LDAP Cannot login as new LDAP user (just upgrade to 9.1.0)

Summary

When a new user tries to login they are redirected to "/users/auth/ldapmain/callback" but get 403 "You don't have authorization to view this page".

Steps to reproduce

Try to login with a LDAP user that has not logged into GitLab before.

What is the current bug behavior?

User cannot login.

What is the expected correct behavior?

User should be able to login.

Relevant logs and/or screenshots

NA?

Output of checks

(If you are reporting a bug on GitLab.com, write: This bug happens on GitLab.com)

Results of GitLab environment info

System information System: CentOS 6.9 Current User: git Using RVM: no Ruby Version: 2.3.3p222 Gem Version: 2.6.6 Bundler Version:1.13.7 Rake Version: 10.5.0 Redis Version: 3.2.5 Git Version: 2.11.1 Sidekiq Version:4.2.7

GitLab information Version: 9.1.0 Revision: c3f0f143 Directory: /opt/gitlab/embedded/service/gitlab-rails DB Adapter: postgresql URL: https://git.firstccu.org HTTP Clone URL: https://git.firstccu.org/some-group/some-project.git SSH Clone URL: git@git.firstccu.org:some-group/some-project.git Using LDAP: yes Using Omniauth: no

GitLab Shell Version: 5.0.2 Repository storage paths:

• default: /var/opt/gitlab/git-data/repositories Hooks: /opt/gitlab/embedded/service/gitlab-shell/hooks Git: /opt/gitlab/embedded/bin/git

Results of GitLab application Check

Checking GitLab Shell ...

GitLab Shell version >= 5.0.2 ? ... OK (5.0.2) Repo base directory exists? default... yes Repo storage directories are symlinks? default... no Repo paths owned by git:git? default... yes Repo paths access is drwxrws---? default... yes hooks directories in repos are links: ... 7/2 ... ok 6/3 ... ok 6/4 ... ok 7/5 ... ok 7/6 ... ok 7/7 ... ok 8/8 ... ok 5/18 ... ok 4/19 ... ok 6/20 ... ok 6/22 ... ok 8/24 ... ok 13/25 ... ok 8/26 ... ok 8/27 ... ok 8/28 ... ok 8/29 ... ok 13/30 ... ok 8/32 ... ok 12/33 ... ok 13/34 ... ok 8/35 ... ok 12/36 ... ok 14/39 ... ok 14/40 ... ok 14/41 ... ok 14/42 ... ok 14/43 ... ok 12/44 ... ok 12/45 ... ok 12/46 ... ok 12/47 ... ok 15/48 ... ok 12/49 ... ok 4/50 ... ok 14/51 ... ok 2/52 ... ok 8/53 ... ok 4/54 ... ok 2/55 ... ok 13/56 ... ok 16/57 ... ok 16/58 ... ok 17/59 ... repository is empty 17/60 ... ok 8/61 ... ok 4/62 ... ok 18/63 ... ok 12/64 ... ok 19/65 ... ok 2/67 ... ok Running /opt/gitlab/embedded/service/gitlab-shell/bin/check Check GitLab API access: OK Access to /var/opt/gitlab/.ssh/authorized_keys: OK Send ping to redis server: OK gitlab-shell self-check successful

Checking GitLab Shell ... Finished

Checking Sidekiq ...

Running? ... yes Number of Sidekiq processes ... 1

Checking Sidekiq ... Finished

Checking Reply by email ...

Reply by email is disabled in config/gitlab.yml

Checking Reply by email ... Finished

Checking LDAP ...

Server: ldapmain LDAP authentication... Success LDAP users with access to your GitLab server (only showing the first 100 results)

Checking LDAP ... Finished

Checking GitLab ...

Git configured with autocrlf=input? ... yes Database config exists? ... yes All migrations up? ... yes Database contains orphaned GroupMembers? ... no GitLab config exists? ... yes GitLab config outdated? ... no Log directory writable? ... yes Tmp directory writable? ... yes Uploads directory setup correctly? ... no Try fixing it: sudo chown -R git /var/opt/gitlab/gitlab-rails/uploads sudo find /var/opt/gitlab/gitlab-rails/uploads -type f -exec chmod 0644 {} ; sudo find /var/opt/gitlab/gitlab-rails/uploads -type d -not -path /var/opt/gitlab/gitlab-rails/uploads -exec chmod 0700 {} ; For more information see: doc/install/installation.md in section "GitLab" Please fix the error above and rerun the checks. Init script exists? ... skipped (omnibus-gitlab has no init script) Init script up-to-date? ... skipped (omnibus-gitlab has no init script) projects have namespace: ... 7/2 ... yes 6/3 ... yes 6/4 ... yes 7/5 ... yes 7/6 ... yes 7/7 ... yes 8/8 ... yes 5/18 ... yes 4/19 ... yes 6/20 ... yes 6/22 ... yes 8/24 ... yes 13/25 ... yes 8/26 ... yes 8/27 ... yes 8/28 ... yes 8/29 ... yes 13/30 ... yes 8/32 ... yes 12/33 ... yes 13/34 ... yes 8/35 ... yes 12/36 ... yes 14/39 ... yes 14/40 ... yes 14/41 ... yes 14/42 ... yes 14/43 ... yes 12/44 ... yes 12/45 ... yes 12/46 ... yes 12/47 ... yes 15/48 ... yes 12/49 ... yes 4/50 ... yes 14/51 ... yes 2/52 ... yes 8/53 ... yes 4/54 ... yes 2/55 ... yes 13/56 ... yes 16/57 ... yes 16/58 ... yes 17/59 ... yes 17/60 ... yes 8/61 ... yes 4/62 ... yes 18/63 ... yes 12/64 ... yes 19/65 ... yes 2/67 ... yes Redis version >= 2.8.0? ... yes Ruby version >= 2.1.0 ? ... yes (2.3.3) Your git bin path is "/opt/gitlab/embedded/bin/git" Git version >= 2.7.3 ? ... yes (2.11.1) Active users: 8

Checking GitLab ... Finished

Possible fixes

(If you can, link to the line of code that might be responsible for the problem)

closed

Looks like its already been identified. https://gitlab.com/gitlab-org/gitlab-ce/issues/31294