No SSO login to Peertube?

Support apps
,
1

What type of hardware are you using: Old laptop or computer
What YunoHost version are you running: 12.0.9.2
What app is this about: Peertube

Describe your issue

Hello good sirs and madams,

I have had a Peertube installation on my domain for a long time, and never got the SSO login thingy to work. I can login with root and users created within Peertube, but not other Yunohost SSO users. I have tried different ways of logging in:

  • Log in to Peertube directly using username or username@domain.tld or username@localhost
  • Log in to the SSO and then click the Peertube tile

I have the auth-ldap plugin installed with the following settings:
Auth weight: 100
URL: ldap://127.0.0.1
Insecure TLS: Checked
Path to LDAP server certificate chain of trust: empty
Bind DN: empty
Bind password: empty
Search base: ou=users,dc=yunohost,dc=org
Search filter: (|(mail={{username}})(uid={{username}}))
Mail property: mail
Mail property index: 0
Username property: uid
Group base: ou=groups,dc=yunohost,dc=org
Group filter: (member={{dn}})
Administrator group DN: cn=goupname,ou=groups,dc=yunohost,dc=org
Moderator group DN: empty
User group DN: empty
No group matched login: unchecked

No Yunohost users can log in.

Share relevant logs or error messages

Wrong username or password.

2

Hi eivind,

It used not no be available, I recall. I lost the server where I had Peertube running; by coincidence I just reinstalled Peertube and was surprised that now LDAP login is supposed to be available via a plugin:

image
image830Ɨ702 120 KB

Visiting that location though, the settings are not available via the web interface:

image
image505Ɨ382 14.4 KB

I have not yet checked th econfiguration files. Where did you enter your configuration?

3

I entered this in the plugin settings for the auth-ldap plugin, that is exactly where your screenshot says there are no settingsā€¦

4

I found something that looks like LDAP-and-plugin-related in /home/yunohost.app/peertube/storage/plugins/node_modules/ldapauth-fork/ , but there is no actual configuration there.

Seeing that the readme there says something about ā€˜a fork for an urgent need to get newer version of LDAPjsā€™, I thought about looking if this fork is available via the web interface.

Searching for ldap in plugins, it did turn up ā€˜auth-ldapā€™, with an option to install it. Strange, it seemed already installed.

Anyway, now I do have settings (but at the moment not directly time to test them, to be continued :slight_smile: )

1 Like
5

Wohoo!

image
image782Ɨ548 42.8 KB

For me, LDAP-login now works!

The actions I took, were:

  • Install Peertube
  • Log in as root with the installer-supplied password
  • Create a user, as I did not expect LDAP to work
  • Browse the forum
  • Check the LDAP plugin in the web interface, find no configuration
  • Search for settings on the filesystem
  • Find reference to a forked LDAP plugin
  • Try to find the forked LDAP plugin via the webinterface
  • Find plugin auth-ldap with an option to install it
  • Enter the three values as supplied by the installer
  • Save settings
  • Open private tab in browser and log in, successfully, with a Yunohost user

Loging in via LDAP creates a copy of the Yunohost-user in the Users-section in Peertube. Users thus created, can be recognized by having ā€œAuth pluginā€ set to peertube-plugin-auth-ldap when editing the user:

image
image859Ɨ1198 56.1 KB

In the LDAP plugin I did not make any changes to fields, other than the three mentioned by the installer. By the way, this Yunohost-instance is still on Yunohost 11.

Have you tried uninstalling the plugin and re-installing it?

6

I had trouble to connect to peertube using ldap because root user was using the mail address of my user account. :sweat_smile:

Changing the root mail address fixed that.

1 Like