8000 LDAP MS ActiveDirectory with wekan_start.bat on WindowsServer · Issue #3292 · wekan/wekan · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

LDAP MS ActiveDirectory with wekan_start.bat on WindowsServer #3292

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
holehner opened this issue Oct 3, 2020 · 14 comments
Closed

LDAP MS ActiveDirectory with wekan_start.bat on WindowsServer #3292

holehner opened this issue Oct 3, 2020 · 14 comments

Comments

@holehner
Copy link
holehner commented Oct 3, 2020

I have a microsoft server 2012 with wekan_start.cmd with ldap configuration for ms active directory. the user and the ldap paths are correct. However, I keep getting the error: InvalidCredentialsError: 80090308: LdapErr: DSID-0C090400, comment: AcceptSecurityContext error, data 52e, v1db1
my config looks like this:
set ldap-enable='true'
set default-authentication-method='ldap'
set ldap-port='389'
set ldap-host='192.168.199.5'
set ldap-basedn='CN=Users,DC=test,DC=local'
set ldap-login-fallback='false'
set ldap-reconnect='true'
set ldap-timeout='10000'
set ldap-idle-timeout='10000'
set ldap-connect-timeout='10000'
set ldap-authentication='true'
set ldap-authentication-userdn='CN=wekan,CN=Users,DC=test,DC=local'
set ldap-authentication-password='meintest28r'
set ldap-log-enabled='true'
set ldap-background-sync='true'
set ldap-background-sync-interval='60000'
set ldap-background-sync-keep-existant-users-updated='true'
set ldap-background-sync-import-new-users='true'
set ldap-encryption='false'
set ldap-user-search-field='sAMAccountName'
set ldap-username-field='sAMAccountName'
set ldap-fullname-field='cn'
set internal_log_level=debug

i have no idea, please help me. thank you
@xet7
Copy link
Member
xet7 commented Oct 3, 2020

ldap-background-sync-interval='60000'

Syntax is every 1 hour or similar.
https://github.com/wekan/wekan/wiki/LDAP

@xet7 xet7 closed this as completed Oct 3, 2020
@holehner
Copy link
Author
holehner commented Oct 3, 2020

Thanks for the quick help. the one with the interval was a test. i have just corrected it, but the same error picture. I have already found the wiki page, but I still get no further. can it be that there are problems with windows-> windows and ldap?

8000
@xet7 xet7 reopened this Oct 3, 2020
@holehner
Copy link
Author
holehner commented Oct 3, 2020

Even if I intentionally configure incorrect user data for authentication, the same error message appears

@xet7
Copy link
Member
xet7 commented Oct 3, 2020

@holehner

I don't know. There are many ways to configure login at https://github.com/wekan/wekan/wiki at right menu.

@holehner
Copy link
Author
holehner commented Oct 3, 2020

ok, is there a way to extend the login so that I can get more ldap debug information?

@xet7
Copy link
Member
xet7 commented Oct 3, 2020 
sudo snap set wekan debug='true'

sudo snap logs wekan.wekan

And also look at syslog:

sudo tail -f /var/log/syslog

@holehner
Copy link
Author
holehner commented Oct 3, 2020

grafik
ok, i already have the debug active and get the display on the cli. I'm not surprised, however, that I always get the same error message. I meant whether there might be more ldap info. Many Thanks

@xet7
Copy link
Member
xet7 commented Oct 3, 2020

You can also search these issues for previous LDAP answers.

UCS also uses LDAP with Wekan Docker version, some replies could be related:
https://github.com/wekan/univention/issues

@holehner
Copy link
Author
holehner commented Oct 3, 2020

ok, i check your answer. one more question, if the debug shows: "[INFO] LDAP is connected" should a correct connection be available?

@xet7
Copy link
Member
xet7 commented Oct 3, 2020

@holehner

Maybe. I don't use LDAP on my servers. I did some changes related to LDAP, but LDAP code is originally from other Wekan contributors. Some other LDAP users have written that LDAP login works in some configurations.

@holehner
Copy link
Author
holehner commented Oct 3, 2020

thank you very much, then i will keep trying my luck. a lovely evening

@holehner
Copy link
Author
holehner commented Oct 4, 2020

wekan_ldap_win2012.txt

Ldap works! I have an MS Windows 2012 server with wekan_start.cmd and the accompanying configuration. I am using MS Active Directory. The main problem was that a filter had to be set. It doesn't work without a filter! A few reboots to be on the safe side and it works!

@holehner holehner closed this as completed Oct 4, 2020
@veloprofz
Copy link

how to turn on the option so that ldap authentication appears in the admin panel?

@xet7
Copy link
62C0 Member
xet7 commented Feb 21, 2023

@veloprofz

https://github.com/wekan/wekan/wiki/LDAP

Snap

sudo snap set wekan ldap-enable='true'

Docker

https://github.com/wekan/wekan/blob/master/docker-compose.yml#L488

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@xet7 @holehner @veloprofz
0