PloneLDAP group problem

[interdaemon]

Some javascript/style in this post has been disabled (why?)

I was able to get user authentication working between plone and my active directory, however when I click the groups tab I get the following errors:

 

This is the error on the console (running zope in fg):

/var/dev/parts/plone/CMFPlone/patches/unicodehacks.py:39: DeprecationWarning:

*** *** Insertion of non-unicode non-ascii non-utf8 encoded text in TAL is deprecated and will be broken in Plone 3.5 !!!

 

'\xdbZrx\x7f)\xc8G\x87f.u\xd5\x1a\x82\xf8'...

 

  return self._expr % tuple([_unicode_replace(var(econtext)) for var in self._vars])

 

This is the error from the logs:

2008-02-01T17:15:27 ERROR Zope.SiteErrorLog http://192.168.0.52:8080/plonedev/prefs_groups_overview

Traceback (innermost last):

  Module ZPublisher.Publish, line 119, in publish

  Module ZPublisher.mapply, line 88, in mapply

  Module ZPublisher.Publish, line 42, in call_object

  Module Products.CMFFormController.FSControllerPageTemplate, line 90, in __call__

  Module Products.CMFFormController.BaseControllerPageTemplate, line 31, in _call

  Module Shared.DC.Scripts.Bindings, line 313, in __call__

  Module Shared.DC.Scripts.Bindings, line 350, in _bindAndExec

  Module Products.CMFCore.FSPageTemplate, line 216, in _exec

  Module Products.CMFCore.FSPageTemplate, line 155, in pt_render

  Module Products.PageTemplates.PageTemplate, line 89, in pt_render

  Module zope.pagetemplate.pagetemplate, line 117, in pt_render

  Module zope.tal.talinterpreter, line 271, in __call__

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 891, in do_useMacro

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 536, in do_optTag_tal

  Module zope.tal.talinterpreter, line 521, in do_optTag

  Module zope.tal.talinterpreter, line 516, in no_tag

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 891, in do_useMacro

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 536, in do_optTag_tal

  Module zope.tal.talinterpreter, line 521, in do_optTag

  Module zope.tal.talinterpreter, line 516, in no_tag

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 949, in do_defineSlot

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 536, in do_optTag_tal

  Module zope.tal.talinterpreter, line 521, in do_optTag

  Module zope.tal.talinterpreter, line 516, in no_tag

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 949, in do_defineSlot

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 855, in do_condition

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 855, in do_condition

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 536, in do_optTag_tal

  Module zope.tal.talinterpreter, line 521, in do_optTag

  Module zope.tal.talinterpreter, line 516, in no_tag

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 824, in do_loop_tal

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 536, in do_optTag_tal

  Module zope.tal.talinterpreter, line 521, in do_optTag

  Module zope.tal.talinterpreter, line 516, in no_tag

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 586, in do_setLocal_tal

  Module zope.tales.tales, line 696, in evaluate

   - URL: file:/var/dev/parts/plone/CMFPlone/skins/plone_prefs/prefs_groups_overview.cpt

   - Line 186, Column 28

   - Expression: <PythonExpr group.getRoles()>

   - Names:

      {'container': <PloneSite at /plonedev>,

       'context': <PloneSite at /plonedev>,

       'default': <object object at 0xb7c81528>,

       'here': <PloneSite at /plonedev>,

       'loop': {u'group_info': <Products.PageTemplates.Expressions.PathIterator object at 0xd723b4c>},

       'nothing': None,

       'options': {'args': (),

                   'state': <Products.CMFFormController.ControllerState.ControllerState object at 0xd65dc4c>},

       'repeat': <Products.PageTemplates.Expressions.SafeMapping object at 0xccdcd6c>,

       'request': <HTTPRequest, URL=http://192.168.0.52:8080/plonedev/prefs_groups_overview>,

       'root': <Application at >,

       'template': <FSControllerPageTemplate at /plonedev/prefs_groups_overview>,

       'traverse_subpath': [],

       'user': <PloneUser 'aduser'>}

  Module Products.PageTemplates.ZRPythonExpr, line 49, in __call__

   - __traceback_info__: group.getRoles()

  Module PythonExpr, line 1, in <expression>

AttributeError: 'NoneType' object has no attribute 'getRoles'

 

I am so close to having this working that it is driving me nuts, any thought as to how I can fix this group problem?  The ZMI is able to view all of my active directory groups just fine, it is only the plone group tab that is broken. 

 

TIA

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[tubaheda]

.
Anybody making progress on this front?

I have been looking at the error message, and have included the snippet of code from the "prefs_groups_overview.cpt" template file.

                            <td class="listingCheckbox"
                                tal:define="group_roles python:group.getRoles();"
                                tal:repeat="portal_role portal_roles">

                                <input type="checkbox"
                                       class="noborder"
                                       name="name"
                                       value="Manager"
                                       tal:attributes="name string:group_${group_info/groupid}:list;
                                                       value portal_role;
                                                       checked python:test(portal_role in group_roles, 'checked' ,'');
                                                       disabled python:group.canAssignRole(portal_role) and default or 'disabled'"
                                       />
                            </td>

This appears to say: show the portal roles, and if this group has any, check the boxes on the page. The group in question does not yet have any roles, but that shouldn't be a problem - all the checkboxes would come up unchecked.

AttributeError: 'NoneType' object has no attribute 'getRoles'
So basically, the "group.getRoles" is the issue. Perhaps it's not getting back an LDAP group it's expecting, and choose 'NoneType' as the default??? I am going to see if I can hunt down where this comes from, and attempt to make sense of it.

Dustin

interdaemon wrote:

I was able to get user authentication working between plone and my
active directory, however when I click the groups tab I get the
following errors:

 

This is the error on the console (running zope in fg):

/var/dev/parts/plone/CMFPlone/patches/unicodehacks.py:39:
DeprecationWarning:

*** *** Insertion of non-unicode non-ascii non-utf8 encoded text in TAL
is deprecated and will be broken in Plone 3.5 !!!

 

'\xdbZrx\x7f)\xc8G\x87f.u\xd5\x1a\x82\xf8'...

 

  return self._expr % tuple([_unicode_replace(var(econtext)) for var in
self._vars])

 

This is the error from the logs:

2008-02-01T17:15:27 ERROR Zope.SiteErrorLog
http://192.168.0.52:8080/plonedev/prefs_groups_overview

Traceback (innermost last):

  Module ZPublisher.Publish, line 119, in publish

  Module ZPublisher.mapply, line 88, in mapply

  Module ZPublisher.Publish, line 42, in call_object

  Module Products.CMFFormController.FSControllerPageTemplate, line 90,
in __call__

  Module Products.CMFFormController.BaseControllerPageTemplate, line 31,
in _call

  Module Shared.DC.Scripts.Bindings, line 313, in __call__

  Module Shared.DC.Scripts.Bindings, line 350, in _bindAndExec

  Module Products.CMFCore.FSPageTemplate, line 216, in _exec

  Module Products.CMFCore.FSPageTemplate, line 155, in pt_render

  Module Products.PageTemplates.PageTemplate, line 89, in pt_render

  Module zope.pagetemplate.pagetemplate, line 117, in pt_render

  Module zope.tal.talinterpreter, line 271, in __call__

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 891, in do_useMacro

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 536, in do_optTag_tal

  Module zope.tal.talinterpreter, line 521, in do_optTag

  Module zope.tal.talinterpreter, line 516, in no_tag

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 891, in do_useMacro

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 536, in do_optTag_tal

  Module zope.tal.talinterpreter, line 521, in do_optTag

  Module zope.tal.talinterpreter, line 516, in no_tag

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 949, in do_defineSlot

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 536, in do_optTag_tal

  Module zope.tal.talinterpreter, line 521, in do_optTag

  Module zope.tal.talinterpreter, line 516, in no_tag

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 949, in do_defineSlot

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 855, in do_condition

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 855, in do_condition

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 536, in do_optTag_tal

  Module zope.tal.talinterpreter, line 521, in do_optTag

  Module zope.tal.talinterpreter, line 516, in no_tag

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 824, in do_loop_tal

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 536, in do_optTag_tal

  Module zope.tal.talinterpreter, line 521, in do_optTag

  Module zope.tal.talinterpreter, line 516, in no_tag

  Module zope.tal.talinterpreter, line 346, in interpret

  Module zope.tal.talinterpreter, line 586, in do_setLocal_tal

  Module zope.tales.tales, line 696, in evaluate

   - URL:
file:/var/dev/parts/plone/CMFPlone/skins/plone_prefs/prefs_groups_overvi
ew.cpt

   - Line 186, Column 28

   - Expression: <PythonExpr group.getRoles()>

   - Names:

      {'container': <PloneSite at /plonedev>,

       'context': <PloneSite at /plonedev>,

       'default':

[Brian J-2]

Without digging too much into it, make sure you are not using
'ObjectGUID' as your group identifier in the properties tab for your
ADMultiPLugin object in zmi. ObjectGUID is a binary value, which might
cause that error. I am using simply 'groups'

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[tubaheda]

Some javascript/style in this post has been disabled (why?)

How did you know that was something that should be changed? I have been trying to construct a full set of instructions on getting this working in a repeatable manner, and I hadn’t noticed that on the things I had read so far.




On 4/15/08 1:21 PM, "Brian J" <b2jrock@...> wrote:

Without digging too much into it, make sure you are not using
'ObjectGUID' as your group identifier in the properties tab for your
ADMultiPLugin object in zmi. ObjectGUID is a binary value, which might
cause that error. I am using simply 'groups'

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[tubaheda]

Some javascript/style in this post has been disabled (why?)

Update on this:

>From this chat log:
http://weblion.psu.edu/chatlogs/%23weblion/2007/12/13.txt

About halfway the page, he says use:
2007-12-13T12:39:34  <EPrescott> in /Plone/acl_users/cseADPlugin     under properties.
2007-12-13T12:39:58  <EPrescott> groupid_attr is set to objectGUID by default.. it needs to be set to 'name'
2007-12-13T12:40:09  <EPrescott> http://www.dataflake.org/tracker/issue_00507

I made this change to my test setup, and for the first time I can use use both the user and group areas with AD connected users.

There are several sets of instructions out there on the issue, does anyone know which might be considered the gold master? I would like to post a comment there so other folks get this information as well.

Dustin



On 4/16/08 11:01 AM, "Tennill, Dustin" <Dustin.Tennill@...> wrote:

How did you know that was something that should be changed? I have been trying to construct a full set of instructions on getting this working in a repeatable manner, and I hadn’t noticed that on the things I had read so far.




On 4/15/08 1:21 PM, "Brian J" <b2jrock@...> wrote:

Without digging too much into it, make sure you are not using
'ObjectGUID' as your group identifier in the properties tab for your
ADMultiPLugin object in zmi. ObjectGUID is a binary value, which might
cause that error. I am using simply 'groups'

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[tubaheda]

Some javascript/style in this post has been disabled (why?)

Whoops ...

Spoke to soon.

I can now search for users, grant users roles as needed for the site (this worked for me before).
I can now search for groups, and I see both LDAP and Local groups at the same time. However, check a role that I want that group assigned (like “Manager” or “Contributor”) the change doesn’t appear to be saved when I click apply changes.

I attempted to add an LDAP group to a locally defined Plone group, and that also fails.

Dustin

On 4/16/08 11:14 AM, "Tennill, Dustin" <Dustin.Tennill@...> wrote:

Update on this:

>From this chat log:
http://weblion.psu.edu/chatlogs/%23weblion/2007/12/13.txt

About halfway the page, he says use:
2007-12-13T12:39:34  <EPrescott> in /Plone/acl_users/cseADPlugin     under properties.
2007-12-13T12:39:58  <EPrescott> groupid_attr is set to objectGUID by default.. it needs to be set to 'name'
2007-12-13T12:40:09  <EPrescott> http://www.dataflake.org/tracker/issue_00507

I made this change to my test setup, and for the first time I can use use both the user and group areas with AD connected users.

There are several sets of instructions out there on the issue, does anyone know which might be considered the gold master? I would like to post a comment there so other folks get this information as well.

Dustin



On 4/16/08 11:01 AM, "Tennill, Dustin" <Dustin.Tennill@...> wrote:

How did you know that was something that should be changed? I have been trying to construct a full set of instructions on getting this working in a repeatable manner, and I hadn’t noticed that on the things I had read so far.




On 4/15/08 1:21 PM, "Brian J" <b2jrock@...> wrote:

Without digging too much into it, make sure you are not using
'ObjectGUID' as your group identifier in the properties tab for your
ADMultiPLugin object in zmi. ObjectGUID is a binary value, which might
cause that error. I am using simply 'groups'

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[Brian J-2]

What version of Plone are you working with?

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users

[tubaheda]

Some javascript/style in this post has been disabled (why?)

Tried in 3.0.6 and 3.1beta ...



On 4/16/08 5:29 PM, "Brian J" <b2jrock@...> wrote:

What version of Plone are you working with?

-------------------------------------------------------------------------
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
_______________________________________________
Plone-Users mailing list
Plone-Users@...
https://lists.sourceforge.net/lists/listinfo/plone-users