mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-02-10 03:12:20 +03:00
LDAP authentication not possible #5004
Closed
opened 2026-02-05 09:32:48 +03:00 by OVERLORD
·
15 comments
No Branch/Tag Specified
development
l10n_development
release
llm_only
vectors
v25-11
docker_env
drawio_rendering
user_permissions
ldap_host_failover
svg_image
prosemirror
captcha_example
fix/video-export
v25.12.3
v25.12.2
v25.12.1
v25.12
v25.11.6
v25.11.5
v25.11.4
v24.11.4
v25.11.3
v25.11.2
v25.11.1
v25.11
v25.07.3
v25.07.2
v25.07.1
v25.07
v25.05.2
v25.05.1
v25.05
v25.02.5
v25.02.4
v25.02.3
v25.02.2
v25.02.1
v25.02
v24.12.1
v24.12
v24.10.3
v24.10.2
v24.10.1
v24.10
v24.05.4
v24.05.3
v24.05.2
v24.05.1
v24.05
v24.02.3
v24.02.2
v24.02.1
v24.02
v23.12.3
v23.12.2
v23.12.1
v23.12
v23.10.4
v23.10.3
v23.10.2
v23.10.1
v23.10
v23.08.3
v23.08.2
v23.08.1
v23.08
v23.06.2
v23.06.1
v23.06
v23.05.2
v23.05.1
v23.05
v23.02.3
v23.02.2
v23.02.1
v23.02
v23.01.1
v23.01
v22.11.1
v22.11
v22.10.2
v22.10.1
v22.10
v22.09.1
v22.09
v22.07.3
v22.07.2
v22.07.1
v22.07
v22.06.2
v22.06.1
v22.06
v22.04.2
v22.04.1
v22.04
v22.03.1
v22.03
v22.02.3
v22.02.2
v22.02.1
v22.02
v21.12.5
v21.12.4
v21.12.3
v21.12.2
v21.12.1
v21.12
v21.11.3
v21.11.2
v21.11.1
v21.11
v21.10.3
v21.10.2
v21.10.1
v21.10
v21.08.6
v21.08.5
v21.08.4
v21.08.3
v21.08.2
v21.08.1
v21.08
v21.05.4
v21.05.3
v21.05.2
v21.05.1
v21.05
v21.04.6
v21.04.5
v21.04.4
v21.04.3
v21.04.2
v21.04.1
v21.04
v0.31.8
v0.31.7
v0.31.6
v0.31.5
v0.31.4
v0.31.3
v0.31.2
v0.31.1
v0.31.0
v0.30.7
v0.30.6
v0.30.5
v0.30.4
v0.30.3
v0.30.2
v0.30.1
v0.30.0
v0.29.3
v0.29.2
v0.29.1
v0.29.0
v0.28.3
v0.28.2
v0.28.1
v0.28.0
v0.27.5
v0.27.4
v0.27.3
v0.27.2
v0.27.1
v0.27
v0.26.4
v0.26.3
v0.26.2
v0.26.1
v0.26.0
v0.25.5
v0.25.4
v0.25.3
v0.25.2
v0.25.1
v0.25.0
v0.24.3
v0.24.2
v0.24.1
v0.24.0
v0.23.2
v0.23.1
v0.23.0
v0.22.0
v0.21.0
v0.20.3
v0.20.2
v0.20.1
v0.20.0
v0.19.0
v0.18.5
v0.18.4
v0.18.3
v0.18.2
v0.18.1
v0.18.0
v0.17.4
v0.17.3
v0.17.2
v0.17.1
v0.17.0
v0.16.3
v0.16.2
v0.16.1
v0.16.0
v0.15.3
v0.15.2
v0.15.1
v0.15.0
v0.14.3
v0.14.2
v0.14.1
v0.14.0
v0.13.1
v0.13.0
v0.12.2
v0.12.1
v0.12.0
v0.11.2
v0.11.1
v0.11.0
v0.10.0
v0.9.3
v0.9.2
v0.9.1
v0.9.0
v0.8.2
v0.8.1
v0.8.0
v0.7.6
v0.7.5
v0.7.4
v0.7.3
0.7.2
v.0.7.1
v0.7.0
v0.6.3
v0.6.2
v0.6.1
v0.6.0
v0.5.0
Labels
Clear labels
🎨 Design
📖 Docs Update
🐛 Bug
🐛 Bug
:cat2:🐈 Possible duplicate
💿 Database
☕ Open to discussion
💻 Front-End
🐕 Support
🚪 Authentication
🌍 Translations
🔌 API Task
🏭 Back-End
⛲ Upstream
🔨 Feature Request
🛠️ Enhancement
🛠️ Enhancement
🛠️ Enhancement
❤️ Happy feedback
🔒 Security
🔍 Pending Validation
💆 UX
📝 WYSIWYG Editor
🌔 Out of scope
🔩 API Request
:octocat: Admin/Meta
🖌️ View Customization
❓ Question
🚀 Priority
🛡️ Blocked
🚚 Export System
♿ A11y
🔧 Maintenance
> Markdown Editor
pull-request
Mirrored from GitHub Pull Request
No Label
🐕 Support
Milestone
No items
No Milestone
Projects
Clear projects
No project
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: starred/BookStack#5004
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @DaarKyns on GitHub (Oct 15, 2024).
Attempted Debugging
Searched GitHub Issues
Describe the Scenario
Hello,
I'm having problems with LDAP authentication
I'm using BookStack 24.02.3 on a Debian 12 with the docker image linuxserver.io (https://hub.docker.com/r/linuxserver/bookstack) installed with docker CLI, my database is separate.
When authenticating with login/password, I get this message “This information does not correspond to any account” but nothing is added to the LOG files to identify the problem.
Can you help me ?
Thanks in advance.
Exact BookStack Version
BookStack 24.02.3
Log Content
No response
Hosting Environment
Debian 12
docker image : lscr.io/linuxserver/bookstack:24.02.3
PHP : 8.3.6
MariaDB : 10.11.6
@ssddanbrown commented on GitHub (Oct 15, 2024):
Hi @DaarKyns,
Can you post a screenshot of that?
Just want to confirm where exactly that's appearing as that text is not an error message I remember existing.
@DaarKyns commented on GitHub (Oct 16, 2024):
Hello @ssddanbrown,
Thanks for the quick reply. Here's the screenshot

I tested it by installing
ldapsearchon my Debian and it seems to work.Thanks for your help
@ssddanbrown commented on GitHub (Oct 16, 2024):
This typically means that the connection to LDAP is working, but the issue is likely one of two things:
LDAP_USER_FILTER, with the given username, within theLDAP_BASE_DNusing theLDAP_DNas an access account, is not returning the expected (or any) user.You could try temporarily setting
LDAP_DUMP_USER_DETAILS=trueand see if that stops and dumps user details on login attempt. If not, then it's probably not matching any users.Also, how exactly are you defining these options for the container?
@DaarKyns commented on GitHub (Oct 16, 2024):
Enabling
LDAP_DUMP_USER_DETAILS=truein the .env file doesn't change anything, still this message and no activity in LOG files or anywhere else.Maybe I'm not looking in the right place ?
volume/docker/bookstack/log/bookstack/laravel.log ?
volume/docker/bookstack/backups ?
I created the container using the docker CLI available at (https://hub.docker.com/r/linuxserver/bookstack)
@ssddanbrown commented on GitHub (Oct 16, 2024):
Generally that means that the search for the user in LDAP is not returning any results, possibly indicating a bad user filter value, bad base DN, or wrong (not matching) username value provided in the form.
.envfile are you changing, what's its exact path?sAMAccountNamevalue for a user in the LDAP system?I wouldn't expect any errors to be logged to log files for this.
@DaarKyns commented on GitHub (Oct 16, 2024):
The path is
/data/bookstack_config/www/.envThe name in the “User name” field is the same as the sAMAccountName value in Active Directory
@ssddanbrown commented on GitHub (Oct 16, 2024):
Okay.
Can you try running the following exec against the running container to confirm the output:
@DaarKyns commented on GitHub (Oct 17, 2024):
Hello,
Here is the output of the command
"(sAMAccountName=$${user})" // vendor/psy/psysh/src/ExecutionClosure.php(40) : eval()'d code:1@ssddanbrown commented on GitHub (Oct 17, 2024):
@DaarKyns Okay, so that appears to be different to what you originally posted above. Can you check the option in your
.envfile, does the option there include any$symbols in the value?@DaarKyns commented on GitHub (Oct 17, 2024):
After verification, the .env file is indeed 'LDAP_USER_FILTER=“(&(sAMAccountName={user}))”'
This '(sAMAccountName=$${user})' comes from the creation of the container in docker CLI
I run the command :
docker exec -it bookstack php /app/www/artisan tinker --execute="dd(config('services.ldap.user_filter'))"The output is :
"(&(sAMAccountName={user}))" // vendor/psy/psysh/src/ExecutionClosure.php(40) : eval()'d code:1I'm not an expert on containerization
I'm looking to see if there are multiple .env files.
Only one of the .env files has LDAP configuration (/data/bookstack_config/www/.env).
Sorry I'm not much help.
@ssddanbrown commented on GitHub (Oct 17, 2024):
@DaarKyns Okay, remove all
LDAPoptions from the container/command-line itself, and just keep to configuring LDAP options via the/data/bookstack_config/.envfile, so we only have to worry about one level of configuration. Currently these command line/docker env options will be overriding anything in the.envfile causing confusion.Then test things out again.
@DaarKyns commented on GitHub (Oct 17, 2024):
I stopped the container
docker stop bookstackI delete the container
docker rm bookstackI created a new container without LDAP options
I deleted the other .env files, leaving only the /data file.
I run the command
docker exec -it bookstack php /app/www/artisan tinker --execute="dd(config('services.ldap.user_filter'))"The result
"(&(sAMAccountName={user}))" // vendor/psy/psysh/src/ExecutionClosure.php(40) : eval()'d code:1The authentication problem is still present.
@ssddanbrown commented on GitHub (Oct 17, 2024):
Try again with the
LDAP_DUMP_USER_DETAILS=trueoption set (in the.env), now that the user filter is correct.If that does not stop and dump user details on login attempt, then the filter & provided username combined is not correct and is not matching users in your environment.
Otherwise, if it does stop and dump user details, then it's likely a password issue.
@DaarKyns commented on GitHub (Oct 18, 2024):
Problem solved, in fact a $ was missing from the LDAP filter
Thank you for your quick help
@ssddanbrown commented on GitHub (Oct 19, 2024):
Ah, yeah, you're on an older version, I had missed that.
Good to hear it's working now though, will therefore close this off.