Skip to content

LDAP connection to Windows AD user search issues #5844

@ernie49-jz

Description

@ernie49-jz

Hello everyone,
I'm new here. My company is looking for a PM tool. But a light one.
We want to test "Wekan". I installed Wekan on a Debian 12 with snap.
We want to use LDAP for user login. Our AD is a Windows 2019 AD server.
Here what I have configured for now:
Key Value
ldap-authentication true
ldap-authentication-password xxx
ldap-authentication-userdn CN=Wekan LDAP Reader,OU=Wekan,OU=xxx,DC=xxx,DC=xxx,DC=com
ldap-background-sync true
ldap-background-sync-import-new-users true
ldap-background-sync-interval every 1 hours
ldap-background-sync-keep-existant-users-updated true
ldap-basedn OU=xxx,DC=xxx,DC=xxx,DC=com
ldap-connect-timeout 10000
ldap-enable true
ldap-encryption false
ldap-fullname-field cn
ldap-group-filter-enable true
ldap-group-filter-group-id-attribute cn
ldap-group-filter-object-class groupOfNames
ldap-host xxx.xxx.xxx.com
ldap-idle-timeout 10000
ldap-log-enabled true
ldap-login-fallback false
ldap-port 389
ldap-reconnect true
ldap-sync-admin-groups administrators
ldap-sync-admin-status true
ldap-timeout 10000
ldap-unique-identifier-field sAMAccountName
ldap-user-search-field sAMAccountName
ldap-username-field sAMAccountName
mail-from WeKan wekan@xxx.com
mail-url smtp://xxx.xxx.com:25/?ignoreTLS=true&secure=false
port 80
root-url http://xxx.xxx.xxx.com

Here the error I receive if I try to login with "LDAP":

2025-07-23T08:03:03+02:00 wekan.wekan[26090]: [INFO] Init LDAP login "test"
2025-07-23T08:03:03+02:00 wekan.wekan[26090]: {"line":"92","file":"ldap.js","message":"Init setup","time":{"$date":1753250583670},"level":"info"}
2025-07-23T08:03:03+02:00 wekan.wekan[26090]: {"line":"130","file":"ldap.js","message":"Connecting ldap://xxx.xxx.xxx.com:389","time":{"$date":1753250583671},"level":"info"}
2025-07-23T08:03:03+02:00 wekan.wekan[26090]: {"line":"182","file":"ldap.js","message":"LDAP connected","time":{"$date":1753250583784},"level":"info"}
2025-07-23T08:03:03+02:00 wekan.wekan[26090]: {"line":"259","file":"ldap.js","message":"Binding UserDN CN=Wekan LDAP Reader,OU=Wekan,OU=xxx,DC=xxx,DC=xxx,DC=com","time":{"$date":1753250583785},"level":"info"}
2025-07-23T08:03:03+02:00 wekan.wekan[26090]: {"line":"282","file":"ldap.js","message":"Searching user test","time":{"$date":1753250583794},"level":"info"}
2025-07-23T08:03:03+02:00 wekan.wekan[26090]: {"line":"569","file":"ldap.js","message":"Search result count 1","time":{"$date":1753250583804},"level":"info"}
2025-07-23T08:03:03+02:00 wekan.wekan[26090]: [ERROR] Error: missing paren
2025-07-23T08:03:13+02:00 wekan.wekan[26090]: {"line":"146","file":"ldap.js","message":"Idle","time":{"$date":1753250593805},"level":"info"}
2025-07-23T08:03:13+02:00 wekan.wekan[26090]: {"line":"595","file":"ldap.js","message":"Disconecting","time":{"$date":1753250593807},"level":"info"}
2025-07-23T08:03:13+02:00 wekan.wekan[26090]: {"line":"151","file":"ldap.js","message":"Closed","time":{"$date":1753250593812},"level":"info"}

So the connection to the LDAP is OK but the search is not matching.

But if I am doing the command ldapsearch, then I don't have a problem. Here the command:
ldapsearch -x -H ldap://xxx.xxx.xxx.com -D "Wekan LDAP Reader" -w "xxx" -b "OU=xxx,DC=xxx,DC=xxx,DC=com" "(sAMAccountName=test)".

Can someone help me to find out my error?

Many thanks in advance.

Best regards,

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions