https://github.com/lldap/lldap logo
hive - Hi folks, I'm an LDAP NOOB and I could u...
# troubleshooting
h
Hi folks, I'm an LDAP NOOB and I could use some help please. I'm trying to get TubeArchivist ( https://www.tubearchivist.com ) to work with LLDAP. Here is the TA doc on LDAP: https://docs.tubearchivist.com/configuration/ldap/ The Symptom: User authentications fail (there is no logging on TubeArchivist as to why)--I'm probably doing something stupid...maybe the User Filter? Here's the relevant part of my TubeArchivist config:
Copy code
- TA_LDAP=true
      - TA_LDAP_SERVER_URI=ldap://lldap:3890
      - TA_LDAP_DISABLE_CERT_CHECK=true
      - TA_LDAP_USER_FILTER=(&(uid=${user}))
      - TA_LDAP_USER_BASE=ou=people,dc=example,dc=com
      - TA_LDAP_BIND_DN=uid=admin,ou=people,dc=example,dc=com
      - TA_LDAP_BIND_PASSWORD=password
And here is the verbose logging on LLDAP, I get this with the failed login attempt: https://cdn.discordapp.com/attachments/992916353847668756/1252981712246280254/message.txt?ex=667431a7&is=6672e027&hm=37b77f7330059b15e0e0ae5ed17876873504a84f61c71b04c294140c4f211f64&
a
message has been deleted
n
I don't know where the query comes from, but that's the problem: it's looking for a uid that is both equal to "username" and to "":
filter: And([Equality("uid", "username"), And([Equality("uid", "")])])
Looking at the docs, I think you shouldn't specify TA_LDAP_USER_FILTER
Instead, you need TA_LDAP_USER_ATTR_MAP_USERNAME=uid
(which is already the default, so maybe you don't even need it)
h
Thanks for the help. I was able to get it to work with these settings--this might be another example worth including in your collection of config examples
Copy code
- TA_LDAP=true
      - TA_LDAP_SERVER_URI=ldap://lldap:3890
      - TA_LDAP_DISABLE_CERT_CHECK=true
      - TA_LDAP_USER_FILTER=(uid=*)
      - TA_LDAP_USER_BASE=ou=people,dc=example,dc=com
      - TA_LDAP_BIND_DN=uid=admin,ou=people,dc=example,dc=com
      - TA_LDAP_BIND_PASSWORD=password
n
Nice! Do you think you can do a PR to add the example config?