[GH-ISSUE #1787] 💬 [Question] LDAP auth config issue #709

Closed
opened 2026-02-25 21:35:43 +03:00 by kerem · 2 comments
Owner

Originally created by @kevinend51 on GitHub (Nov 11, 2025).
Original GitHub issue: https://github.com/cypht-org/cypht/issues/1787

Originally assigned to: @IrAlfred on GitHub.

💬 Question

Thanks for your help for #1481. I'm now closer to successfully configure LDAP auth.

The last obstacle is about the DN format. I'm using authentik and being able to bind my ldap account:

ldapsearch -x   -H ldap://authentik.domain   -D 'cn=someuser,DC=ldap,DC=goauthentik,DC=io'   -w '******'   -b 'DC=ldap,DC=goauthentik,DC=io'   '(objectClass=user)

However, I found cypht's LDAP auth bind the user DN with uid=someuser,DC=ldap,DC=goauthentik,DC=io. This will cause my authentik server failed to auth. I try to find config to make uid= become cn= but there seems no such an option. How could I solve this issue?

Originally created by @kevinend51 on GitHub (Nov 11, 2025). Original GitHub issue: https://github.com/cypht-org/cypht/issues/1787 Originally assigned to: @IrAlfred on GitHub. <!-- You can find the latest issue templates here https://github.com/ulfgebhardt/issue-templates --> <!-- Question the project's team --> <!-- If you need an answer right away, consider to take other means of communication with the project's team --> ## 💬 Question <!-- Describe your Question in detail. Include screenshots and drawings if needed. --> Thanks for your help for #1481. I'm now closer to successfully configure LDAP auth. The last obstacle is about the DN format. I'm using authentik and being able to bind my ldap account: ``` ldapsearch -x -H ldap://authentik.domain -D 'cn=someuser,DC=ldap,DC=goauthentik,DC=io' -w '******' -b 'DC=ldap,DC=goauthentik,DC=io' '(objectClass=user) ``` However, I found cypht's LDAP auth bind the user DN with `uid=someuser,DC=ldap,DC=goauthentik,DC=io`. This will cause my authentik server failed to auth. I try to find config to make `uid=` become `cn=` but there seems no such an option. How could I solve this issue?
kerem 2026-02-25 21:35:43 +03:00
  • closed this issue
  • added the
    question
    label
Author
Owner

@IrAlfred commented on GitHub (Nov 11, 2025):

Hello @kevinend51,

Thank you for your question.

About

I try to find config to make uid= become cn= but there seems no such an option.

The option exists,

LDAP_UID_ATTR="uid"

LDAP_AUTH_UID_ATTR="uid"

you can change uid to cn. With docker you need to remove the quotes.

<!-- gh-comment-id:3517366680 --> @IrAlfred commented on GitHub (Nov 11, 2025): Hello @kevinend51, Thank you for your question. About > I try to find config to make uid= become cn= but there seems no such an option. The option exists, LDAP_UID_ATTR="uid" LDAP_AUTH_UID_ATTR="uid" you can change `uid` to `cn`. With docker you need to remove the quotes.
Author
Owner

@kevinend51 commented on GitHub (Nov 11, 2025):

Thanks, I finally made it!

<!-- gh-comment-id:3519246675 --> @kevinend51 commented on GitHub (Nov 11, 2025): Thanks, I finally made it!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/cypht#709
No description provided.