# LDAP auth fails, while LDAP server gives the right answer **URL:** \ **Category:** Troubleshooting\ **Created:** [December 17, 2019, 3:00pm UTC](https://forum.mattermost.com/t/ldap-auth-fails-while-ldap-server-gives-the-right-answer/8646 "2019-12-17T15:00:24Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![christo](https://avatars.discourse-cdn.com/v4/letter/c/ebca7d/32.png) [@christo](https://forum.mattermost.com/u/christo)\ **Post date:** [December 17, 2019, 3:00pm UTC](https://forum.mattermost.com/t/ldap-auth-fails-while-ldap-server-gives-the-right-answer/8646/1 "2019-12-17T15:00:24Z")
For feature requests, please see: [http://www.mattermost.org/feature-requests/](http://www.mattermost.org/feature-requests/). For troubleshooting questions, please post in the following format: #### Summary We want to introduce Mattermost, but LDAP auth (which is essential) fails (“User not registered on AD/LDAP server”), while the LDAP-Server gives back the right answer. #### Detailed description Using version Mattermost 5.10.0 and OpenLDAP 2.4.45 on a Univention installation, the LDAP auth, which works with a handful other services properly, doesn’t work with MM. The only info, also in DEBUG mode, is this line ({“level”:“error”,“ts”:1576593395.9385178,“caller”:“mlog/log.go:172”,“msg”:“User not registered on AD/LDAP server”,“path”:"/api/v4/users/login",“request\_id”:“spmf4zhpwbbzme8chjrqj9ub4r”,“ip\_addr”:“x.y.z.11”,“user\_id”:"",“method”:“POST”,“err\_where”:“findUser”,“http\_code”:401,“err\_details”:“username=”}) while I can see on the LDAP log, that MM gets the right answer, but closes the connection not properly (LDAP-Server says: connection lost), and though LDAP gives back one proper entry (nentries=1), MM obviously doesn’t accept this and tries other properties which cannot work. Unfortunately I get no debug log on what MM receives and why it discards the answer. Dec 16 19:20:51 server slapd[16882]: conn=1146 fd=28 TLS established tls\_ssf=256 ssf=256 Dec 16 19:20:51 server slapd[16882]: conn=1146 op=0 BIND dn=“cn=matte-23,cn=memberserver,cn=computers,dc=fxt,dc=de” method=128 Dec 16 19:20:51 server slapd[16882]: conn=1146 op=0 BIND dn=“cn=matte-23,cn=memberserver,cn=computers,dc=fxt,dc=de” mech=SIMPLE ssf=0 Dec 16 19:20:51 server slapd[16882]: conn=1146 op=0 RESULT tag=97 err=0 text= Dec 16 19:20:51 server slapd[16882]: conn=1146 op=1 SRCH base=“dc=fxt,dc=de” scope=2 deref=3 filter="(&(uid=chris.moller)(&(objectClass=mattermostUser)(mattermostActivated=1)))" Dec 16 19:20:51 server slapd[16882]: conn=1146 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Dec 16 19:20:51 server slapd[16882]: conn=1146 fd=28 closed (connection lost) Dec 16 19:20:51 server slapd[16882]: conn=1147 fd=28 TLS established tls\_ssf=256 ssf=256 Dec 16 19:20:51 server slapd[16882]: conn=1147 op=0 BIND dn=“cn=matte-23,cn=memberserver,cn=computers,dc=fxt,dc=de” method=128 Dec 16 19:20:51 server slapd[16882]: conn=1147 op=0 BIND dn=“cn=matte-23,cn=memberserver,cn=computers,dc=fxt,dc=de” mech=SIMPLE ssf=0 Dec 16 19:20:51 server slapd[16882]: conn=1147 op=0 RESULT tag=97 err=0 text= Dec 16 19:20:51 server slapd[16882]: conn=1147 op=1 SRCH base=“dc=fxt,dc=de” scope=2 deref=3 filter="(&(?uidNumber=)(&(objectClass=mattermostUser)(mattermostActivated=1)))" Dec 16 19:20:51 server slapd[16882]: conn=1147 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text= #### What is going wrong? ---
**Author:** ![amy.blais](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/amy.blais/32/7481_2.png) [@amy.blais](https://forum.mattermost.com/u/amy.blais)\ **Post date:** [December 18, 2019, 12:40am UTC](https://forum.mattermost.com/t/ldap-auth-fails-while-ldap-server-gives-the-right-answer/8646/2 "2019-12-18T00:40:32Z")
@christo Would there be an issue for you to upgrade your server version? Our latest stable version is v5.17.0 [https://docs.mattermost.com/administration/changelog.html#release-v5-17-quality-release](https://docs.mattermost.com/administration/changelog.html#release-v5-17-quality-release). ---
**Author:** ![ahmaddanial](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/ahmaddanial/32/2938_2.png) [@ahmaddanial](https://forum.mattermost.com/u/ahmaddanial)\ **Post date:** [December 18, 2019, 4:55am UTC](https://forum.mattermost.com/t/ldap-auth-fails-while-ldap-server-gives-the-right-answer/8646/3 "2019-12-18T04:55:37Z")
Hello, @christo On top of the suggestion by Amy to upgrade to the latest version, I would like to confirm how AD / LDAP is currently being configured on your Mattermost instance based on the following error: > [@christo](#): > > ({“level”:“error”,“ts”:1576593395.9385178,“caller”:“mlog/log.go:172”,“msg”:“User not registered on AD/LDAP server”,“path”:“/api/v4/users/login”,“request\_id”:“spmf4zhpwbbzme8chjrqj9ub4r”,“ip\_addr”:“x.y.z.11”,“user\_id”:“”,“method”:“POST”,“err\_where”:“findUser”,“http\_code”:401,“err\_details”:“username=”}) Please refer to the following questions below: - Will it be possible for you to attach a snippet of the `LdapSettings` section with the sensitive information **removed** so we can take a look at it? ```auto cat /opt/mattermost/config/config.json | grep -A30 "LdapSettings" ``` - Can you run the `ldap_check.sh` script [located here](https://github.com/mattermost/mattermost-server/blob/master/scripts/ldap-check.sh) from inside the `/opt/mattermost` directory to _double check_ that the user is on the LDAP server? - While the LDAP configuration values are case-sensitive, can you also verify that the config file has the right cases for the LDAP and SAML fields based on how your server is configured? - Can you also run the SQL query below to verify if there are any LDAP users in the system as of now? ```auto SELECT Username, AuthData, AuthService FROM Users WHERE AuthService = "ldap"; ``` ---
**Author:** ![christo](https://avatars.discourse-cdn.com/v4/letter/c/ebca7d/32.png) [@christo](https://forum.mattermost.com/u/christo)\ **Post date:** [December 18, 2019, 10:04am UTC](https://forum.mattermost.com/t/ldap-auth-fails-while-ldap-server-gives-the-right-answer/8646/4 "2019-12-18T10:04:11Z")
Hi ahmaddanial, thanks for your support! Further analysis following your remarks showed up, that it seems to be a ldap-server problem. Mattermost can connect on one port, but not search, while from another server (I couldn’t use ldap-check, because no ldapsearch is available in the docker container) I cannot connect on the port mattermost can connect, but can connect and search on the port mattermost fails. I close here. BR, Christian