No SSO login to Peertube?

[eivind]

What type of hardware are you using: Old laptop or computer
What YunoHost version are you running: 12.0.9.2
What app is this about: Peertube

Describe your issue

Hello good sirs and madams,

I have had a Peertube installation on my domain for a long time, and never got the SSO login thingy to work. I can login with root and users created within Peertube, but not other Yunohost SSO users. I have tried different ways of logging in:

• Log in to Peertube directly using username or username@domain.tld or username@localhost
• Log in to the SSO and then click the Peertube tile

I have the auth-ldap plugin installed with the following settings:
Auth weight: 100
URL: ldap://127.0.0.1
Insecure TLS: Checked
Path to LDAP server certificate chain of trust: empty
Bind DN: empty
Bind password: empty
Search base: ou=users,dc=yunohost,dc=org
Search filter: (|(mail={{username}})(uid={{username}}))
Mail property: mail
Mail property index: 0
Username property: uid
Group base: ou=groups,dc=yunohost,dc=org
Group filter: (member={{dn}})
Administrator group DN: cn=goupname,ou=groups,dc=yunohost,dc=org
Moderator group DN: empty
User group DN: empty
No group matched login: unchecked

No Yunohost users can log in.

Share relevant logs or error messages

Wrong username or password.

[wbk]

Hi eivind,

It used not no be available, I recall. I lost the server where I had Peertube running; by coincidence I just reinstalled Peertube and was surprised that now LDAP login is supposed to be available via a plugin:

Visiting that location though, the settings are not available via the web interface:

I have not yet checked th econfiguration files. Where did you enter your configuration?

[eivind]

@wbk

Where did you enter your configuration?

I entered this in the plugin settings for the auth-ldap plugin, that is exactly where your screenshot says there are no settings…

[wbk]

I found something that looks like LDAP-and-plugin-related in /home/yunohost.app/peertube/storage/plugins/node_modules/ldapauth-fork/ , but there is no actual configuration there.

Seeing that the readme there says something about ‘a fork for an urgent need to get newer version of LDAPjs’, I thought about looking if this fork is available via the web interface.

Searching for ldap in plugins, it did turn up ‘auth-ldap’, with an option to install it. Strange, it seemed already installed.

Anyway, now I do have settings (but at the moment not directly time to test them, to be continued )

[wbk]

Wohoo!

For me, LDAP-login now works!

The actions I took, were:

• Install Peertube
• Log in as root with the installer-supplied password
• Create a user, as I did not expect LDAP to work
• Browse the forum
• Check the LDAP plugin in the web interface, find no configuration
• Search for settings on the filesystem
• Find reference to a forked LDAP plugin
• Try to find the forked LDAP plugin via the webinterface
• Find plugin auth-ldap with an option to install it
• Enter the three values as supplied by the installer
• Save settings
• Open private tab in browser and log in, successfully, with a Yunohost user

Loging in via LDAP creates a copy of the Yunohost-user in the Users-section in Peertube. Users thus created, can be recognized by having “Auth plugin” set to peertube-plugin-auth-ldap when editing the user:

In the LDAP plugin I did not make any changes to fields, other than the three mentioned by the installer. By the way, this Yunohost-instance is still on Yunohost 11.

Have you tried uninstalling the plugin and re-installing it?

[KodeIn]

I had trouble to connect to peertube using ldap because root user was using the mail address of my user account.

Changing the root mail address fixed that.