Issue authenticating against freeipa - cannot parse valid group

[NunoHiggs]

Issue authenticating against freeipa - cannot parse valid group

[james-d-elliott]

Please show the output of the following commands:

ldapsearch -x -H ldaps://ipa.internal.xpto:33636 -b 'OU=groups,dc=net,DC=xpto' -D 'uid=query_bind,cn=users,cn=accounts,dc=internal,dc=xpto' -W "(objectClass=*)" uid,objectClass,cn
ldapsearch -x -H ldaps://ipa.internal.xpto:33636 -b 'OU=groups,dc=net,DC=xpto' -D 'uid=query_bind,cn=users,cn=accounts,dc=internal,dc=xpto' -W "(&(member=uid=nuno,cn=users,cn=accounts,dc=internal,dc=xpto)(objectclass=groupofnames))" uid,objectClass,cn

[NunoHiggs]

Please show the output of the following commands:

ldapsearch -x -H ldaps://ipa.internal.xpto:33636 -b 'OU=groups,dc=net,DC=xpto' -D 'uid=query_bind,cn=users,cn=accounts,dc=internal,dc=xpto' -W "(objectClass=*)" uid,objectClass,cn
ldapsearch -x -H ldaps://ipa.internal.xpto:33636 -b 'OU=groups,dc=net,DC=xpto' -D 'uid=query_bind,cn=users,cn=accounts,dc=internal,dc=xpto' -W "(&(member=uid=nuno,cn=users,cn=accounts,dc=internal,dc=xpto)(objectclass=groupofnames))" uid,objectClass,cn

Hi James,

Found the issue. I was following this documentation as described here: https://www.authelia.com/integration/ldap/introduction/

I got my auth to work w/group filter by switching from:

additional_groups_dn: OU=groups

to

additional_groups_dn: cn=groups,cn=accounts`

It appears that the bug is in the documentation then. Thanks for the help.

[james-d-elliott]

You have to adapt examples for your particular needs. There is a bug in your configuration. In the future please use discussions for questions, and do not double post.