semaphore: [LDAP] Problems of incorrect login

Hi, I am trying to build this system for run my playbooks. I have a domain for test. I have a problem with “incorrect login or password error”. In web-console I can see a POST-request with code “401 Unauthorised”. I can’t understand what happening because error logs are empty. The version - 2.8.90 from release

To be clear I have a user in domain with name “arr.local”. All users are in “arr.local/DATA/USERS”, user to enter domain = temp_test My config for ldap is

 "ldap_binddn": "CN=temp_test, OU=DATA, OU=USERS, DC=arr, DC=local",
        "ldap_bindpassword": "temp_test_password",
        "ldap_server": "192.168.1.1:389",
        "ldap_searchdn": "OU=DATA,OU=USERS,DC=arr,DC=local",
        "ldap_searchfilter": "(objectClass=user)",
        "ldap_mappings": {
                "dn": "dn",
                "mail": "mail",
                "uid": "sAMAccountName",
                "cn": "{{ givenName }} {{ sn }}"
        },

Commnads like ldapsearch with help of this binddn=CN=temp_test, OU=DATA, OU=USERS, DC=arr, DC=local to the server is gettings back a username. So, domain works. Can someone help with solving this error?

About this issue

Original URL
State: closed
Created 10 months ago
Comments: 18

Most upvoted comments

Hi guys, I had the same problem with my LDAP config. Just found out after 1 hour that I had 2 lines in my config file :

"ldap_enable": true,
...
"ldap_enable": false,

Works now, with the following config with LDAP (Active Directory):

"ldap_binddn": "cn=myaccount,ou=Team,dc=mydc,dc=fr",
"ldap_bindpassword": mypassword",
"ldap_server": "myldap:389",
"ldap_searchdn": "ou=Team,dc=mydc,dc=fr",
"ldap_searchfilter": "(&(sAMAccountName:=%s))",
"ldap_mappings": {
    "dn": "distinguishedName",
    "mail": "userPrincipalName",
    "uid": "sAMAccountName",
    "cn": "cn"
}

gaeldb on Aug 24, 2023