i tried both with domain and without doamin. But not able to login from NSUsers in odoo portal.
I tested on a fresh Nethserver VM with LDAP (not AD) and Odoo 11 and still can’t reproduce.
The “Login failed” error is normal at first login but the next log line should be about creating a new Odoo user:
INFO odoo odoo.addons.base.res.res_users: Login failed for db:odoo login:odoouser2 from 127.0.0.1
DEBUG odoo odoo.addons.auth_ldap.models.res_company_ldap: Creating new Odoo user "odoouser2" from LDAP
The LDAP user now should be logged in. At next login you should see following line:
INFO odoo odoo.addons.base.res.res_users: Login successful for db:odoo login:odoouser2 from 127.0.0.1
It seems your LDAP module is not working because the Odoo user is not created.
Just a blind shot, do you use special characters in the user passwords?
Please share your odoo log in text format with a tool like pastebin (don’t forget to hide passwords)
Hi @hector
AFAIK, you need to get a valid SSL for your AD (Easy enough if running on NethServer).
A lot of Apps, especially Java and PHP programmed stuff, which can use AD require a valid SSL.
Here’s the link about AD n NethServer:
Search for the sub-title " The next step will make sure that java and other more strict apps can connect to the AD and use it :"…
You will still need to change the LDAP into LDAPs in the query, and also change the LDAP Port to 636.
Dirección del servidor LDAP ldaps://192.168.86.4
Puerto de servidor LDAP 636
As to TLS: you may need to try both options, I think TLS should work.
Good Luck!
I have this working at home, not for Odoo, but a similiar “strict” App…
My 2 cents
Andy
2 Likes
It doesn’t work in odoo
In Zabbix and GLPI LDAP is working pretty well, but unable to do it in Odoo14 don’t know the reasons.
¿Any ideas how to debug LDAP querys? I have samba AD configured in the server.
With a valid AD ssl cert?
Odoo is not asking for valid cert, it does have an option for do not verificate the certificate.
Hi @hector,
Is LDAP port 636 opened?
# cat /etc/shorewall/rules | grep 636
Try to search a user (notice the ldaps://):
# ldapsearch -x -H ldaps://Ldap-Server-Dns-Name -D cn=ldapservice,dc=directory,dc=nh -w "BindPassword" -b dc=directory,dc=nh | grep "User-Name"
Obvious but sometime… - Is Odoo-14 running correctly?
# systemctl status odoo14 | grep -i Active
Maybe you can try to enable debug in Odoo by changing WARNING to DEBUG:
# cat /etc/odoo-server.conf | grep log_handler
log_handler = werkzeug:WARNING
;log_handler = :DEBUG
Michel-André