#LDAP not Syncing :(

1 messages · Page 1 of 1 (latest)

whole viper
#

Hi guys, I'm trying to get my LDAP Source from ActiveDirectory synced to my authentik instance.

The "Check connectivity for LDAP source." is successfull but the "Sync LDAP source." is not. I tis always looking like this from the screenshot.

Can someone help me out?

whole viper
#

domaincontroller(redacted): LDAPInvalidCredentialsResult - 49 - invalidCredentials - None - 80090308: LdapErr: DSID-0C09052B, comment: AcceptSecurityContext error, data 775, v4f7c - bindResponse - None
Global status: LDAPInvalidCredentialsResult - 49 - invalidCredentials - None - 80090308: LdapErr: DSID-0C09052B, comment: AcceptSecurityContext error, data 775, v4f7c - bindResponse - None

credentials are absoluty correct

#

ok I was able to sync now after remove the old entry and created a new entry for federated login....

the only errors appear now are this one:

gray saffron
#

does the error go away after a few syncs as it seems to be cache?

whole viper
#

ok some errors are gone, my users appear now in authentik.

i get a lot of this errors now:

Failed to create group: Group() got unexpected keyword arguments: 'username', 'path', 'email' To merge new group with existing group, set the groups's Attribute 'ldap_uniq' to 'S-1-5-21-922127421-125004011-922735530-10768'
#

guess it whas because of the default mappings, i switched it to this now and hope it will work

#

mhhh still this error

gray saffron
#

@whole viper I only have one mapping for groups active which looks like this

#

so whatever your ldap setup is, "name" should be mapped to the name ( in my case cn )

whole viper
#

was able to fix it. I guess the main problem was that we hit too often the schedule now button and then it tried it too long with wrong settings and we thought it is using the ones that should work...