Can't get oCIS working with LLDAP

poperigby · September 23, 2024, 3:29am

Steps to reproduce

Open the oCIS web interface
Attempt to login

Expected behaviour

I should be able to login

Actual behaviour

I’m greeted with this screen:

Server configuration

Operating system: NixOS

Web server: Caddy

ownCloud version: 5.0.7

Where did you install ownCloud from: nixpkgs

Environment variables

OCIS_LOG_LEVEL="debug"
OCIS_EXCLUDE_RUN_SERVICES="idp,idm"
PROXY_TLS="false"
OCIS_OIDC_ISSUER="https://auth.haddock.cc"
PROXY_OIDC_REWRITE_WELLKNOWN="true"
PROXY_OIDC_ACCESS_TOKEN_VERIFY_METHOD="none"
GRAPH_IDENTITY_BACKEND="ldap"
GRAPH_LDAP_SERVER_WRITE_ENABLED="false"
IDP_LDAP_LOGIN_ATTRIBUTE="uid"
IDP_LDAP_URI="ldap://localhost:3890"
IDP_LDAP_UUID_ATTRIBUTE="uuid"
LDAP_BIND_DN="cn=ocis,ou=people,dc=haddock,dc=cc"
LDAP_GROUP_BASE_DN="ou=groups,dc=haddock,dc=cc"
LDAP_GROUP_FILTER="(cn=lldap_users,ou=groups,dc=haddock,dc=cc)"
LDAP_GROUP_SCHEMA_ID="uuid"
LDAP_INSECURE="true"
LDAP_LOGIN_ATTRIBUTES="uid"
LDAP_USER_BASE_DN="ou=people,dc=haddock,dc=cc"
LDAP_USER_FILTER="(&(objectClass=person)(memberOf=cn=lldap_users,ou=groups,dc=haddock,dc=cc))"
LDAP_USER_SCHEMA_ID="uuid"
OCIS_LDAP_URI="ldap://localhost:3890"
NOTIFICATIONS_SMTP_HOST="smtp.sendgrid.net"
NOTIFICATIONS_SMTP_PORT="587"
NOTIFICATIONS_SMTP_SENDER="ocis@haddock.cc"
NOTIFICATIONS_SMTP_USERNAME="apikey"
WEB_OIDC_CLIENT_ID="REDACTED"
OCIS_LDAP_BIND_PASSWORD="REDACTED"
NOTIFICATIONS_SMTP_PASSWORD="REDACTED"
GATEWAY_STORAGE_USERS_MOUNT_ID="REDACTED"
GRAPH_APPLICATION_ID="REDACTED"
OCIS_ADMIN_USER_ID="REDACTED"
OCIS_JWT_SECRET="REDACTED"
OCIS_MACHINE_AUTH_API_KEY="REDACTED"
OCIS_SERVICE_ACCOUNT_ID="REDACTED"
OCIS_SERVICE_ACCOUNT_SECRET="REDACTED"
OCIS_SYSTEM_USER_API_KEY="REDACTED"
OCIS_SYSTEM_USER_ID="REDACTED"
OCIS_TRANSFER_SECRET="REDACTED"
STORAGE_USERS_MOUNT_ID="REDACTED"

Client configuration

Browser: Firefox

Logs

ownCloud log

gist.github.com

https://gist.github.com/poperigby/ecd19338c1004f3a9272cd69259f9b4a

gistfile1.txt

{"level":"debug","service":"nats","time":"2024-09-23T15:42:22-07:00","line":"github.com/owncloud/ocis/v2/services/nats/pkg/logging/nats.go:45","message":"127.0.0.1:56286 - cid:40 - Client Ping Timer"}
{"level":"debug","service":"nats","time":"2024-09-23T15:42:22-07:00","line":"github.com/owncloud/ocis/v2/services/nats/pkg/logging/nats.go:45","message":"127.0.0.1:56308 - cid:43 - Client Ping Timer"}
{"level":"debug","service":"nats","time":"2024-09-23T15:42:22-07:00","line":"github.com/owncloud/ocis/v2/services/nats/pkg/logging/nats.go:45","message":"127.0.0.1:56314 - cid:44 - Client Ping Timer"}
{"level":"debug","service":"nats","time":"2024-09-23T15:42:22-07:00","line":"github.com/owncloud/ocis/v2/services/nats/pkg/logging/nats.go:45","message":"127.0.0.1:56268 - cid:38 - Client Ping Timer"}
{"level":"debug","service":"nats","time":"2024-09-23T15:42:22-07:00","line":"github.com/owncloud/ocis/v2/services/nats/pkg/logging/nats.go:45","message":"127.0.0.1:56296 - cid:42 - Client Ping Timer"}
{"level":"debug","service":"nats","time":"2024-09-23T15:42:22-07:00","line":"github.com/owncloud/ocis/v2/services/nats/pkg/logging/nats.go:45","message":"127.0.0.1:56334 - cid:46 - Client Ping Timer"}
{"level":"debug","service":"nats","time":"2024-09-23T15:42:22-07:00","line":"github.com/owncloud/ocis/v2/services/nats/pkg/logging/nats.go:45","message":"127.0.0.1:56346 - cid:47 - Client Ping Timer"}
{"level":"debug","service":"nats","time":"2024-09-23T15:42:23-07:00","line":"github.com/owncloud/ocis/v2/services/nats/pkg/logging/nats.go:45","message":"127.0.0.1:56360 - cid:48 - Client Ping Timer"}
{"level":"debug","service":"nats","time":"2024-09-23T15:42:23-07:00","line":"github.com/owncloud/ocis/v2/services/nats/pkg/logging/nats.go:45","message":"JETSTREAM - JetStream connection closed: Client Closed"}
{"level":"debug","service":"nats","time":"2024-09-23T15:42:23-07:00","line":"github.com/owncloud/ocis/v2/services/nats/pkg/logging/nats.go:45","message":"JETSTREAM - JetStream connection closed: Client Closed"}

This file has been truncated. show original

LLDAP log

gist.github.com

https://gist.github.com/poperigby/0c842a84896d4d935843a649f226883e

gistfile1.txt

2024-09-23T22:46:56.440628519+00:00  DEBUG       │  │  ┕━ list_users [ 90.0µs | 0.18% ] filters: Some(Not(And([]))) | _get_groups: false
2024-09-23T22:46:56.441424844+00:00  DEBUG       │  │     ┕━ 🐛 [debug]:  | return: []
2024-09-23T22:46:56.441427054+00:00  DEBUG       │  ┝━ get_groups_list [ 104µs | 0.01% / 0.21% ]
2024-09-23T22:46:56.441430334+00:00  DEBUG       │  │  ┝━ 🐛 [debug]:  | filters: Member(UserId(CaseInsensitiveString("cassidy")))
2024-09-23T22:46:56.441431584+00:00  DEBUG       │  │  ┕━ list_groups [ 97.0µs | 0.19% ] filters: Some(Member(UserId(CaseInsensitiveString("cassidy"))))
2024-09-23T22:46:56.442113949+00:00  DEBUG       │  │     ┕━ 🐛 [debug]:  | return: [Group { id: GroupId(4), display_name: GroupName("lldap_users"), creation_date: 2024-07-07T23:16:52.222257, uuid: Uuid("537566be-26b5-3992-ace0-b7d7305975ae"), users: [UserId(CaseInsensitiveString("admin")), UserId(CaseInsensitiveString("cassidy")), UserId(CaseInsensitiveString("julian")), UserId(CaseInsensitiveString("shane")), UserId(CaseInsensitiveString("shawna"))], attributes: [] }]
2024-09-23T22:46:56.442115889+00:00  DEBUG       │  ┕━ expand_attribute_wildcards [ 940ns | 0.00% ] ldap_attributes: ["cn"]
2024-09-23T22:46:56.442116739+00:00  DEBUG       │     ┕━ 🐛 [debug]:  | resolved_attributes: ["cn"]
2024-09-23T22:46:56.442121119+00:00  DEBUG       ┝━ 🐛 [debug]:  | response: SearchResultEntry(LdapSearchResultEntry { dn: "cn=lldap_users,ou=groups,dc=haddock,dc=cc", attributes: [LdapPartialAttribute { atype: "cn", vals: ["lldap_users"] }] })
2024-09-23T22:46:56.442137259+00:00  DEBUG       ┕━ 🐛 [debug]:  | response: SearchResultDone(LdapResult { code: Success, matcheddn: "", message: "", referral: [] })

This file has been truncated. show original