LDAP errors after upgrading to Netbox v3.7.6

[AndriusV4]

Hi, maybe somebody has run into an issue where LDAP stops working after Netbox upgrade to v3.7.6 (From version 3.4.3, so could have appeared in between this versions)? This gets logged after every authentication attempt:

    response = get_response(request)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django/core/handlers/base.py", line 197, in _get_response
    response = wrapped_callback(request, *callback_args, **callback_kwargs)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django/views/generic/base.py", line 104, in view
    return self.dispatch(request, *args, **kwargs)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django/utils/decorators.py", line 46, in _wrapper
    return bound_method(*args, **kwargs)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django/views/decorators/debug.py", line 92, in sensitive_post_parameters_wrapper
    return view(request, *args, **kwargs)
  File "/opt/netbox/netbox/account/views.py", line 44, in dispatch
    return super().dispatch(*args, **kwargs)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django/views/generic/base.py", line 143, in dispatch
    return handler(request, *args, **kwargs)
  File "/opt/netbox/netbox/account/views.py", line 90, in post
    if form.is_valid():
  File "/opt/netbox/netbox/utilities/forms/mixins.py", line 55, in is_valid
    is_valid = super().is_valid()
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django/forms/forms.py", line 201, in is_valid
    return self.is_bound and not self.errors
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django/forms/forms.py", line 196, in errors
    self.full_clean()
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django/forms/forms.py", line 434, in full_clean
    self._clean_form()
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django/forms/forms.py", line 455, in _clean_form
    cleaned_data = self.clean()
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django/contrib/auth/forms.py", line 250, in clean
    self.user_cache = authenticate(
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django/views/decorators/debug.py", line 42, in sensitive_variables_wrapper
    return func(*func_args, **func_kwargs)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django/contrib/auth/__init__.py", line 77, in authenticate
    user = backend.authenticate(request, **credentials)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django_auth_ldap/backend.py", line 149, in authenticate
    user = self.authenticate_ldap_user(ldap_user, password)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django_auth_ldap/backend.py", line 207, in authenticate_ldap_user
    return ldap_user.authenticate(password)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django_auth_ldap/backend.py", line 349, in authenticate
    self._authenticate_user_dn(password)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django_auth_ldap/backend.py", line 479, in _authenticate_user_dn
    if self.dn is None:
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django_auth_ldap/backend.py", line 444, in dn
    self._load_user_dn()
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django_auth_ldap/backend.py", line 517, in _load_user_dn
    self._user_dn = self._search_for_user_dn()
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django_auth_ldap/backend.py", line 552, in _search_for_user_dn
    return cache.get_or_set(
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django/core/cache/backends/base.py", line 228, in get_or_set
    default = default()
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django_auth_ldap/backend.py", line 540, in _search_for_user
    results = search.execute(self.connection, {"user": self._username})
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django_auth_ldap/backend.py", line 466, in connection
    self._bind()
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django_auth_ldap/backend.py", line 830, in _bind
    self._bind_as(self.settings.BIND_DN, self.settings.BIND_PASSWORD, sticky=True)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django_auth_ldap/backend.py", line 842, in _bind_as
    self._get_connection().simple_bind_s(bind_dn, bind_password)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/django_auth_ldap/backend.py", line 858, in _get_connection
    self._connection.set_option(opt, value)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/ldap/ldapobject.py", line 698, in set_option
    return self._ldap_call(self._l.set_option,option,invalue)
  File "/opt/netbox-3.7.6/venv/lib/python3.9/site-packages/ldap/ldapobject.py", line 128, in _ldap_call
    result = func(*args,**kwargs)
ValueError: option error

No changes were made to LDAP config, rolling back django-auth-ldap or python-ldap to older versions doesn't seem to help either.

[candlerb]

It looks like "option error" can come from OpenLDAP client libraries under python-ldap: https://stackoverflow.com/questions/43328378/python-ldap-macos-valueerror-option-error

But other than that I'm afraid I can't help. I suppose you could add some debugging around the set_option() call to see which option is being set (and rejected).