nextcloud / nextcloud/server

[Bug]: LDAP `"Bind failed: 8: Strong(er) authentication required"` on v31->v32

Open
#58,363 9 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

0. Needs triage 32-feedback bug feature: ldap high
Dominant language
PHP
Stars
36.9k
Forks
5.2k
Avg merge
2d 3h
Merged PRs (30d)
713

Description

⚠️ Before submitting, please verify the following: ⚠️
Bug description

AlmaLinux release 10.1 (Heliotrope Lion)
Apache/2.4.63
PHP 8.4.18
11.4.10-MariaDB

Hello
I migrated from version 31.0.3 to 32.0.6 and I'm getting LDAP errors.
...

Steps to reproduce

sudo -u apache php -f /var/www/html/nextcloud/occ update:check
sudo -u apache php /var/www/html/nextcloud/occ maintenance:mode --on
sudo -u apache php /var/www/html/nextcloud/updater/updater.phar
sudo -u apache php /var/www/html/nextcloud/occ maintenance:mode --off
...

Expected behavior

To be able to connect via LDAP

Which files are affected by this bug

vv

Operating system

Linux

Which version of the operating system you are running.

AlmaLinux release 10.1 (Heliotrope Lion)

Package

Other

Nextcloud Server version

32.0.6

Nextcloud Desktop Client version

v

Is this bug present after an update or on a fresh install?

Updated from a minor version (ex. 3.16.1 to 3.16.2)

Are you using the Nextcloud Server Encryption module?

Encryption is Disabled

Are you using an external user-backend?
  • Default internal user-backend
  • LDAP/ Active Directory
  • SSO - SAML
  • Other
Nextcloud Server logs
[adminlocal@srv-nextcloud nextcloud]$ sudo tail -f /datas/nextcloud/nextcloud.log
{"reqId":"BA0c2YVXaNm5ZIRdqINf","level":2,"time":"2026-02-16T07:55:02+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"/var/www/html/nextcloud/cron.php","message":"Bind failed: 8: Strong(er) authentication required","userAgent":"--","version":"32.0.6.1","occ_command":["/var/www/html/nextcloud/cron.php"],"data":{"app":"user_ldap"}}
{"reqId":"BA0c2YVXaNm5ZIRdqINf","level":3,"time":"2026-02-16T07:55:02+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"/var/www/html/nextcloud/cron.php","message":"No LDAP Connection to server ldap://srv-ad2.ad.test.fr","userAgent":"--","version":"32.0.6.1","occ_command":["/var/www/html/nextcloud/cron.php"],"data":{"app":"user_ldap"}}
{"reqId":"BA0c2YVXaNm5ZIRdqINf","level":3,"time":"2026-02-16T07:55:02+00:00","remoteAddr":"","user":"--","app":"core","method":"","url":"--","scriptName":"/var/www/html/nextcloud/cron.php","message":"Error while running background job OCA\\User_LDAP\\Jobs\\CleanUp (id: 96302, arguments: null)","userAgent":"--","version":"32.0.6.1","occ_command":["/var/www/html/nextcloud/cron.php"],"exception":{"Exception":"OC\\ServerNotAvailableException","Message":"Connection to LDAP server could not be established","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/Access.php","line":189,"function":"getConnectionResource","class":"OCA\\User_LDAP\\Connection","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/User_LDAP.php","line":286,"function":"readAttribute","class":"OCA\\User_LDAP\\Access","type":"->"},{"function":"userExistsOnLDAP","class":"OCA\\User_LDAP\\User_LDAP","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/User_Proxy.php","line":67,"function":"call_user_func_array"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/Proxy.php","line":153,"function":"walkBackends","class":"OCA\\User_LDAP\\User_Proxy","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/User_Proxy.php","line":203,"function":"handleRequest","class":"OCA\\User_LDAP\\Proxy","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/Jobs/CleanUp.php","line":161,"function":"userExistsOnLDAP","class":"OCA\\User_LDAP\\User_Proxy","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/Jobs/CleanUp.php","line":152,"function":"checkUser","class":"OCA\\User_LDAP\\Jobs\\CleanUp","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/Jobs/CleanUp.php","line":112,"function":"checkUsers","class":"OCA\\User_LDAP\\Jobs\\CleanUp","type":"->"},{"file":"/var/www/html/nextcloud/lib/public/BackgroundJob/Job.php","line":61,"function":"run","class":"OCA\\User_LDAP\\Jobs\\CleanUp","type":"->"},{"file":"/var/www/html/nextcloud/lib/public/BackgroundJob/TimedJob.php","line":97,"function":"start","class":"OCP\\BackgroundJob\\Job","type":"->"},{"file":"/var/www/html/nextcloud/lib/public/BackgroundJob/TimedJob.php","line":84,"function":"start","class":"OCP\\BackgroundJob\\TimedJob","type":"->"},{"file":"/var/www/html/nextcloud/cron.php","line":175,"function":"execute","class":"OCP\\BackgroundJob\\TimedJob","type":"->"}],"File":"/var/www/html/nextcloud/apps/user_ldap/lib/Connection.php","Line":249,"message":"Error while running background job OCA\\User_LDAP\\Jobs\\CleanUp (id: 96302, arguments: null)","exception":{},"CustomMessage":"Error while running background job OCA\\User_LDAP\\Jobs\\CleanUp (id: 96302, arguments: null)"}}
{"reqId":"BA0c2YVXaNm5ZIRdqINf","level":2,"time":"2026-02-16T07:55:02+00:00","remoteAddr":"","user":"--","app":"PHP","method":"","url":"--","scriptName":"/var/www/html/nextcloud/cron.php","message":"ldap_search(): Search: Operations error at /var/www/html/nextcloud/apps/user_ldap/lib/LDAP.php#285","userAgent":"--","version":"32.0.6.1","occ_command":["/var/www/html/nextcloud/cron.php"],"data":{"app":"PHP"}}
{"reqId":"BA0c2YVXaNm5ZIRdqINf","level":3,"time":"2026-02-16T07:55:02+00:00","remoteAddr":"","user":"--","app":"support","method":"","url":"--","scriptName":"/var/www/html/nextcloud/cron.php","message":"LDAP Operations error","userAgent":"--","version":"32.0.6.1","occ_command":["/var/www/html/nextcloud/cron.php"],"exception":{"Exception":"Exception","Message":"LDAP Operations error","Code":1,"Trace":[{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/LDAP.php","line":405,"function":"processLDAPError","class":"OCA\\User_LDAP\\LDAP","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/LDAP.php","line":287,"function":"postFunctionCall","class":"OCA\\User_LDAP\\LDAP","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/LDAP.php","line":193,"function":"invokeLDAPMethod","class":"OCA\\User_LDAP\\LDAP","type":"->","args":["*** sensitive parameters replaced ***"]},{"function":"search","class":"OCA\\User_LDAP\\LDAP","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/Access.php","line":1073,"function":"call_user_func_array"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/Access.php","line":1076,"function":"{closure:OCA\\User_LDAP\\Access::invokeLDAPMethod():1072}","class":"OCA\\User_LDAP\\Access","type":"->","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/Access.php","line":1128,"function":"invokeLDAPMethod","class":"OCA\\User_LDAP\\Access","type":"->","args":["*** sensitive parameters replaced ***"]},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/Access.php","line":1228,"function":"executeSearch","class":"OCA\\User_LDAP\\Access","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/Access.php","line":998,"function":"count","class":"OCA\\User_LDAP\\Access","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/User_LDAP.php","line":553,"function":"countUsers","class":"OCA\\User_LDAP\\Access","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/User_Proxy.php","line":344,"function":"countUsers","class":"OCA\\User_LDAP\\User_LDAP","type":"->"},{"file":"/var/www/html/nextcloud/apps/support/lib/Service/SubscriptionService.php","line":82,"function":"countUsers","class":"OCA\\User_LDAP\\User_Proxy","type":"->"},{"file":"/var/www/html/nextcloud/apps/support/lib/Service/SubscriptionService.php","line":236,"function":"getUserCount","class":"OCA\\Support\\Service\\SubscriptionService","type":"->"},{"file":"/var/www/html/nextcloud/apps/support/lib/Service/SubscriptionService.php","line":302,"function":"getSubscriptionInfo","class":"OCA\\Support\\Service\\SubscriptionService","type":"->"},{"file":"/var/www/html/nextcloud/apps/support/lib/BackgroundJobs/CheckSubscription.php","line":33,"function":"checkSubscription","class":"OCA\\Support\\Service\\SubscriptionService","type":"->"},{"file":"/var/www/html/nextcloud/lib/public/BackgroundJob/Job.php","line":61,"function":"run","class":"OCA\\Support\\BackgroundJobs\\CheckSubscription","type":"->"},{"file":"/var/www/html/nextcloud/lib/public/BackgroundJob/TimedJob.php","line":97,"function":"start","class":"OCP\\BackgroundJob\\Job","type":"->"},{"file":"/var/www/html/nextcloud/lib/public/BackgroundJob/TimedJob.php","line":84,"function":"start","class":"OCP\\BackgroundJob\\TimedJob","type":"->"},{"file":"/var/www/html/nextcloud/cron.php","line":175,"function":"execute","class":"OCP\\BackgroundJob\\TimedJob","type":"->"}],"File":"/var/www/html/nextcloud/apps/user_ldap/lib/LDAP.php","Line":373,"message":"LDAP Operations error","exception":{},"CustomMessage":"LDAP Operations error"}}
{"reqId":"BA0c2YVXaNm5ZIRdqINf","level":2,"time":"2026-02-16T07:55:02+00:00","remoteAddr":"","user":"--","app":"support","method":"","url":"--","scriptName":"/var/www/html/nextcloud/cron.php","message":"Can not determine user count for OCA\\User_LDAP\\User_Proxy","userAgent":"--","version":"32.0.6.1","occ_command":["/var/www/html/nextcloud/cron.php"],"data":{"app":"support"}}
{"reqId":"NI59k6TYT9421rkqMDlR","level":2,"time":"2026-02-16T08:05:02+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"/var/www/html/nextcloud/cron.php","message":"Bind failed: 8: Strong(er) authentication required","userAgent":"--","version":"32.0.6.1","occ_command":["/var/www/html/nextcloud/cron.php"],"data":{"app":"user_ldap"}}
{"reqId":"NI59k6TYT9421rkqMDlR","level":3,"time":"2026-02-16T08:05:02+00:00","remoteAddr":"","user":"--","app":"user_ldap","method":"","url":"--","scriptName":"/var/www/html/nextcloud/cron.php","message":"No LDAP Connection to server ldap://srv-ad2.ad.test.fr","userAgent":"--","version":"32.0.6.1","occ_command":["/var/www/html/nextcloud/cron.php"],"data":{"app":"user_ldap"}}
{"reqId":"NI59k6TYT9421rkqMDlR","level":3,"time":"2026-02-16T08:05:02+00:00","remoteAddr":"","user":"--","app":"support","method":"","url":"--","scriptName":"/var/www/html/nextcloud/cron.php","message":"Connection to LDAP server could not be established","userAgent":"--","version":"32.0.6.1","occ_command":["/var/www/html/nextcloud/cron.php"],"exception":{"Exception":"OC\\ServerNotAvailableException","Message":"Connection to LDAP server could not be established","Code":0,"Trace":[{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/Access.php","line":1224,"function":"getConnectionResource","class":"OCA\\User_LDAP\\Connection","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/Access.php","line":998,"function":"count","class":"OCA\\User_LDAP\\Access","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/User_LDAP.php","line":553,"function":"countUsers","class":"OCA\\User_LDAP\\Access","type":"->"},{"file":"/var/www/html/nextcloud/apps/user_ldap/lib/User_Proxy.php","line":344,"function":"countUsers","class":"OCA\\User_LDAP\\User_LDAP","type":"->"},{"file":"/var/www/html/nextcloud/apps/support/lib/Service/SubscriptionService.php","line":82,"function":"countUsers","class":"OCA\\User_LDAP\\User_Proxy","type":"->"},{"file":"/var/www/html/nextcloud/apps/support/lib/Service/SubscriptionService.php","line":236,"function":"getUserCount","class":"OCA\\Support\\Service\\SubscriptionService","type":"->"},{"file":"/var/www/html/nextcloud/apps/support/lib/Service/SubscriptionService.php","line":302,"function":"getSubscriptionInfo","class":"OCA\\Support\\Service\\SubscriptionService","type":"->"},{"file":"/var/www/html/nextcloud/apps/support/lib/BackgroundJobs/CheckSubscription.php","line":33,"function":"checkSubscription","class":"OCA\\Support\\Service\\SubscriptionService","type":"->"},{"file":"/var/www/html/nextcloud/lib/public/BackgroundJob/Job.php","line":61,"function":"run","class":"OCA\\Support\\BackgroundJobs\\CheckSubscription","type":"->"},{"file":"/var/www/html/nextcloud/lib/public/BackgroundJob/TimedJob.php","line":97,"function":"start","class":"OCP\\BackgroundJob\\Job","type":"->"},{"file":"/var/www/html/nextcloud/lib/public/BackgroundJob/TimedJob.php","line":84,"function":"start","class":"OCP\\BackgroundJob\\TimedJob","type":"->"},{"file":"/var/www/html/nextcloud/cron.php","line":175,"function":"execute","class":"OCP\\BackgroundJob\\TimedJob","type":"->"}],"File":"/var/www/html/nextcloud/apps/user_ldap/lib/Connection.php","Line":249,"message":"Connection to LDAP server could not be established","exception":{},"CustomMessage":"Connection to LDAP server could not be established"}}
{"reqId":"NI59k6TYT9421rkqMDlR","level":2,"time":"2026-02-16T08:05:02+00:00","remoteAddr":"","user":"--","app":"support","method":"","url":"--","scriptName":"/var/www/html/nextcloud/cron.php","message":"Can not determine user count for OCA\\User_LDAP\\User_Proxy","userAgent":"--","version":"32.0.6.1","occ_command":["/var/www/html/nextcloud/cron.php"],"data":{"app":"support"}}
Additional info

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with apps/user_ldap/lib/Connection.php, LDAP.php, and Access.php, following the logged bind and search failures from the shown stack traces. Compare the LDAP behavior across the reported v31-to-v32 update and verify that cron can connect and complete LDAP searches without the authentication or operations errors.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
authentication, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.