[CLOUDSTACK-1069] Document workaround for: CS and LDAP user validation can't happen simultaneously

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Affects Version/s: 4.0.0
• Component/s: Doc
• Security Level: Public (Anyone can view this level - this is the default.)
• Assignee: Hugo Trippaers
• Reporter: Jessica Tomechak
• Created: 25/Jan/13 23:18
• Updated: 03/Mar/17 15:14
• Resolved: 03/Mar/17 15:14

Description

Add the following to the section on LDAP Authentication in the Admin Guide:

LDAP User Authentication

Limitation

CloudStack and LDAP user authentication can't happen simultaneously because the CloudStack user password is MD5 hashed and the LDAP server expects the password in plain text. To workaround:

1. Disable password hashing:

a. Open the sharedFunctions.js file located at /usr/share/cloud/management/webapps/client/
scripts.

b. Set the following variables to false:

var md5HashedLogin = false;

2. Open /etc/cloud/management/components.xml file.

3. Change the following:

<adapter name="MD5" class="com.cloud.server.auth.MD5UserAuthenticator"/>
to
<adapter name="MD5" class="com.cloud.server.auth.PlainTextUserAuthenticator"/>

4. Restart the Cloud Management service.

service cloud-management restart

Now, the users can successfully log in by using either the LDAP credentials or the CloudStack credentials.