https://github.com/lldap/lldap logo
KjetilK - So I am trying to use LLDAP as a auth...
# troubleshooting
k
So I am trying to use LLDAP as a authentication backend for Authelia, but I am getting this error:
Copy code
level=error msg="Failure running the user provider startup check: bind failed with error: LDAP Result Code 64 \"Naming Violation\": Not a subtree of the base tree" stack="github.com/authelia/authelia/v4/internal/commands/root.go:287
Everything is running in a docker swarm setup behind traefik. Both containers are on the same docker network. This is the LLDAP setup using Ansible, so everything inside a double curly brackets is refering to a variable. I have replaced my domain with example.org https://pastebin.com/8VqmrEaP And this is the authentication config in authelia https://pastebin.com/Lg1abMTw Has anyone seen this before, or is able to see what is wrong?
n
Hey! Have you checked the LLDAP logs? The error should be richer on the LLDAP side
k
The LLDAP container only has this as log. The last lines repeat somewhat. Is there any other logs, or debug options? https://pastebin.com/iULM7gd1
n
You can set verbose=true in the config
k
Okay, will try that.
Here is logs with verbose https://pastebin.com/nXNmnHRX
n
The Devil is in the details -- or in this case, in the redacted text: the error tells you that the bind DN, the admin username you configured in authelia, is not in the same DC as the one you configured in LLDAP.
Check that you don't have for instance "uid=admin, ou=people, dc=example, dc=com" in authelia, and "dc=example, dc=org" as base DN in LLDAP
(note the com vs org)
You can see your LLDAP configuration, as parsed, at the top of the verbose logs
k
Think I found my mistake.... Had used the variable LLDAP_BASE_DN instead of LLDAP_LDAP_BASE_DN Need to go over and fix those. Thanks for the help!
n
My pleasure! It's always useful to see the config as it's parsed, not just in the config file/env variables
26 Views