mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-02-11 11:19:38 +03:00
Unknown column 'username' in 'where clause' - when switching from builtin to LDAP auth #5530
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @pnwAlex on GitHub (Dec 3, 2025).
Attempted Debugging
Searched GitHub Issues
Describe the Scenario
Hi, I have set up Bookstack on a Ubuntu Linux 20.04LTS server, fully updated, using built-in Bookstack authentication. I read through the LDAP configuration page as well as Dan's LDAP setup video. I created a few Bookstack users, and included their LDAP usernames in the "External Authentication ID" field in their profile.
I then modified the .env file (included below) to enable LDAP authentication, and restarted Apache. Here's my .env (anonymized passwords etc):
APP_DEBUG=true
APP_ENV=production
APP_KEY=base64:xxxxxxxxxxxxxxxxxxx=
APP_URL=https://bookstack.samdom.tld
APP_TIMEZONE=America/Chicago
AUTH_METHOD=ldap
AUTH_AUTO_INITIATE=true
LDAP_SERVER=adsrv01.samdom.tld:389
LDAP_BASE_DN="DC=samdom,DC=tld"
LDAP_DN="bookstack@samdom.tld"
LDAP_PASS="password"
LDAP_USER_FILTER=(&(sAMAccountName={user}))
LDAP_VERSION=3
LDAP_ID_ATTRIBUTE=BIN;objectGUID
LDAP_EMAIL_ATTRIBUTE=mail
LDAP_DISPLAY_NAME_ATTRIBUTE=displayName
LDAP_THUMBNAIL_ATTRIBUTE=jpegphoto
LDAP_START_TLS=true
LDAP_TLS_INSECURE=true
LDAP_USER_TO_GROUPS=true
LDAP_GROUP_ATTRIBUTE="memberOf"
LDAP_REMOVE_FROM_GROUPS=false
DB_HOST=localhost
DB_DATABASE=bookstack
DB_USERNAME=bookstack
DB_PASSWORD="password"
MAIL_DRIVER=smtp
MAIL_FROM_NAME="My BookStack"
MAIL_FROM=noreply@samtom.tld
MAIL_HOST=mail.samdom.tld
MAIL_PORT=587
MAIL_USERNAME=null
MAIL_PASSWORD=null
MAIL_ENCRYPTION=tls
EXPORT_PAGE_SIZE=letter
LOG_FAILED_LOGIN_MESSAGE="Login failed for %u"
When I try to login with the username set in "External Auth ID" for one of the users I created in Bookstack, with the corresponding LDAP user password, I get the following error in the laravel.log file (included in log content section)
Extra commands showing artisan migrate status, and clearing caches...
root@bookstack:/var/www/bookstack# php artisan migrate
APPLICATION IN PRODUCTION. ┌ Are you sure you want to run this command? ──────────────────┐
│ Yes │
└──────────────────────────────────────────────────────────────┘
INFO Nothing to migrate.
root@bookstack:/var/www/bookstack# php artisan cache:clear
INFO Application cache cleared successfully.
root@bookstack:/var/www/bookstack# php artisan config:clear
INFO Configuration cache cleared successfully.
root@bookstack:/var/www/bookstack# php artisan view:clear
INFO Compiled views cleared successfully.
root@bookstack:/var/www/bookstack# systemctl restart apache2
Exact BookStack Version
v25.11.4
Log Content
Hosting Environment
root@bookstack:/var/www/bookstack# lsb_release -a
Distributor ID: Ubuntu
Description: Ubuntu 20.04.6 LTS
Release: 20.04
Codename: focal
root@bookstack:/var/www/bookstack# apachectl -v
Server version: Apache/2.4.41 (Ubuntu)
Server built: 2025-08-04T11:21:10
root@bookstack:/var/www/bookstack# php --version
PHP 8.4.7 (cli) (built: May 9 2025 06:53:45) (NTS)
Copyright (c) The PHP Group
Zend Engine v4.4.7, Copyright (c) Zend Technologies
with Zend OPcache v8.4.7, Copyright (c), by Zend Technologies
@pnwAlex commented on GitHub (Dec 3, 2025):
I figured out my mistake, I had previously set up an older version of BookStack and had done the 'composer update --no-dev' step, but I didn't realize after I did an update with git checkout v25.11.4, I needed to run composer update --no-dev again (looks like Git had wiped out that step during the branch checkout).
After composer was done updating, I restarted apache, and this time in laravel.log, instead of the cryptic missing column error, it told me the php-ldap module was not installed / enabled. Installing php-ldap, restarted apache2, and now LDAP logins are working correctly.
Thanks