[Solved] Working configuration for Auth via OpenLDAP?

Support
1

My version of HedgeDoc is: 1.9.0

What I expected to happen: Authentication against OpenLAP

I have a working HedgeDoc setup based on Docker. Now I’d like to authenticate users only against our OpenLDAP DIT. But I do not find a working setting, so the authentication is not working. I also do not know how to debug the authentication process.

This is my current configuration:

- CMD_ALLOW_ANONYMOUS=false
- CMD_ALLOW_EMAIL_REGISTER=false
- CMD_LDAP_URL=ldap://10.9.0.155
- CMD_LDAP_BINDDN=cn=admin,dc=my-domain,dc=de
- CMD_LDAP_BINDCREDENTIALS="passForAdmin"
- CMD_LDAP_SEARCHBASE=ou=People,dc=my-domain,dc=de
# - CMD_LDAP_SEARCHFILTER=(&(objectClass=inetOrgPerson)(|(uid={{username}})(mail={{username}})))
- CMD_LDAP_SEARCHFILTER=(uid={{username}})
- CMD_LDAP_USERIDFIELD=uid
- CMD_LDAP_PROVIDERNAME="My-Domain"
- CMD_LOGLEVEL=debug
- DEBUG=true

Does anyone have a working configuration for authentication against an OpenLDAP-DIT?

2 
"CMD_LDAP_URL=ldap://openldap",
"CMD_LDAP_BINDDN=cn=hedgedoc,ou=programs,dc=domain,dc=de",
"CMD_LDAP_BINDCREDENTIALS=<redacted>",
"CMD_LDAP_SEARCHBASE=ou=users,dc=domain,dc=de",
"CMD_LDAP_SEARCHFILTER=(&(uid={{username}})(objectClass=inetOrgPerson))",
"CMD_LDAP_USERIDFIELD=uid",
"CMD_LDAP_USERNAMEFIELD=uid",
"CMD_LDAP_PROVIDERNAME=LDAP",

Works for me

3

With your answer @mrdrogdrog I had the hint to what was wrong in my configuration. I had double-quoted the password behind CMD_LDAP_BINDCREDENTIALS. After I removed them, just the password without quotes after the =, also my configuration worked.

Thank you!

4