RocketChat / RocketChat/Rocket.Chat
Problem connecting to LDAP (FreeIPA)
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 46.1k
- Forks
- 13.9k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 130
Description
Description:
I am using freeipa service for ldap and the error is displayed below.
Steps to reproduce:
- Go to login screen
- Enter LDAP username and password
- Click [Login] button
Expected behavior:
User should be logged in
Actual behavior:
Error popup : "User not found or incorrect password"
Server Setup Information:
Version of Rocket.Chat Server: 3.7
Operating System: Linux
Deployment Method: docker
Number of Running Instances: 1
DB Replicaset Oplog:
Client Setup Information
Desktop App or Browser Version: 2.17.9
Operating System: macOS Catalina
My Config:
BaseDN: cn=users,cn=accounts,dc=company,dc=com
Username field: uid
Unique identifier field: entryUUID
Default domain: company.com
Sync user data: on
User data field map: {"cn":"name", "mail":"email"}
Sync LDAP groups: on
User group filter: (&(cn=#{groupName})(member=uid=#{username},ou=users,dc=company,dc=com))
LDAP group basedn: ou=groups,dc=company,dc=com
User Data Group Map:{"rocket-admin": "admin","tech-support": "support"}
Sync user avatar: Off (normally on)
Background sync: on
Background sync interval: every 5 minutes
Background Sync Import New Users: on
Background Sync Update Existing Users: on
User Search Filter: (&(objectclass=inetOrgPerson)(memberOf=,ou=groups,dc=company,dc=com))
scope: sub
search field: uid
Group ObjectClass:groupOfNames
Group ID Attribute: cn
Group Member Attribute:Member
Group Member Format:Member
Group name:rocket-admin
Relevant logs:
Error: server.js:204 LDAPHandler ➔ error Error: User not Found
Does anyone have a config for freeipa?
Please check this item.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the login flow with the provided FreeIPA settings and trace the LDAPHandler error reported at server.js:204. Compare the configured base DNs, filters, and group mappings with the server's LDAP lookup behavior; done means identifying the configuration or handling problem and confirming successful login, or documenting the supported FreeIPA configuration.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication, backend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100