Can't get any groups from ldap
I have the problem that when I log in via ldap, no groups are found. I use openldap. My Docker config looks like this:
AUTH_PROVIDERS: “ldap”
AUTH_LDAP_URI: “ldap://server:port”
AUTH_LDAP_BASE: “dc=our-dn,dc=en”
AUTH_LDAP_BIND_DN: “uid=ldapuser,cn=users,dc=our-dn,dc=de”
AUTH_LDAP_BIND_PASSWORD: 'password'
AUTH_LDAP_USERNAME_ATTRIBUTE: “uid”
AUTH_LDAP_USER_MAIL_ATTRIBUTE: “mailPrimaryAddress”
AUTH_LDAP_GROUP_CLASS: “groupOfUniqueNames”
AUTH_LDAP_GROUP_MEMBER_ATTRIBUTE: “member”
AUTH_LDAP_GROUP_MEMBER_USER_ATTRIBUTE: “dn”
# AUTH_LDAP_ADMIN_GROUP: “Admin-GROUP”
AUTH_LDAP_SEARCH_SCOPE: “sub”
AUTH_LDAP_USERNAME_FILTER_EXTRA_ARG: “(&(uid=*)(memberof=cn=Admin-GROUP,cn=groups,dc=our-dn,dc=de))”
The registration works but groups are not found.
Log:
homarr | 2025-04-15T12:56:08.836Z info: user hans is trying to log in using LDAP. Connecting to LDAP server...
homarr | 2025-04-15T12:56:08.847Z info: Connected to LDAP server. Searching for user...
homarr | 2025-04-15T12:56:08.851Z info: User hans found in LDAP. Logging in...
homarr | 2025-04-15T12:56:08.855Z info: User hans logged in successfully, retrieving user groups...
homarr | 2025-04-15T12:56:08.857Z info: Found 0 groups for user hans.
Translated with DeepL.com (free version)
7 Replies
Thank you for submitting a support request.
Depending on the volume of requests, our team should get in contact with you shortly.
⚠️ Please include the following details in your post or we may reject your request without further comment: - Log (See https://homarr.dev/docs/community/faq#how-do-i-open-the-console--log) - Operating system (Unraid, TrueNAS, Ubuntu, ...) - Exact Homarr version (eg. 0.15.0, not latest) - Configuration (eg. docker-compose, screenshot or similar. Use ``your-text`` to format) - Other relevant information (eg. your devices, your browser, ...)
Frequently Asked Questions | Homarr documentation
Can I install Homarr on a Raspberry Pi?
Is the groups object flat? Homarr only supports flattened group objects
Yes the groups are flat.
And you can confirm, that you've read https://homarr.dev/docs/next/advanced/single-sign-on/ and configured them correctly?
Single Sign On | Homarr documentation
Homarr supports multiple authentication options, from internal userbase (credentials), to LDAP (with Active directory support), and OIDC.
I think so, I have already looked over it with a friend who is more familiar with ldap than I am but I can ask someone else tomorrow if we can look at the configuration again
@Meierschlumpf can you take a look?
Is it correct, that your second dc for
AUTH_LDAP_BASE is en and not de as all the others?
I've never used openldap, is it possible to run this with docker? If so can you create a simple reproduction? Then we can try it out