Problem with LDAP login

[japanninja74]

The LDAP Login seems buggy. When looking at findAndBindUserLdap, if anonymous binding is working then everything looks good.

However, if one need an ldam_reader user and also binding can only be done with cn= instead, one need to first search by uid, retrieve the cn and finally compose the query.

The placeholder are never substituted in the ldap functions

[snipe]

@uberbrady I think you've touched LDAP stuff most recently and have been fielding several PRs around this stuff - can you take a look?

[snipe]

Hi there - can you confirm that you’re still seeing on latest on master?

[uberbrady]

Also, what exactly are the settings that you're using that aren't working how you expected? Feel free to redact out anything that you need to for security reasons.

[japanninja74]

Hi, I am still experiencing login issues. I am running snipe in a docker container and setting environment throught docker compose as following (

 - LDAP_LOGGING=true
  - LDAP_ENABLED=true
  - LDAP_SERVER=ldap://myserver.domain.xx
  - LDAP_PORT=389
  - LDAP_TLS=true
  - LDAP_TLS_INSECURE=false         # Set to true if you want to skip certificate validation (not recommended)
  - LDAP_TLS_REQCERT=allow          # Optional: 'never', 'allow', 'demand'
  - LDAP_BASE_DN=ou=People,dc=myserver,dc=domain,dc=xx
  - LDAP_DN=cn=admin,dc=myserver,dc=domain,dc=xx
  - LDAP_PASSWORD=xxxxx
  - LDAP_UID=uid
  - LDAP_FILTER=(&(objectClass=person)(uid=%s))
  - LDAP_SEARCH_USER_DN_ATTRIBUTE=cn
  - LDAP_BIND_AUTHENTICATION=true
  - LDAP_AUTO_CREATE_USERS=true
  - LDAP_PASSWORD_SYNC=false
  - LDAP_LOGIN_FALLBACK=false

If I test the LDAP Synchronization to the server in the admin area, I receive the following error:
The connection to LDAP was successful; however, no users were returned from your query. You should confirm the Base Bind DN above.

If I test the login with my username and password, I receive the following error:
Login Failed. Username did not successfully bind to LDAP.

All parameters are correct. The LDAP server, based on OpenLDAP, is operational.