After the latest upgrade in the omnibus edition, any user attempting to login via LDAP now gets this:
Could not authenticate you from Ldapmain because “Ssl connect returned=1 errno=0 state=sslv2/v3 read server hello a: sslv3 alert handshake failure”.
I have tried any number of various LDAP configs, and nothing seems to resolve it.
Possibly some progress, but now a login just spins awhile before giving a timed out error. From production.log:
Completed 404 Not Found in 1ms (Views: 0.5ms | ActiveRecord: 0.0ms)
Started POST “/users/auth/ldapmain/callback” for 140.90.111.154 at 2017-08-04 10:02:49 -0400
Started GET “/-/metrics” for 127.0.0.1 at 2017-08-04 10:02:54 -0400
Processing by MetricsController#index as HTML
Filter chain halted as :validate_prometheus_metrics rendered or redirected
Completed 404 Not Found in 2ms (Views: 0.7ms | ActiveRecord: 0.0ms)
Started GET “/-/metrics” for 127.0.0.1 at 2017-08-04 10:03:09 -0400
Processing by MetricsController#index as HTML
Filter chain halted as :validate_prometheus_metrics rendered or redirected
Completed 404 Not Found in 1ms (Views: 0.5ms | ActiveRecord: 0.0ms)
Started GET “/-/metrics” for 127.0.0.1 at 2017-08-04 10:03:24 -0400
Processing by MetricsController#index as HTML
Filter chain halted as :validate_prometheus_metrics rendered or redirected
Completed 404 Not Found in 1ms (Views: 0.5ms | ActiveRecord: 0.0ms)
Started GET “/” for 140.90.111.154 at 2017-08-04 10:03:36 -0400
Processing by RootController#index as HTML
Read fragment views/routes/76-20170726183903038628000/projects/45-20170523201209818002000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.4ms)
Write fragment views/routes/76-20170726183903038628000/projects/45-20170523201209818002000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.4ms)
Read fragment views/routes/63-20170726164126398686000/projects/32-20170803153745897372000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Write fragment views/routes/63-20170726164126398686000/projects/32-20170803153745897372000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Read fragment views/routes/70-20170726171019308698000/projects/39-20170523194600433448000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.4ms)
Write fragment views/routes/70-20170726171019308698000/projects/39-20170523194600433448000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Read fragment views/routes/32-20170726171019590062000/projects/17-20170404123534524093000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Write fragment views/routes/32-20170726171019590062000/projects/17-20170404123534524093000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.6ms)
Read fragment views/routes/38-20170726183902912934000/projects/22-20170404143532396267000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Write fragment views/routes/38-20170726183902912934000/projects/22-20170404143532396267000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Read fragment views/routes/69-20170726183902879993000/projects/38-20170523194400254612000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.7ms)
Write fragment views/routes/69-20170726183902879993000/projects/38-20170523194400254612000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Read fragment views/routes/72-20170726183902974997000/projects/41-20170523195105722443000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Write fragment views/routes/72-20170726183902974997000/projects/41-20170523195105722443000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.4ms)
Read fragment views/routes/79-20170726190808187982000/projects/48-20170523201902254056000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (2.2ms)
Write fragment views/routes/79-20170726190808187982000/projects/48-20170523201902254056000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.4ms)
Read fragment views/routes/36-20170726171019495377000/projects/20-20170404143307117546000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.2ms)
Write fragment views/routes/36-20170726171019495377000/projects/20-20170404143307117546000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.4ms)
Read fragment views/routes/68-20170726183902944282000/projects/37-20170523194159943840000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Write fragment views/routes/68-20170726183902944282000/projects/37-20170523194159943840000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Read fragment views/routes/75-20170726183903006778000/projects/44-20170523200959749596000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.2ms)
Write fragment views/routes/75-20170726183903006778000/projects/44-20170523200959749596000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.4ms)
Read fragment views/routes/73-20170726171019247220000/projects/42-20170523195257639958000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Write fragment views/routes/73-20170726171019247220000/projects/42-20170523195257639958000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.4ms)
Read fragment views/routes/65-20170726160854739110000/projects/34-20170523193600314590000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.7ms)
Write fragment views/routes/65-20170726160854739110000/projects/34-20170523193600314590000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Read fragment views/routes/78-20170726160923561796000/projects/47-20170523201642264905000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (1.3ms)
Write fragment views/routes/78-20170726160923561796000/projects/47-20170523201642264905000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.8ms)
Read fragment views/routes/77-20170726190808081823000/projects/46-20170523201437634896000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Write fragment views/routes/77-20170726190808081823000/projects/46-20170523201437634896000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.4ms)
Read fragment views/routes/81-20170726171019401579000/projects/50-20170524141928649183000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Write fragment views/routes/81-20170726171019401579000/projects/50-20170524141928649183000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.4ms)
Read fragment views/routes/64-20170726171019526565000/projects/33-20170523193402599276000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.2ms)
Write fragment views/routes/64-20170726171019526565000/projects/33-20170523193402599276000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.4ms)
Read fragment views/routes/71-20170726164354835545000/projects/40-20170523194907842878000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Write fragment views/routes/71-20170726164354835545000/projects/40-20170523194907842878000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Read fragment views/routes/48-20170726171019198976000/projects/26-20170426123730054371000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (1.3ms)
Write fragment views/routes/48-20170726171019198976000/projects/26-20170426123730054371000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Read fragment views/routes/39-20170726171019277243000/projects/23-20170404143626965894000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.3ms)
Write fragment views/routes/39-20170726171019277243000/projects/23-20170404143626965894000/root/index/application_settings/5-20170426173757152744000/v2.5/beea439f01200938bd8996a8fdc20c92 (0.4ms)
Completed 200 OK in 1031ms (Views: 877.6ms | ActiveRecord: 80.7ms)
Started GET “/-/metrics” for 127.0.0.1 at 2017-08-04 10:03:39 -0400
Processing by MetricsController#index as HTML
Filter chain halted as :validate_prometheus_metrics rendered or redirected
Completed 404 Not Found in 1ms (Views: 0.6ms | ActiveRecord: 0.0ms)
Started GET “/-/metrics” for 127.0.0.1 at 2017-08-04 10:03:54 -0400
Processing by MetricsController#index as HTML
Filter chain halted as :validate_prometheus_metrics rendered or redirected
Completed 404 Not Found in 82ms (Views: 80.7ms | ActiveRecord: 0.0ms)
From /var/log/gitlab/nginx/gitlab_error.log:
2017/08/04 10:10:17 [error] 28798#0: *30 upstream prematurely closed connection while reading response header from upstream, client: redacted, server: redacted, request: “POST /users/auth/ldapmain/callback HTTP/2.0”, upstream: “http://unix:/var/opt/gitlab/gitlab-workhorse/socket:/users/auth/ldapmain/callback”, host: “redacted”, referrer: “https://redacted/users/sign_in”
From /var/log/gitlab/unicorn/unicorn_stderr.log:
E, [2017-08-04T10:12:01.337679 #31290] ERROR – : worker=1 PID:31547 timeout (61s > 60s), killing
E, [2017-08-04T10:12:01.344671 #31290] ERROR – : reaped #<Process::Status: pid 31547 SIGKILL (signal 9)> worker=1
Pretty much the same thing happend at our installation. This was an upgrade from 9.3.5 ===> 9.4.3. We were not able to resolve the issue and reverted back to version 9.3.5