Server: LDAPS shows Password wrong?

[ExaconAT]

_Originally posted by @ExaconAT in https://github.com/nextcloud/server/issues/11670#issuecomment-440248482_

[nextcloud-bot]

GitMate.io thinks possibly related issues are https://github.com/nextcloud/server/issues/8785 (Password expiration), https://github.com/nextcloud/server/issues/7218 (No feedback after password (re)set), https://github.com/nextcloud/server/issues/2431 (App passwords vanish), https://github.com/nextcloud/server/issues/1262 (Force a password change), and https://github.com/nextcloud/server/issues/5756 (LDAPS Password forgotten when verify loginname text box changed).

[ExaconAT]

Nope

[kesselb]

Hmm. A new issue as reference to a comment in a another issue is bad. Could you at least update the entry post with all information from the issue template?

Are u sure that this is a software issue at all? Looks like a configuration issue to me. For those we recommend https://help.nextcloud.com/.

[ExaconAT]

LDAPS Login should work with the following settings:

Apparently, set ldapExpertUsernameAttr to "cn" and ldapExpertUUIDUserAttr to "uid" makes it work. Close duplicate.

But i get always password wrong when i set this Attributes.

My CNF:

+-------------------------------+----------------------------------------------------+
| Configuration | |
+-------------------------------+----------------------------------------------------+
| hasMemberOfFilterSupport | 1 |
| hasPagedResultSupport | |
| homeFolderNamingRule | |
| lastJpegPhotoLookup | 0 |
| ldapAgentName | [email protected] |
| ldapAgentPassword | * |
| ldapAttributesForGroupSearch | |
| ldapAttributesForUserSearch | |
| ldapBackupHost | |
| ldapBackupPort | |
| ldapBase | dc=dev,dc=local |
| ldapBaseGroups | ou=nc,dc=dev,dc=local |
| ldapBaseUsers | ou=nc,dc=dev,dc=local |
| ldapCacheTTL | 10 |
| ldapConfigurationActive | 1 |
| ldapDefaultPPolicyDN | |
| ldapDynamicGroupMemberURL | |
| ldapEmailAttribute | mail |
| ldapExperiencedAdmin | 0 |
| ldapExpertUUIDGroupAttr | |
| ldapExpertUUIDUserAttr | uid |
| ldapExpertUsernameAttr | cn |
| ldapGidNumber | gidNumber |
| ldapGroupDisplayName | cn |
| ldapGroupFilter | (&(|(objectclass=group))) |
| ldapGroupFilterGroups | |
| ldapGroupFilterMode | 0 |
| ldapGroupFilterObjectclass | group |
| ldapGroupMemberAssocAttr | member |
| ldapHost | ldaps://dev01.dev.local |
| ldapIgnoreNamingRules | |
| ldapLoginFilter | (&(&(|(objectclass=person)))(samaccountname=%uid)) |
| ldapLoginFilterAttributes | |
| ldapLoginFilterEmail | 0 |
| ldapLoginFilterMode | 0 |
| ldapLoginFilterUsername | 1 |
| ldapNestedGroups | 0 |
| ldapOverrideMainServer | |
| ldapPagingSize | 500 |
| ldapPort | 636 |
| ldapQuotaAttribute | |
| ldapQuotaDefault | |
| ldapTLS | 0 |
| ldapUserAvatarRule | default |
| ldapUserDisplayName | displayname |
| ldapUserDisplayName2 | |
| ldapUserFilter | (&(|(objectclass=person))) |
| ldapUserFilterGroups | |
| ldapUserFilterMode | 0 |
| ldapUserFilterObjectclass | person |
| ldapUuidGroupAttribute | auto |
| ldapUuidUserAttribute | auto |
| turnOffCertCheck | 0 |
| turnOnPasswordChange | 1 |
| useMemberOfToDetectMembership | 1 |
+-------------------------------+----------------------------------------------------+

[MorrisJobke]

As there is no report since a while and we can't reproduce the issue I will close this ticket. If this is still happening please feel free to reopen.