Pulp noadmin user LDAP login error

Problem:

('pulp [94b0827cc7c748439f421a2f3875a029]: ::ffff:10.89.0.100 - d.dushpanov [12/Mar/2025:12:34:36 +0000] "GET /pulp/api/v3/roles/ HTTP/1.0" 403 63 "https://pulp.lab.nicct.ru/ui/login/?next=%2Fstatus%2F" "Mozilla/5.0 (X11; Linux x86_64; rv:136.0) Gecko/20100101 Firefox/136.0"',)

Expected outcome:
"GET /pulp/api/v3/roles/ HTTP/1.0" 200 42214 "https://pulp.lab.nicct.ru/ui/login/?next=%2Flogin%2F"

Pulpcore version: 3.73.1

Operating system - distribution and version:
CentOS 9 Stream

Other relevant data:
LDAP part of settings.py:

AUTH_LDAP_SERVER_URI = "my.domain.com:389"
AUTH_LDAP_BIND_DN = "uid=gitlab,cn=users,cn=compat,dc=my,dc=domain,dc=com"
AUTH_LDAP_BIND_PASSWORD = "password"
AUTH_LDAP_SEARCH_BASE = "cn=accounts,dc=my,dc=domain,dc=com"
AUTH_LDAP_USER_SEARCH = LDAPSearch(
    "cn=accounts,dc=my,dc=domain,dc=com",
    ldap.SCOPE_SUBTREE,
    "(uid=%(user)s)",
)
AUTH_LDAP_START_TLS = False

AUTHENTICATION_BACKENDS = [
    "django_auth_ldap.backend.LDAPBackend",
    "django.contrib.auth.backends.ModelBackend",
]

AUTH_LDAP_GROUP_SEARCH = LDAPSearch(
    "cn=groups,dc=my,dc=domain,dc=com",
    ldap.SCOPE_SUBTREE,
    "(objectClass=posixGroup)",
)
AUTH_LDAP_GROUP_TYPE = PosixGroupType(name_attr='cn')
AUTH_LDAP_USER_ATTR_MAP = {
    "first_name": "givenName",
    "last_name": "sn",
    "email": "mail",
}
AUTH_LDAP_FIND_GROUP_PERMS = True
AUTH_LDAP_AUTHORIZE_ALL_USERS = True

Pulp containers:

CONTAINER ID  IMAGE                               COMMAND               CREATED       STATUS                     PORTS                             NAMES
0d90e3647f43  docker.io/library/postgres:13       postgres              7 days ago    Up 35 minutes              0.0.0.0:5432->5432/tcp            postgres
ac1ab7a19815  docker.io/library/redis:8.0-M03     redis-server          4 days ago    Up 35 minutes (healthy)    6379/tcp                          redis
20e75251bd55  docker.io/pulp/pulp-minimal:3.73.1  pulpcore-manager ...  4 days ago    Exited (0) 35 minutes ago                                    migration_service
6b232dd7e464  docker.io/pulp/pulp-minimal:3.73.1  set_init_password...  4 days ago    Exited (0) 35 minutes ago                                    set_init_password_service
93f619810c12  quay.io/pulp/pulp-web:3.73.1        /usr/bin/nginx.sh     4 days ago    Up 35 minutes              0.0.0.0:8080->8080/tcp, 80/tcp    pulp_web
2b7b8f7aef7b  docker.io/pulp/pulp-minimal:3.73.1  /usr/bin/pulp-api     4 days ago    Up 35 minutes (healthy)    0.0.0.0:24811->24817/tcp          pulp_api_1
3834abbe2e99  docker.io/pulp/pulp-minimal:3.73.1  /usr/bin/pulp-api     4 days ago    Up 35 minutes (healthy)    0.0.0.0:24812->24817/tcp          pulp_api_2
ecbd9e3bdd20  docker.io/pulp/pulp-minimal:3.73.1  /usr/bin/pulp-con...  4 days ago    Up 35 minutes (healthy)    0.0.0.0:24821->24816/tcp          pulp_content_1
64b6d754fdb7  docker.io/pulp/pulp-minimal:3.73.1  /usr/bin/pulp-con...  4 days ago    Up 35 minutes (healthy)    0.0.0.0:24822->24816/tcp          pulp_content_2
333f5f15699c  docker.io/pulp/pulp-minimal:3.73.1  /usr/bin/pulp-wor...  4 days ago    Up 35 minutes                                                pulp_worker_1
ff8f1f45ad53  docker.io/pulp/pulp-minimal:3.73.1  /usr/bin/pulp-wor...  4 days ago    Up 35 minutes                                                pulp_worker_2
5b4aeee93e20  hub.lab.nicct.ru/pulp_ui:0.1.22     npm run start         40 hours ago  Up 35 minutes              0.0.0.0:8002->8002/tcp, 8080/tcp  pulp_ui
1024645ea644  docker.io/pulp/pulp-minimal:3.73.1  sh -c "add_signin...  23 hours ago  Exited (0) 35 minutes ago                                    signing_key_service

It’s pulp_ui’s problem and I fixed it.
in file config/shared.config.js:

-    base.http.get(`roles/`, { auth: { username, password } }),
+    base.http.get(`groups/`, { auth: { username, password } }),

fix from developers in pull request, but tests are failed(

1 Like