LDAP Groups With Spaces? #580

Closed
opened 2026-02-04 21:18:13 +03:00 by OVERLORD · 3 comments
Owner

Originally created by @atutrone on GitHub (Feb 28, 2018).

Hi --

Is there an easy way to handle LDAP/AD groups that contain spaces?

Have a BASE_DN as such:

LDAP_BASE_DN=CN=CN Name,OU=Group Name,DC=domain,DC=net

leaving it like that causes BookStack not to load.

If I wrap it in quotes:

LDAP_BASE_DN="CN=CN Name,OU=Group Name,DC=domain,DC=net"

BookStack loads but logins fail. No exception is thrown in the debug window.

Also tried:

LDAP_BASE_DN=CN=CN%20Name,OU=Group%20Name,DC=domain,DC=net

Which errors out:

ldap_search(): Search: No such object

I was able to get it to work by shrinking it down to:

LDAP_BASE_DN=DC=domain,DC=net

But that's really broad for us as I'm almost certain this would grant access to the entire domain.

Any ideas?

Thank you

Originally created by @atutrone on GitHub (Feb 28, 2018). Hi -- Is there an easy way to handle LDAP/AD groups that contain spaces? Have a BASE_DN as such: `LDAP_BASE_DN=CN=CN Name,OU=Group Name,DC=domain,DC=net` leaving it like that causes BookStack not to load. If I wrap it in quotes: `LDAP_BASE_DN="CN=CN Name,OU=Group Name,DC=domain,DC=net"` BookStack loads but logins fail. No exception is thrown in the debug window. Also tried: `LDAP_BASE_DN=CN=CN%20Name,OU=Group%20Name,DC=domain,DC=net` Which errors out: `ldap_search(): Search: No such object` I was able to get it to work by shrinking it down to: `LDAP_BASE_DN=DC=domain,DC=net` But that's really broad for us as I'm almost certain this would grant access to the entire domain. Any ideas? Thank you
Author
Owner

@watschi commented on GitHub (Mar 2, 2018):

Dont't specify the CN in LDAP_BASE_DN="CN=CN Name,OU=Group Name,DC=domain,DC=net"

Go up to the last OU with the Users you want to have access to Bookstack, put the string in quotes:

LDAP_BASE_DN="OU=Group Name,DC=domain,DC=net"

This worked for me.

@watschi commented on GitHub (Mar 2, 2018): Dont't specify the `CN` in `LDAP_BASE_DN="CN=CN Name,OU=Group Name,DC=domain,DC=net"` Go up to the last OU with the Users you want to have access to Bookstack, put the string in quotes: `LDAP_BASE_DN="OU=Group Name,DC=domain,DC=net"` This worked for me.
Author
Owner

@atutrone commented on GitHub (Mar 6, 2018):

Interesting. Alright, I'll give it a shot. Thanks, @watschi

@atutrone commented on GitHub (Mar 6, 2018): Interesting. Alright, I'll give it a shot. Thanks, @watschi
Author
Owner

@ssddanbrown commented on GitHub (Sep 23, 2018):

Since the last comment on this issue is relatively old I'm going to close this. If the issue remains and is something you still require to be fixed please comment and this can be reopened if required.

@ssddanbrown commented on GitHub (Sep 23, 2018): Since the last comment on this issue is relatively old I'm going to close this. If the issue remains and is something you still require to be fixed please comment and this can be reopened if required.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#580