openLDAP user edit gives error

Editing openLDAP users from Keycloak or LDAPadmin gives no exceptions, but privacyIDEA reports after trying to update a email address:

[2020-08-06 11:04:53,574][5054][140442109261248][INFO][privacyidea.lib.user:424] User info for user ‘betzmtest’@’’ about to be updated.
[2020-08-06 11:04:53,581][5054][140442109261248][ERROR][privacyidea.lib.resolvers.LDAPIdResolver:1193] Error accessing LDAP server: TypeError("‘bytes’ object cannot be interpreted as an integer",)
[2020-08-06 11:04:53,585][5054][140442109261248][INFO][privacyidea.lib.user:443] user User(login=‘betzmtest’, realm=’’, resolver=‘LDAP_XXXXXXXX’) failed to update.

What can i do to debug this further?


Creating a user works!

Mapping information:

Object classes of a new created user object : inetOrgPerson
DN of a new created user object : uid=,ou=people,dc=example,dc=com
Loginname Attribute : uid
Search Filter : (uid=*)(objectClass=inetOrgPerson)
Attribute mapping : { “username” : “uid”, “fullname” : “cn”, “phone” : “telephoneNumber”, “mobile” : “mobile”, “email” : “mail”, “surname” : “sn”, “givenname” : “givenName” }
Multivalue Attributes :
UID Type : entryUUID
No anonymous referral chasing : true
No retrieval of schema information : false

Great, that creating a user in LDAP works! I didn’t see this coming.

If we look at this line 1193 in the code, we see there is also a debug output.

You can turn on debug level in pi.cfg:




restart the privacyIDEA webserver to reread the configuration and then check the debug output. It will contain a traceback.