Hey I'm trying to setup the LDAP plugin for jel... LLDAP #troubleshooting

Hey I'm trying to setup the LDAP plugin for jel...

rypudding

08/15/2023, 9:27 PM

Hey I'm trying to setup the LDAP plugin for jellyfin. I have a LLDAP server running and I've created a media group which I've added some users. When I test and query for the users it's sucessful. But when I try to log into jellyfinI get invalid username. What am I doing wrong, why can't I sign in?

https://cdn.discordapp.com/attachments/992916353847668756/1141120900159254729/image.png▾

https://cdn.discordapp.com/attachments/992916353847668756/1141120900465446942/image.png▾

https://cdn.discordapp.com/attachments/992916353847668756/1141120901098778664/image.png▾

Needle

08/15/2023, 9:27 PM

Here's a brand new thread for you! Please keep the discussion for this problem in this thread.

nitnelave

08/15/2023, 9:32 PM

Sanity check: can you log in via the LLDAP web interface?

rypudding

08/15/2023, 9:36 PM

good shout, I tried it and that works

https://cdn.discordapp.com/attachments/1141120901321085048/1141123396944539658/image.png▾

rypudding

08/15/2023, 9:37 PM

https://cdn.discordapp.com/attachments/1141120901321085048/1141123604856176853/image.png▾

nitnelave

08/15/2023, 9:38 PM

Next step: what are the LLDAP verbose logs when you try to log in via jellyfin?

nitnelave

08/15/2023, 9:38 PM

Also, what's your jellyfin config?

rypudding

08/15/2023, 9:38 PM

i was trying to find the logs but there's so many pods, any ideas which one it would be ?

https://cdn.discordapp.com/attachments/1141120901321085048/1141123806136639638/image.png▾

rypudding

08/15/2023, 9:38 PM

hmm what format should I tell you my jellyfin config?

nitnelave

08/15/2023, 9:39 PM

LLDAP works as a single container, I don't know what all those pods are

rypudding

08/15/2023, 9:39 PM

I'm currently running it on truenas scale as a truecharts app which is probably why it has all those pods, I'll dig through them all then

nitnelave

08/15/2023, 9:39 PM

Maybe screenshot? The LDAP part

nitnelave

08/15/2023, 9:40 PM

Oh, you have several instances of LLDAP talking to the same DB. How did you set up the server secret/private key? With a file or a seed?

rypudding

08/15/2023, 9:41 PM

https://cdn.discordapp.com/attachments/1141120901321085048/1141124457847607416/image.png▾

https://cdn.discordapp.com/attachments/1141120901321085048/1141124458178936852/image.png▾

https://cdn.discordapp.com/attachments/1141120901321085048/1141124458581610637/image.png▾

https://cdn.discordapp.com/attachments/1141120901321085048/1141124458854236232/image.png▾

nitnelave

08/15/2023, 9:41 PM

And make sure that it's the same on every pod, either the file is mounted everywhere or the seed is the same (seed is easier in HA setups)

rypudding

08/15/2023, 9:42 PM

https://truecharts.org/charts/enterprise/authelia/Setup-Guide/ i followed these guides and they go step by step, so I just filled in all the info. I understand that this is not the basic lldap configuration so I don't expect you to read it. I entered the LDAP base DN, a user DN, email, password, and my domain/public URL

nitnelave

08/15/2023, 9:43 PM

(that's not the problem, but I think your admin settings are wrong: leave the base DN empty, and put the filter you currently have there in the line below, instead of the enabledService)

nitnelave

08/15/2023, 9:45 PM

Do you have a link to the chart?

nitnelave

08/15/2023, 9:45 PM

Not the doc but the implementation

nitnelave

08/15/2023, 9:48 PM

Found it

nitnelave

08/15/2023, 9:48 PM

So it's using a file with a shared mount

nitnelave

08/15/2023, 9:49 PM

Can you check in the lldap-main-1 and 2 if the hash of the /data/server_key file is the same?

rypudding

08/15/2023, 9:49 PM

https://github.com/truecharts/charts/tree/master/charts/stable/lldap

rypudding

08/15/2023, 9:49 PM

Yep will check in a moment sorry, baby duties call

nitnelave

08/15/2023, 9:49 PM

Sorry, /data/private_key

rypudding

08/15/2023, 10:14 PM

hi sorry I'm not able to find that file

rypudding

08/15/2023, 10:15 PM

I can see a server.key

https://cdn.discordapp.com/attachments/1141120901321085048/1141133157073170492/image.png▾

rypudding

08/15/2023, 10:19 PM

okay, I have no idea why it fixed it, but I rebooted my jellyfin server and now I can log in

rypudding

08/15/2023, 10:20 PM

I do have to click

Manual Login

though but I assume that's just a shortcoming of the plugin as it's not using the built-in jellyfin user system

https://cdn.discordapp.com/attachments/1141120901321085048/1141134236867371119/image.png▾

nitnelave

08/15/2023, 10:20 PM

It might be a question of which instance you're hitting

nitnelave

08/15/2023, 10:20 PM

If they have different server keys, you'll be able to log in 50 percent of the time, when you hit one rather than the other

nitnelave

08/15/2023, 10:21 PM

In the LLDAP containers, you should have a /data folder

nitnelave

08/15/2023, 10:23 PM

I'm guessing that cnpg is a database, presumably postgres

rypudding

08/15/2023, 10:23 PM

ahh I see, I'll have to dig properly through all the pods and their containers to find that /data folder, but it seems to be working the 10 tries i just did

rypudding

08/15/2023, 10:24 PM

yep CNPG is https://cloudnative-pg.io/

nitnelave

08/15/2023, 10:25 PM

Still, I'd really make sure that the private key is the same

rypudding

08/15/2023, 10:25 PM

okay, I'll do that first thing in the morning. I really appreciate your help tonight!

nitnelave

08/15/2023, 10:26 PM

I've got a baby in my arms, that leaves nothing to do and a free hand 😄

rypudding

08/15/2023, 10:27 PM

haha I totally understand

rypudding

08/15/2023, 10:27 PM

I very quickly just sh'd into one of the pods and found the private_key file but I can't seem to cat it out

https://cdn.discordapp.com/attachments/1141120901321085048/1141136093492805634/image.png▾

https://cdn.discordapp.com/attachments/1141120901321085048/1141136093794803942/image.png▾

nitnelave

08/15/2023, 10:27 PM

It's not really readable, try to compare the hash

nitnelave

08/15/2023, 10:27 PM

Maybe Sha 1

rypudding

08/15/2023, 10:28 PM

ah okay

nitnelave

08/15/2023, 10:28 PM

Or hex dump it

rypudding

08/15/2023, 10:28 PM

yep just sha1sum'd them and they both match

nitnelave

08/15/2023, 10:29 PM

Good!

rypudding

08/15/2023, 10:29 PM

Sweet, sounds like a great success!

nitnelave

08/15/2023, 10:29 PM

Then it should work!

nitnelave

08/15/2023, 10:29 PM

Cheers

rypudding

08/15/2023, 10:29 PM

thank you so so much

rypudding

08/15/2023, 10:29 PM

You're so knowledgeable

Previous Next