[SAC] [OSGeo] #2645: Trac login not working

#2645: Trac login not working
---------------------------+---------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: blocker | Milestone: Sysadmin Contract 2021-II
Component: Systems Admin | Keywords:
---------------------------+---------------------------------------
As mentioned in
https://lists.osgeo.org/pipermail/sac/2021-September/013583.html

LetsEncrypt intermediar SSL trust cert expried today which caused trac
login to break. Also causing a failure in id.osgeo.org (so creating
accounts is broken).

To fix the issue, I put in a temporary fix. Which I will detail in the
comment

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2645&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2645: Trac login not working
---------------------------+----------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: new
Priority: blocker | Milestone: Sysadmin Contract 2021-II
Component: Systems Admin | Resolution:
Keywords: |
---------------------------+----------------------------------------

Comment (by robe):

Both trac login and sshing into trac were broken.

As a stop gap fix, I turned off ssl cert verification. I will turn back
on after I have upgraded trac (which I will do next week).

To stop gap fixes

# to fix trac login

in /etc/apache2/mods-enabled/ldap.conf

I added a line right after the other LDAP settings

{{{
LDAPVerifyServerCert Off
}}}

To fix the SSH login issue

changed file:
/etc/nslcd.conf

changed line from demand to never

{{{
tls_reqcert never
}}}

To fix ldapsearch, I changed the file /etc/ldap.conf

from:
{{{
TLS_REQCERT demand

}}}

to:
{{{
TLS_REQCERT never

}}}

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2645#comment:1&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.

#2645: Trac login not working
---------------------------+----------------------------------------
Reporter: robe | Owner: sac@…
     Type: task | Status: closed
Priority: blocker | Milestone: Sysadmin Contract 2021-II
Component: Systems Admin | Resolution: fixed
Keywords: |
---------------------------+----------------------------------------
Changes (by robe):

* status: new => closed
* resolution: => fixed

--
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2645#comment:2&gt;
OSGeo <https://osgeo.org/&gt;
OSGeo committee and general foundation issue tracker.