      loginLogo: "/path/to/custom/logo.png"
      loginTitle: "Log in with your TCNJ username and password"
      loginButtonText: "Log in with your TCNJ account"
      usernamePlaceholder: "TCNJ Username"
      passwordPlaceholder: "TCNJ Password"
#      loginAlertMessage: "Login services will be down during center maintenance between 8:00 AM EST and 10:00 AM EST"
#      loginAlertType: "warning"
4

This topic was automatically closed 180 days after the last reply. New replies are no longer allowed.