Successful connection to LDAP Server but Test LDAP Login fails with error message

[ksgrg]

Hi Community,

I have got the following settings on LDAP/AD Settings done. But the LDAP test login comes up with an error Login Failed. [email protected] did not successfully bind to LDAP. The test on the synchronization however works without any issues and I was able to synchronize full users but nobody could login. Can anyone please guide me what areas to look for. Thank you

Version v6.3.2 - build 12875 (master)
Server version: Apache/2.4.52 (Ubuntu)
PHP 8.1.2-1ubuntu2.14

LDAP Integration: Checked LDAP enabled
Active Directory: Checked This is an Active Directory server
Active Directory domain: domain.local
LDAP Client TLS Key: Blank
LDAP Client-Side TLS Certificate: Blank
LDAP Server: ldap://dc02.domain.local
Use TLS: Unchecked
LDAP SSL certificate validation: Checked Allow invalid SSL Certificate
LDAP Bind Username: CN=account,OU=Users,DC=domain,DC=local
LDAP Bind Password: password for the account user
Base BInd DN: OU=site,DC=domain,DC=local
LDAP Filter: &(cn=*)
Username Filed: userprincipalname
Last Name: sn
LDAP First Name: givenname
LDAP Authentication query: uid=
Default Permission Group: No Default Group
LDAP Active Flag: active
LDAP Employee Number: employeeid
LDAP Department: department
LDAP Manager: manager
LDAP Email: mail
LDAP Telephone Number: homephone
LDAP Job Title: title
LDAP Country: Blank
LDAP Location: Blank

[ksgrg]

I got it working by changing the following below, make sure you have everything put in lowercase to work.
If you want the accounts synchronized and enabled for login make sure you set the LDAP Active Flag to useraccountcontrol

LDAP Integration: Checked LDAP enabled
Active Directory: Checked This is an Active Directory server
Active Directory domain: domain.local
LDAP Client TLS Key: Blank
LDAP Client-Side TLS Certificate: Blank
LDAP Server: ldap://dc02.domain.local
Use TLS: Unchecked
LDAP SSL certificate validation: Checked Allow invalid SSL Certificate
LDAP Bind Username: CN=account,OU=Users,DC=domain,DC=local
LDAP Bind Password: password for the account user
Base BInd DN: OU=site,DC=domain,DC=local
LDAP Filter: &(cn=*)
Username Filed: userprincipalname
Last Name: sn
LDAP First Name: givenname
LDAP Authentication query: uid= --- Changed this to userprincipalname= if you want short name use samaccountname
Default Permission Group: No Default Group
LDAP Active Flag: active -- Changed this to useraccountcontrol to enable login on all the imported users.
LDAP Employee Number: employeeid
LDAP Department: department
LDAP Manager: manager
LDAP Email: mail
LDAP Telephone Number: homephone
LDAP Job Title: title
LDAP Country: Blank
LDAP Location: Blank

[ksgrg]

The issue has been resolved.

[ksgrg]

If you are hosted on Ubuntu Server
make sure the nameserver search has your local domainname on it

network:
ethernets:
ens160:
dhcp4: false
addresses: [192.168.0.2/21]
routes:
- to: 0.0.0.0/0
via:192.168.0.1
nameservers:
search: [domain.local]
addresses: [192.168.0.10, 192.168.1.10]
version: 2