Opened 3 years ago

Closed 3 years ago

#2645 closed task (fixed)

Trac login not working

Reported by: robe Owned by: sac@…
Priority: blocker Milestone: Sysadmin Contract 2021-II
Component: SysAdmin Keywords:
Cc:

Description

As mentioned in https://lists.osgeo.org/pipermail/sac/2021-September/013583.html

LetsEncrypt intermediar SSL trust cert expried today which caused trac login to break. Also causing a failure in id.osgeo.org (so creating accounts is broken).

To fix the issue, I put in a temporary fix. Which I will detail in the comment

Change History (2)

comment:1 by robe, 3 years ago

Both trac login and sshing into trac were broken.

As a stop gap fix, I turned off ssl cert verification. I will turn back on after I have upgraded trac (which I will do next week).

To stop gap fixes

# to fix trac login

in /etc/apache2/mods-enabled/ldap.conf

I added a line right after the other LDAP settings

LDAPVerifyServerCert Off

To fix the SSH login issue

changed file: /etc/nslcd.conf

changed line from demand to never

tls_reqcert never

To fix ldapsearch, I changed the file /etc/ldap.conf

from:

TLS_REQCERT demand

to:

TLS_REQCERT never

comment:2 by robe, 3 years ago

Resolution: fixed
Status: newclosed
Note: See TracTickets for help on using tickets.